Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: 43V9XZlol1nv7zE02KCvPE/r3WUuxPdpzbiXVNSy9gg=
Subject key identifier: 10:1D:81:5D:91:A8:0C:F2:82:5A:B0:A1:48:E7:36:AF:50:C0:D5:CF
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0194BD85A067CA07CEBD6228AA34E053C1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: 5VEKKeLU1ZEvfuft7plxw9ED8yfZYdLy1GLiE1GAvAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:67:ca:07:ce:bd:62:28:aa:34:e0:53:c1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=101d815d91a80cf2825ab0a148e736af50c0d5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:92:ab:ff:e5:fc:9e:3f:ec:2d:ed:e2:4c:
20:71:ec:fd:be:28:17:0b:eb:4b:00:18:65:be:35:
07:70:aa:e1:42:b2:3f:96:eb:2d:fd:53:1b:1e:b3:
8c:88:a7:2f:ee:f3:59:bc:88:bf:5e:b6:e1:26:7c:
16:e7:e5:94:f2:23:54:d6:81:49:0e:b8:de:50:21:
9a:55:2f:7b:13:63:a3:ff:93:43:15:e9:98:59:a8:
7c:40:76:3b:68:24:b9:ed:6e:74:6c:f6:98:87:8b:
ce:81:f1:71:d6:e7:68:30:89:70:34:c0:f9:85:9b:
34:75:ba:e4:93:03:39:7f:ae:0e:a2:7d:5e:40:31:
e4:57:f6:a3:04:22:a3:ca:f8:85:a3:b1:12:35:1f:
b3:89:24:b7:d2:02:d3:69:b7:f6:16:7e:34:eb:90:
7c:4e:31:61:8b:1f:ec:31:33:69:1b:59:83:23:e2:
12:b3:3a:48:9c:4b:ca:a9:67:8f:ea:92:63:dd:26:
ba:63:a9:fd:d1:9f:d1:84:fb:17:97:75:7c:23:9b:
54:72:36:c7:cb:98:c6:65:fa:78:cc:85:3d:31:10:
4b:73:e5:89:16:e6:53:55:0e:6d:99:0e:7b:d4:ad:
b4:13:92:45:d9:29:98:e8:13:41:ce:e4:41:c2:9b:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:81:5D:91:A8:0C:F2:82:5A:B0:A1:48:E7:36:AF:50:C0:D5:CF
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:c7:75:51:b4:d0:f3:cb:0a:ee:de:62:6d:2c:df:30:3f:
7f:8e:2f:67:6f:52:ec:cd:5c:0d:a3:04:d6:37:e7:55:d7:bc:
91:55:5d:dd:6e:8a:99:7a:7f:1d:37:66:22:5a:da:b4:8c:bc:
c5:86:81:5e:f3:3d:e9:52:22:31:63:c9:fe:d7:54:b0:90:d4:
1d:9f:39:94:a1:37:2d:7d:7b:f4:ff:ae:49:26:a1:76:cd:e9:
0c:0a:62:3f:ea:1e:47:1f:4a:5e:cd:3b:18:d4:3d:f7:6f:55:
04:cb:71:1e:0d:a3:bc:30:ec:a3:9d:4b:f0:86:9c:1b:80:24:
c2:35:08:dc:44:b2:62:29:8f:bd:59:69:a7:86:d5:23:5f:0b:
5b:bb:e0:a2:ae:a9:7f:35:65:3b:aa:b6:b1:08:0b:6a:3b:c9:
f5:3e:58:39:41:52:0e:28:0d:10:1b:ef:dc:34:43:f5:9e:ae:
e6:54:28:00:5f:33:45:65:1e:88:c4:78:d7:e3:5f:81:a0:4c:
36:fa:5d:1b:cb:1c:40:92:b2:92:5d:5f:16:46:7e:e0:5c:26:
89:46:c4:1f:40:fc:ba:71:b2:d9:02:fc:2d:f8:53:9d:4f:16:
7b:71:40:09:d6:fd:5a:9c:b7:a2:93:a8:08:ed:a3:8f:cd:56:
bd:ab:79:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haBnygfOvWIoqjTgU8H6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4
NzEzMzgwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EygxMDFkODE1ZDkxYTgwY2YyODI1YWIwYTE0OGU3MzZhZjUwYzBkNWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbOSq//l/J4/7C3t4kwgcez9vigX
C+tLABhlvjUHcKrhQrI/lust/VMbHrOMiKcv7vNZvIi/XrbhJnwW5+WU8iNU1oFJ
DrjeUCGaVS97E2Oj/5NDFemYWah8QHY7aCS57W50bPaYh4vOgfFx1udoMIlwNMD5
hZs0dbrkkwM5f64Oon1eQDHkV/ajBCKjyviFo7ESNR+ziSS30gLTabf2Fn4065B8
TjFhix/sMTNpG1mDI+ISszpInEvKqWeP6pJj3Sa6Y6n90Z/RhPsXl3V8I5tUcjbH
y5jGZfp4zIU9MRBLc+WJFuZTVQ5tmQ571K20E5JF2SmY6BNBzuRBwpvX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAdgV2RqAzyglqwoUjnNq9QwNXPMB8GA1UdIwQY
MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt
NTk5ZDFjYTZhNWZkLzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk
LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRPHdVG0
0PPLCu7eYm0s3zA/f44vZ29S7M1cDaME1jfnVde8kVVd3W6KmXp/HTdmIlratIy8
xYaBXvM96VIiMWPJ/tdUsJDUHZ85lKE3LX179P+uSSahds3pDApiP+oeRx9KXs07
GNQ9929VBMtxHg2jvDDso51L8IacG4AkwjUI3ESyYimPvVlpp4bVI18LW7vgoq6p
fzVlO6q2sQgLajvJ9T5YOUFSDigNEBvv3DRD9Z6u5lQoAF8zRWUeiMR41+NfgaBM
NvpdG8scQJKykl1fFkZ+4FwmiUbEH0D8unGy2QL8LfhTnU8We3FACdb9Wpy3opOo
CO2jj81Wvat5bw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:35 2025 by rpki-client