Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
File: j2slsXxNBOCwSSNA56wkzITSo0c.mft (raw, json)
Hash identifier: 8bQ8h7AfS1E+q32eM5CUunGopoO8uuz2fN/QEaMxRCQ=
Subject key identifier: 5D:8D:46:20:AC:40:5D:80:AC:C4:92:BC:9D:C8:66:80:D0:CD:64:4F
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Certificate issuer: /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial: 0194BC3C4CF9E52F71AB15FC31B96F373E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
Manifest number: 0AD4
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa (hash: wVKStyJBivT9nJImaGil3qt9ysG3+7PJS2LVMDfgE2I=)
2: j2slsXxNBOCwSSNA56wkzITSo0c.crl (hash: Vw0NzDtvo/aGtZAjuLlHBRowdWvjKx9WREvMqu4Ox4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:f9:e5:2f:71:ab:15:fc:31:b9:6f:37:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=5d8d4620ac405d80acc492bc9dc86680d0cd644f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:7b:14:6f:15:e7:75:0a:a1:eb:1e:85:dc:
2a:41:06:e8:70:b2:a0:82:2c:d6:0b:b9:d1:e9:d7:
1d:84:f2:30:91:29:46:d1:1b:a7:03:e2:87:27:6a:
63:f9:0e:5c:b4:0a:a6:7d:98:f6:55:43:20:2b:16:
13:30:42:48:e5:14:98:45:86:07:f4:9c:4b:f6:b9:
ce:7b:03:80:07:4c:18:68:ea:e6:75:d1:d8:40:7a:
0b:20:3c:64:43:d2:fd:bf:e8:9a:58:76:9c:58:c6:
ee:bc:fb:7a:e9:6e:54:53:70:b6:26:d0:80:88:4e:
ea:9f:39:4c:f5:8a:7e:d1:ce:6c:11:b4:f1:66:f0:
05:f3:78:97:11:d6:dd:5d:62:8f:2e:7d:43:f8:53:
e3:de:03:9e:b9:b5:f9:10:2a:ae:76:77:b0:4d:cf:
af:73:18:1d:93:3b:da:71:a2:75:ea:00:a0:4c:ba:
c0:c0:36:d0:c5:8b:03:67:31:17:21:1a:c6:f7:cb:
dc:8e:b7:f1:26:53:02:32:cc:3c:7b:ea:95:8f:b4:
aa:99:a9:44:31:d5:f4:4a:f0:1c:e7:74:5f:da:a4:
67:af:02:57:f2:4a:c9:51:a4:64:78:7c:ad:e6:b1:
1f:ef:a3:71:b1:8c:bd:6e:15:96:89:d0:15:d0:d0:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:46:20:AC:40:5D:80:AC:C4:92:BC:9D:C8:66:80:D0:CD:64:4F
X509v3 Authority Key Identifier:
keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:61:77:5e:08:cc:29:a4:90:3b:be:71:3d:f9:ba:f0:86:
a1:26:91:b8:1f:29:da:4c:48:ec:b3:92:4d:f9:40:1e:b8:79:
23:24:c7:60:37:bb:19:2f:ad:26:e2:26:47:9e:f1:aa:da:0b:
80:3e:bb:51:c4:da:2f:75:d1:bb:6f:a2:a0:62:63:41:12:2c:
78:7b:5a:52:c9:00:4d:8f:bd:60:5d:e0:87:e1:82:d5:b2:12:
50:f4:28:57:47:5f:cd:4b:3f:23:66:65:dd:1d:e1:22:b1:0c:
90:84:61:99:05:cb:38:0f:41:bc:2d:e5:dc:a7:93:38:76:26:
cd:e5:bb:56:3e:a2:bf:d3:d2:41:c8:79:56:85:65:2a:09:1f:
79:02:c5:a6:2a:ab:39:b8:6f:e8:82:36:46:2b:69:dd:77:25:
79:c2:94:95:84:b3:5c:f4:73:7b:69:32:ca:07:bf:eb:cb:55:
c1:3e:dd:7a:a0:56:b4:93:e9:0f:ce:2f:1f:44:8d:af:36:e7:
e2:04:e2:e5:b2:5b:ae:26:0f:65:b4:06:51:1d:98:6c:07:86:
e0:c8:49:ea:09:8f:5a:fb:4f:aa:3d:1a:b2:7f:f7:e7:70:8c:
13:e7:b8:15:b5:a3:ae:3d:7b:ee:10:da:bb:31:8c:96:ce:b5:
29:bd:92:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEz55S9xqxX8MblvNz4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmIyNWIxN2M0ZDA0ZTBiMDQ5MjM0MGU3YWMyNGNjODRk
MmEzNDcwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
Eyg1ZDhkNDYyMGFjNDA1ZDgwYWNjNDkyYmM5ZGM4NjY4MGQwY2Q2NDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv197FG8V53UKoesehdwqQQbocLKg
gizWC7nR6dcdhPIwkSlG0RunA+KHJ2pj+Q5ctAqmfZj2VUMgKxYTMEJI5RSYRYYH
9JxL9rnOewOAB0wYaOrmddHYQHoLIDxkQ9L9v+iaWHacWMbuvPt66W5UU3C2JtCA
iE7qnzlM9Yp+0c5sEbTxZvAF83iXEdbdXWKPLn1D+FPj3gOeubX5ECqudnewTc+v
cxgdkzvacaJ16gCgTLrAwDbQxYsDZzEXIRrG98vcjrfxJlMCMsw8e+qVj7SqmalE
MdX0SvAc53Rf2qRnrwJX8krJUaRkeHyt5rEf76NxsYy9bhWWidAV0NBRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2NRiCsQF2ArMSSvJ3IZoDQzWRPMB8GA1UdIwQY
MBaAFI9rJbF8TQTgsEkjQOesJMyE0qNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMt
MzgzODNmODJiY2Y5LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMtMzgzODNmODJiY2Y5
LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl15hd14I
zCmkkDu+cT35uvCGoSaRuB8p2kxI7LOSTflAHrh5IyTHYDe7GS+tJuImR57xqtoL
gD67UcTaL3XRu2+ioGJjQRIseHtaUskATY+9YF3gh+GC1bISUPQoV0dfzUs/I2Zl
3R3hIrEMkIRhmQXLOA9BvC3l3KeTOHYmzeW7Vj6iv9PSQch5VoVlKgkfeQLFpiqr
Obhv6II2Ritp3XclecKUlYSzXPRze2kyyge/68tVwT7deqBWtJPpD84vH0SNrzbn
4gTi5bJbriYPZbQGUR2YbAeG4MhJ6gmPWvtPqj0asn/353CME+e4FbWjrj177hDa
uzGMls61Kb2S8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client