Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: 9cEgN7Li0QcWc47x56UlcYur00smfwIMxLK2gWiWgc8=
Subject key identifier: 17:E8:38:B9:0A:4C:58:91:A7:88:F6:0D:96:C8:4B:2A:48:1F:F5:D5
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 0194BC3BCFBCE5F8A10A3F3C68583280201D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 1206
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 04Go/jZnqqIQU7NxHTH9CMOPyoISXN3h61ytMYAmFTM=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:bc:e5:f8:a1:0a:3f:3c:68:58:32:80:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=17e838b90a4c5891a788f60d96c84b2a481ff5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:38:fc:e4:fe:ab:69:92:62:35:ac:bf:ad:ac:
b9:5e:cc:32:61:5d:fc:26:06:9d:78:f5:62:2f:b5:
e3:be:42:49:2b:66:63:2e:a9:3e:df:b3:9b:31:7b:
0a:b7:18:b8:35:8b:24:af:9c:bb:16:c9:0b:97:5a:
44:bd:22:e7:d1:11:f9:42:a2:4b:93:d5:e8:3e:26:
75:89:ad:e3:5a:e4:bc:e6:69:3a:67:80:26:38:dd:
20:58:c5:d1:2e:f9:60:b1:08:57:f9:48:10:52:c5:
41:d2:3f:4f:57:76:e8:16:64:bc:cb:c6:b8:6e:45:
d6:e9:1a:7a:91:29:b9:e1:ee:eb:cf:16:db:b1:63:
17:e4:b8:ed:df:9a:f9:83:a7:f3:83:4b:9b:37:af:
d0:b9:61:ce:e3:9d:5f:3d:cb:e9:64:2f:74:8d:41:
52:73:05:3c:c2:9b:f0:36:3d:1d:79:76:4d:1d:5b:
44:e3:bb:32:48:1b:f3:f3:e7:d0:87:46:e5:cc:f2:
92:39:cd:33:40:c7:c2:a5:0f:de:05:3e:34:db:f1:
e1:03:83:4d:bd:44:9b:1b:7f:48:c0:1b:9f:63:04:
58:32:80:71:50:4e:da:2e:43:aa:ed:42:01:15:1b:
df:cc:00:4f:79:14:32:b0:56:63:b8:7b:64:eb:14:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E8:38:B9:0A:4C:58:91:A7:88:F6:0D:96:C8:4B:2A:48:1F:F5:D5
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9a:80:6f:19:1c:58:65:54:ed:ee:58:2e:7f:05:43:98:48:
1e:a2:2a:6e:70:44:48:de:4b:e8:e8:7b:96:f5:3f:76:7d:ae:
25:53:18:8a:88:a3:72:28:46:89:e0:b9:78:70:62:fa:eb:d3:
4d:60:09:b7:9a:20:45:80:4d:f3:e0:ce:d2:63:64:67:6f:8a:
9f:a0:34:55:d8:05:55:48:52:c2:e5:9a:7b:14:a5:20:d5:0e:
a5:70:9c:24:5f:29:0b:ef:76:9e:00:d9:17:d0:bf:d7:c2:34:
dd:8b:03:b3:f6:82:21:3b:d8:c9:f3:97:10:70:00:75:d1:8c:
ed:f3:2a:a4:43:c8:3d:23:67:6e:80:f2:19:7b:bf:85:a1:50:
b4:8a:74:0c:f9:a6:a7:c0:84:0e:21:1c:98:4b:db:09:28:a2:
c5:9c:b1:e1:26:dc:fb:0a:76:a0:50:4c:8f:ca:b1:af:86:30:
54:f1:11:20:3b:f2:a8:e4:10:81:1a:53:2f:85:c5:d8:c2:87:
2d:b9:16:2e:28:71:89:a6:b8:ad:dd:ea:0a:7a:30:c4:6b:28:
53:a7:84:f2:aa:2e:0e:3f:74:b3:fa:90:4a:28:71:f4:1b:b3:
60:1b:4d:7a:15:e2:4e:30:3d:46:75:ee:98:76:34:ec:96:e9:
5b:e5:f1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8+85fihCj88aFgygCAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjBlNGYxODE4M2ZiZDlkNjk1MGVlYTQzM2ZlNWQyMTZi
ZDVmMTIwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
EygxN2U4MzhiOTBhNGM1ODkxYTc4OGY2MGQ5NmM4NGIyYTQ4MWZmNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Tj85P6raZJiNay/ray5XswyYV38
JgadePViL7XjvkJJK2ZjLqk+37ObMXsKtxi4NYskr5y7FskLl1pEvSLn0RH5QqJL
k9XoPiZ1ia3jWuS85mk6Z4AmON0gWMXRLvlgsQhX+UgQUsVB0j9PV3boFmS8y8a4
bkXW6Rp6kSm54e7rzxbbsWMX5Ljt35r5g6fzg0ubN6/QuWHO451fPcvpZC90jUFS
cwU8wpvwNj0deXZNHVtE47sySBvz8+fQh0blzPKSOc0zQMfCpQ/eBT402/HhA4NN
vUSbG39IwBufYwRYMoBxUE7aLkOq7UIBFRvfzABPeRQysFZjuHtk6xR5GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfoOLkKTFiRp4j2DZbISypIH/XVMB8GA1UdIwQY
MBaAFCSw5PGBg/vZ1pUO6kM/5dIWvV8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEt
NWJhNTk1NGRmYzM3LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NDliY2YtZGE1Zi00Yzk3LTk3YjEtNWJhNTk1NGRmYzM3
LzEvSkxEazhZR0QtOW5XbFE3cVF6X2wwaGE5WHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJqAbxkc
WGVU7e5YLn8FQ5hIHqIqbnBESN5L6Oh7lvU/dn2uJVMYioijcihGieC5eHBi+uvT
TWAJt5ogRYBN8+DO0mNkZ2+Kn6A0VdgFVUhSwuWaexSlINUOpXCcJF8pC+92ngDZ
F9C/18I03YsDs/aCITvYyfOXEHAAddGM7fMqpEPIPSNnboDyGXu/haFQtIp0DPmm
p8CEDiEcmEvbCSiixZyx4Sbc+wp2oFBMj8qxr4YwVPERIDvyqOQQgRpTL4XF2MKH
LbkWLihxiaa4rd3qCnowxGsoU6eE8qouDj90s/qQSihx9BuzYBtNehXiTjA9RnXu
mHY07JbpW+XxEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:38 2025 by rpki-client