Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
File: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft (raw, json)
Hash identifier: sfIF2yWUgoW7t2avDcoRjOhxkIWnmBBbu9r1Z9WOCVs=
Subject key identifier: A7:05:CD:7D:31:E2:F2:8D:A0:0A:24:31:CC:20:52:08:F1:EC:43:3D
Authority key identifier: 25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
Certificate issuer: /CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Certificate serial: 0194BCE05D40A1F05CCB27291DD6F3CC2881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
Manifest number: 043B
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl (hash: 3HQCy0FCMeJPZaw+a4kFJbBloOWbOItSV34ggBd6WGQ=)
2: sP-bFJ2GmNkHBQJTvI6gfR-P34M.roa (hash: YAE1riF3M5+gJzUwR1Sf1tDjF0W3/xjSiT+4/+dNn0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:40:a1:f0:5c:cb:27:29:1d:d6:f3:cc:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f3fb2b1cb50a3fcc642608633f512375226d1f
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=a705cd7d31e2f28da00a2431cc205208f1ec433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:48:d2:6f:32:c3:b4:af:09:f9:12:c4:91:
dc:2c:79:30:b8:05:ca:60:15:ac:aa:5e:08:54:09:
4b:96:6d:09:25:70:1f:f6:eb:7c:c3:d5:d1:e3:cf:
e5:3f:1e:fd:b0:03:d7:7c:ab:df:3b:17:63:34:07:
40:52:7f:f9:09:a3:60:55:d2:d7:90:ee:0b:8f:2e:
e4:d6:e0:74:10:99:8e:31:9e:6b:3b:29:ab:20:ea:
b2:69:61:82:cb:37:7b:de:30:cb:6c:33:77:c9:4c:
ed:96:d3:eb:c9:7d:97:2f:68:1a:92:14:e7:ea:5e:
e0:df:47:e8:8d:3e:d4:97:8f:39:50:5f:f6:2a:a6:
c3:cd:11:30:d3:47:3f:e1:96:3b:16:a7:d4:9c:50:
28:07:14:c4:39:8b:0b:31:0a:c6:2a:35:3d:d1:e3:
9c:f4:b6:3d:05:5e:64:ce:42:5c:e6:03:b9:3a:09:
11:e8:07:68:09:e3:9d:34:ac:26:e6:61:f8:a2:b0:
49:6c:1d:5f:d0:02:df:65:b4:88:a8:4d:bb:21:79:
e3:81:7f:8a:df:f8:89:a5:a9:20:e0:5b:bd:fe:f0:
77:b6:d0:93:28:da:c5:06:53:04:9d:9b:d3:6c:81:
3b:9a:3c:0b:2b:2a:4b:ee:d1:62:94:f2:13:ab:20:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:05:CD:7D:31:E2:F2:8D:A0:0A:24:31:CC:20:52:08:F1:EC:43:3D
X509v3 Authority Key Identifier:
keyid:25:F3:FB:2B:1C:B5:0A:3F:CC:64:26:08:63:3F:51:23:75:22:6D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a4cca1-6512-4660-8735-787aaa444cda/1/JfP7Kxy1Cj_MZCYIYz9RI3UibR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:0b:d0:eb:47:f4:ae:8b:76:04:b9:88:5c:15:80:d1:c7:
2b:fe:ad:b6:b0:e1:56:0b:c8:f1:97:45:e3:c2:e3:b2:69:91:
d0:20:e5:c0:de:09:7f:aa:1e:8f:bf:e3:79:06:03:bf:05:f9:
b8:c4:37:2e:f8:3a:9b:9f:b5:68:0f:e7:fb:57:3e:2c:bb:c9:
7a:69:00:54:7f:dd:00:a9:0b:55:c7:1b:d9:86:c1:a1:bd:54:
0e:f1:90:5e:14:c8:17:d3:8b:ad:44:ba:39:64:7f:e0:7b:26:
cf:af:0e:65:28:ac:a6:cc:8e:6b:35:1f:d4:1f:ee:b5:98:5e:
f9:3e:04:89:14:0e:3a:7f:e5:87:5d:2c:76:b1:cc:16:9e:39:
1c:d6:49:ba:3a:22:28:3a:21:ed:76:90:22:5c:6c:79:cc:81:
3f:b9:cb:65:62:96:1d:eb:60:d7:c5:79:d0:63:de:80:41:67:
b3:cf:05:d9:a0:2c:f5:d6:8e:07:94:f0:6c:ab:d9:68:3e:fe:
4b:bc:98:88:28:ff:c5:22:d8:b6:dc:b5:49:5b:bd:1a:2f:7e:
cd:72:69:31:99:ab:6c:0e:dc:82:bd:70:01:d2:41:fb:12:71:
50:bd:7a:6d:a1:cd:e8:0e:75:67:85:ba:1a:7a:4a:5f:34:76:
2b:c9:66:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84F1AofBcyycpHdbzzCiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjNmYjJiMWNiNTBhM2ZjYzY0MjYwODYzM2Y1MTIzNzUy
MjZkMWYwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
EyhhNzA1Y2Q3ZDMxZTJmMjhkYTAwYTI0MzFjYzIwNTIwOGYxZWM0MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlStI0m8yw7SvCfkSxJHcLHkwuAXK
YBWsql4IVAlLlm0JJXAf9ut8w9XR48/lPx79sAPXfKvfOxdjNAdAUn/5CaNgVdLX
kO4Ljy7k1uB0EJmOMZ5rOymrIOqyaWGCyzd73jDLbDN3yUztltPryX2XL2gakhTn
6l7g30fojT7Ul485UF/2KqbDzREw00c/4ZY7FqfUnFAoBxTEOYsLMQrGKjU90eOc
9LY9BV5kzkJc5gO5OgkR6AdoCeOdNKwm5mH4orBJbB1f0ALfZbSIqE27IXnjgX+K
3/iJpakg4Fu9/vB3ttCTKNrFBlMEnZvTbIE7mjwLKypL7tFilPITqyCOFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcFzX0x4vKNoAokMcwgUgjx7EM9MB8GA1UdIwQY
MBaAFCXz+ysctQo/zGQmCGM/USN1Im0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUt
Nzg3YWFhNDQ0Y2RhLzEvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hNGNjYTEtNjUxMi00NjYwLTg3MzUtNzg3YWFhNDQ0Y2Rh
LzEvSmZQN0t4eTFDal9NWkNZSVl6OVJJM1VpYlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa0L0OtH
9K6LdgS5iFwVgNHHK/6ttrDhVgvI8ZdF48LjsmmR0CDlwN4Jf6oej7/jeQYDvwX5
uMQ3Lvg6m5+1aA/n+1c+LLvJemkAVH/dAKkLVccb2YbBob1UDvGQXhTIF9OLrUS6
OWR/4Hsmz68OZSispsyOazUf1B/utZhe+T4EiRQOOn/lh10sdrHMFp45HNZJujoi
KDoh7XaQIlxsecyBP7nLZWKWHetg18V50GPegEFns88F2aAs9daOB5TwbKvZaD7+
S7yYiCj/xSLYtty1SVu9Gi9+zXJpMZmrbA7cgr1wAdJB+xJxUL16baHN6A51Z4W6
GnpKXzR2K8lmgg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:17 2025 by rpki-client