Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: 4YcNQzDcJ+K+Wj7dnsNVA2ZhlhAORKMPOUYDYOjcyX8=
Subject key identifier: FA:F8:F5:FF:01:63:53:44:38:E4:88:E5:29:10:89:5B:A5:3B:F9:39
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 0194BC727BB9E0FF74A8C7C9C3398B03E84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: Rjd8nvRxInGCNc6lbq8dj2ZATKRKQMj97yP2ElgfBHw=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7b:b9:e0:ff:74:a8:c7:c9:c3:39:8b:03:e8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=faf8f5ff0163534438e488e52910895ba53bf939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:29:5b:4a:b9:a7:a0:94:8e:7f:ce:92:b8:
5b:23:6e:14:4b:6d:d7:08:82:38:19:70:06:80:f6:
d3:07:1f:af:b4:9a:cc:d0:25:1c:b7:a3:92:0c:8e:
a1:7e:55:ba:d5:c9:cd:cd:83:cb:e6:99:58:ac:05:
77:cb:97:a7:4e:fa:ed:8d:32:ec:2a:2f:ab:55:38:
eb:27:2d:d4:9b:54:dd:2f:c8:b2:2d:09:70:f6:d4:
4d:2b:f7:93:ec:be:f3:7a:b6:2a:1b:24:70:ba:86:
0a:61:ba:4f:a1:ed:49:45:a7:41:a2:bc:97:3a:bb:
f0:64:72:0e:79:65:5e:48:98:31:06:b6:6d:f9:aa:
13:8f:42:64:e7:7a:5b:da:22:d8:da:bd:0f:7c:0a:
bb:e5:0c:ac:41:f9:57:dc:78:a8:e3:82:39:f9:eb:
11:0f:39:49:c9:26:42:df:15:d5:30:7b:6d:46:b9:
f1:ae:58:30:87:7b:78:56:e6:41:65:27:6c:2e:00:
64:63:57:87:00:91:b3:b1:63:cf:28:7e:50:b9:71:
88:a6:d1:48:e1:c9:e3:2f:ce:f3:bf:61:03:e7:d1:
4e:a1:7a:5f:0e:19:02:d0:34:8d:12:48:5e:09:a7:
22:2e:cf:ab:93:41:72:44:64:18:b2:53:94:e5:20:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:F5:FF:01:63:53:44:38:E4:88:E5:29:10:89:5B:A5:3B:F9:39
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d1:26:d3:5d:6b:44:49:96:ff:ce:f4:ae:32:ce:4e:e7:2f:
16:c7:09:0a:33:12:83:ca:39:1f:f5:e0:a9:e5:25:8c:e5:a0:
71:03:0a:60:1a:30:91:8a:f1:74:97:44:72:d9:f8:8a:d3:37:
cd:e5:1d:a6:da:0a:f6:c9:bf:a7:64:e5:73:63:24:8d:50:03:
45:21:b2:c5:43:6e:ca:11:17:f9:9f:16:0f:b2:14:cb:8e:06:
d5:a6:a0:b8:83:c3:f6:09:d9:12:bf:0a:92:63:0e:df:61:07:
79:0c:36:0f:59:ae:01:ad:c9:3e:c0:fc:aa:d6:64:04:90:8d:
5e:0a:cd:dd:95:e2:a9:6f:0a:a5:be:45:a8:86:dd:39:4d:e3:
7c:ee:e2:0a:67:84:71:b1:97:30:68:4f:35:4a:2b:b0:6c:9f:
08:91:3b:bb:bf:77:cb:51:4c:b0:85:dc:c4:f4:86:cc:62:40:
17:dd:bb:7a:5d:4d:14:8e:e2:fe:01:a4:27:66:37:96:db:a4:
d1:c1:15:ba:7d:d2:d7:95:3d:d9:b3:12:57:86:de:92:95:df:
65:ea:3c:4e:91:a7:80:2c:57:2e:93:4d:39:40:df:18:fd:61:
1d:5a:d9:d1:58:7e:5c:7e:6e:c4:41:00:57:15:12:02:91:5f:
46:c8:20:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cnu54P90qMfJwzmLA+hOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGU3NTk0YWFlMjRhNGZkNmMzODU1NDUxN2Q4YjlkNmZh
ZTA2MGQwHhcNMjUwMTMxMTMwMDA2WhcNMjUwMjAxMTMwMDA2WjAzMTEwLwYDVQQD
EyhmYWY4ZjVmZjAxNjM1MzQ0MzhlNDg4ZTUyOTEwODk1YmE1M2JmOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVUpW0q5p6CUjn/OkrhbI24US23X
CII4GXAGgPbTBx+vtJrM0CUct6OSDI6hflW61cnNzYPL5plYrAV3y5enTvrtjTLs
Ki+rVTjrJy3Um1TdL8iyLQlw9tRNK/eT7L7zerYqGyRwuoYKYbpPoe1JRadBoryX
OrvwZHIOeWVeSJgxBrZt+aoTj0Jk53pb2iLY2r0PfAq75QysQflX3Hio44I5+esR
DzlJySZC3xXVMHttRrnxrlgwh3t4VuZBZSdsLgBkY1eHAJGzsWPPKH5QuXGIptFI
4cnjL87zv2ED59FOoXpfDhkC0DSNEkheCaciLs+rk0FyRGQYslOU5SCMiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr49f8BY1NEOOSI5SkQiVulO/k5MB8GA1UdIwQY
MBaAFCQOdZSq4kpP1sOFVFF9i51vrgYNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUt
NGI4ZGYwOTg0OTZkLzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81YTI2MGUtYWVjMC00ZTRhLWFhODUtNGI4ZGYwOTg0OTZk
LzEvSkE1MWxLcmlTa19XdzRWVVVYMkxuVy11QmcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNEm011r
REmW/870rjLOTucvFscJCjMSg8o5H/XgqeUljOWgcQMKYBowkYrxdJdEctn4itM3
zeUdptoK9sm/p2Tlc2MkjVADRSGyxUNuyhEX+Z8WD7IUy44G1aaguIPD9gnZEr8K
kmMO32EHeQw2D1muAa3JPsD8qtZkBJCNXgrN3ZXiqW8Kpb5FqIbdOU3jfO7iCmeE
cbGXMGhPNUorsGyfCJE7u793y1FMsIXcxPSGzGJAF927el1NFI7i/gGkJ2Y3ltuk
0cEVun3S15U92bMSV4bekpXfZeo8TpGngCxXLpNNOUDfGP1hHVrZ0Vh+XH5uxEEA
VxUSApFfRsggvg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:25 2025 by rpki-client