Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: x9f4XdPrufjL3WJQpGCc2UCLBdy+04mOupVTIo7YOqY=
Subject key identifier: 10:66:D2:E4:60:78:99:DC:93:67:4B:5C:6D:F3:CB:A2:A1:39:8E:0F
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 0194BCA98F6E06A42B3214189C4EDA45D70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: RcnY1QArZ9FSHS0hZ6BmOL7quy/xotThMiiqKqYhFQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:6e:06:a4:2b:32:14:18:9c:4e:da:45:d7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=1066d2e4607899dc93674b5c6df3cba2a1398e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:73:af:d3:e0:50:04:10:67:8e:1a:de:39:
79:40:1a:a5:8e:f4:9d:e4:3c:93:40:82:cb:32:95:
8f:a3:d8:af:63:b2:a3:3c:51:7d:0d:ce:3d:86:b1:
92:91:a8:91:61:c1:a6:cd:a7:a6:31:cd:d5:f6:7d:
68:9a:ca:0d:6e:f7:4d:b9:4f:bc:9c:ee:38:89:53:
dd:d5:8e:b5:cb:5d:8e:53:21:da:b7:f4:e6:a2:ee:
74:16:33:01:46:bb:84:3a:a1:5b:40:06:6c:bb:e4:
13:e2:05:c3:30:33:fb:fd:47:18:74:a9:75:fa:4d:
85:aa:58:b0:3d:69:4a:66:fb:d9:ec:bc:59:96:1f:
e8:38:54:a6:37:bc:47:9a:5f:a9:ef:76:95:97:e4:
47:4a:0c:4b:ea:d8:87:3f:0a:8a:15:ff:b8:5c:e3:
1b:db:66:b8:e6:3d:7d:cf:36:09:b3:0c:3c:6e:47:
60:96:c4:8c:2a:3e:3a:15:f8:94:84:a0:69:d0:dc:
fc:64:f4:c7:f3:d3:be:1c:50:30:ae:e1:f3:70:3e:
12:37:41:b7:29:ee:a5:41:a1:4e:ce:1a:ee:6e:07:
c5:3a:30:d5:45:68:a0:dc:31:e8:db:7c:1d:5c:9c:
99:c0:61:9e:18:94:f0:d9:1c:0b:ab:16:e7:e7:65:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:66:D2:E4:60:78:99:DC:93:67:4B:5C:6D:F3:CB:A2:A1:39:8E:0F
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:21:65:98:94:79:5e:67:b2:b6:ba:ea:d9:3e:48:cd:f4:5f:
3e:df:37:27:13:96:85:6b:2e:52:a0:e6:85:c3:47:99:67:4a:
e5:f5:f4:d5:a2:ae:0a:ee:79:d8:99:9b:8f:52:20:eb:9a:12:
b5:bb:40:4d:82:2d:a0:fc:77:e0:9b:0c:14:e3:dd:2e:5d:aa:
6d:85:0d:11:ce:64:d0:4a:57:f5:3b:5b:ef:4a:bf:7d:d3:db:
5d:e6:c6:36:53:2e:2f:07:95:b7:61:8f:3b:11:23:5b:04:00:
a8:50:38:fb:f0:98:ae:61:0a:03:2f:af:ef:65:69:dc:c0:8e:
32:45:c3:3c:48:8b:b2:bc:76:60:78:8f:85:fe:6d:32:71:9f:
a3:29:12:60:af:c3:3f:51:ce:40:3b:4f:c0:10:18:48:e3:26:
57:19:40:e3:ac:4a:1b:ac:57:ce:39:2c:77:05:de:30:d9:79:
82:c9:6f:a7:bd:fb:15:27:74:1f:6a:e0:65:fd:5d:32:f1:03:
73:af:39:6a:4f:52:75:a1:df:b8:57:8b:2b:fb:6f:08:2d:b5:
cb:4f:e0:0c:96:0c:d7:e0:07:30:a3:e9:e0:a5:e2:41:12:04:
56:9c:45:7d:74:c2:01:65:9c:d0:9e:f7:79:a6:03:5f:84:42:
35:83:af:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY9uBqQrMhQYnE7aRdcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDlmNGE0Y2Q4MjkzNDQ1MTlmNDUyYTNiMGUxZTY2ZmU4
ZDNlMjUwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
EygxMDY2ZDJlNDYwNzg5OWRjOTM2NzRiNWM2ZGYzY2JhMmExMzk4ZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNlzr9PgUAQQZ44a3jl5QBqljvSd
5DyTQILLMpWPo9ivY7KjPFF9Dc49hrGSkaiRYcGmzaemMc3V9n1omsoNbvdNuU+8
nO44iVPd1Y61y12OUyHat/Tmou50FjMBRruEOqFbQAZsu+QT4gXDMDP7/UcYdKl1
+k2FqliwPWlKZvvZ7LxZlh/oOFSmN7xHml+p73aVl+RHSgxL6tiHPwqKFf+4XOMb
22a45j19zzYJsww8bkdglsSMKj46FfiUhKBp0Nz8ZPTH89O+HFAwruHzcD4SN0G3
Ke6lQaFOzhrubgfFOjDVRWig3DHo23wdXJyZwGGeGJTw2RwLqxbn52Uc9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBm0uRgeJnck2dLXG3zy6KhOY4PMB8GA1UdIwQY
MBaAFI9J9KTNgpNEUZ9FKjsOHmb+jT4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgt
MTQwYWFkYTU0YjYxLzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgtMTQwYWFkYTU0YjYx
LzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESFlmJR5
Xmeytrrq2T5IzfRfPt83JxOWhWsuUqDmhcNHmWdK5fX01aKuCu552Jmbj1Ig65oS
tbtATYItoPx34JsMFOPdLl2qbYUNEc5k0EpX9Ttb70q/fdPbXebGNlMuLweVt2GP
OxEjWwQAqFA4+/CYrmEKAy+v72Vp3MCOMkXDPEiLsrx2YHiPhf5tMnGfoykSYK/D
P1HOQDtPwBAYSOMmVxlA46xKG6xXzjksdwXeMNl5gslvp737FSd0H2rgZf1dMvED
c685ak9SdaHfuFeLK/tvCC21y0/gDJYM1+AHMKPp4KXiQRIEVpxFfXTCAWWc0J73
eaYDX4RCNYOv8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:21 2025 by rpki-client