Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File: JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier: unPb419uvGaRZAxdR1kqQbUjGZPY8k3hx17fDALnMIc=
Subject key identifier: A9:51:25:A1:0E:FE:5F:19:53:10:DD:2A:E7:D6:EF:07:3E:AC:51:3A
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer: /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial: 0194BCAA17FF9B4CFDE53CA936C0C353AC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number: 0F45
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: B3Qdkvau4qRvHCrl66a/QEelSDqPK3leL/LHizgDBW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:17:ff:9b:4c:fd:e5:3c:a9:36:c0:c3:53:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=a95125a10efe5f195310dd2ae7d6ef073eac513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:47:00:1e:c3:b6:15:42:91:67:3e:09:e3:
7b:5c:66:c6:61:c1:78:c8:b6:bb:e8:29:6c:f4:4c:
b5:e9:c9:dd:db:21:21:85:6d:a7:9f:8b:fe:2f:27:
db:48:31:74:3b:33:63:20:de:cc:7e:3f:60:c0:ed:
80:1a:bc:7b:85:b4:6b:59:48:2c:8e:77:cb:dd:a6:
ae:e8:e7:33:26:b3:cf:b0:24:08:42:85:14:a6:66:
52:93:26:02:90:ca:c1:e7:a4:3b:10:af:e3:71:a1:
56:8b:d9:9c:fb:56:02:7f:56:47:e3:39:07:9a:46:
b3:38:ca:13:0c:94:3f:f2:32:99:23:f1:b8:1d:1a:
26:f8:b2:37:89:ee:9a:4e:30:46:4a:97:42:20:0f:
5d:2c:98:64:d3:f7:44:29:b6:3a:0c:42:c3:73:0f:
22:c1:a5:48:3d:a4:4f:c7:a2:2e:c5:4b:7b:a7:a2:
a7:92:a7:43:5e:cb:07:44:e9:7f:f8:4d:79:fb:a6:
bc:28:f7:ac:49:df:88:3a:0f:70:a4:93:bf:22:c5:
86:03:2d:12:1c:95:1a:8b:8a:d4:30:79:53:3d:84:
11:0d:d8:ea:b0:13:92:d8:f2:76:89:9b:a2:af:99:
7e:9e:bd:3c:f4:16:99:de:1f:fe:9b:e5:0c:7b:79:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:25:A1:0E:FE:5F:19:53:10:DD:2A:E7:D6:EF:07:3E:AC:51:3A
X509v3 Authority Key Identifier:
keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:f0:1d:23:48:e5:bd:f4:3e:8f:5a:59:e5:2b:c1:9e:2a:
3c:9c:44:8c:c7:63:5f:51:9a:b7:af:f6:dc:6e:63:ab:58:0d:
24:81:6c:d8:38:d4:8f:68:cd:a9:f5:bf:f6:63:6a:bf:59:c0:
51:75:76:32:d5:38:7d:2c:38:cd:f5:68:aa:fb:75:9d:f4:f9:
db:c9:95:6c:b3:75:2a:fb:55:f6:e0:d8:1f:e4:54:c9:2a:52:
da:7b:b2:25:63:f0:29:11:63:1f:8d:bd:2e:e8:a1:cd:15:19:
13:19:89:91:c5:84:20:6f:fa:49:f3:ef:ea:c6:23:4e:d6:d4:
5f:37:5d:80:af:f0:4c:a6:b0:98:0c:1a:a2:c6:1c:20:5e:fb:
9f:a0:47:fe:06:30:af:45:06:cd:3e:28:f0:38:96:23:b5:23:
2e:91:01:e5:ec:3d:26:28:42:c1:2e:be:d2:37:8f:00:f7:ad:
d4:bf:6c:82:dc:3a:d4:d7:83:54:ac:78:d5:c8:44:58:6e:7d:
1c:3c:b0:af:b0:a9:2d:28:ba:86:b0:83:45:5b:05:71:72:fc:
c5:18:ef:e6:52:44:b3:71:02:9f:a4:d2:1b:36:55:43:2e:21:
b6:76:d8:97:16:41:7c:23:91:06:04:8d:33:f9:aa:63:e5:a6:
c1:46:a7:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhf/m0z95TypNsDDU6xyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjcxZTUyZjdlOTdhMmVhNTNmNWVjYWJkNmI5NGJjOGMw
NzVhNmEwHhcNMjUwMTMxMTQwMDUxWhcNMjUwMjAxMTQwMDUxWjAzMTEwLwYDVQQD
EyhhOTUxMjVhMTBlZmU1ZjE5NTMxMGRkMmFlN2Q2ZWYwNzNlYWM1MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3npHAB7DthVCkWc+CeN7XGbGYcF4
yLa76Cls9Ey16cnd2yEhhW2nn4v+LyfbSDF0OzNjIN7Mfj9gwO2AGrx7hbRrWUgs
jnfL3aau6OczJrPPsCQIQoUUpmZSkyYCkMrB56Q7EK/jcaFWi9mc+1YCf1ZH4zkH
mkazOMoTDJQ/8jKZI/G4HRom+LI3ie6aTjBGSpdCIA9dLJhk0/dEKbY6DELDcw8i
waVIPaRPx6IuxUt7p6KnkqdDXssHROl/+E15+6a8KPesSd+IOg9wpJO/IsWGAy0S
HJUai4rUMHlTPYQRDdjqsBOS2PJ2iZuir5l+nr089BaZ3h/+m+UMe3mjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlRJaEO/l8ZUxDdKufW7wc+rFE6MB8GA1UdIwQY
MBaAFCZnHlL36XoupT9eyr1rlLyMB1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2Yt
MjUxOThlMGVkNjg3LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2YtMjUxOThlMGVkNjg3
LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0/wHSNI
5b30Po9aWeUrwZ4qPJxEjMdjX1Gat6/23G5jq1gNJIFs2DjUj2jNqfW/9mNqv1nA
UXV2MtU4fSw4zfVoqvt1nfT528mVbLN1KvtV9uDYH+RUySpS2nuyJWPwKRFjH429
LuihzRUZExmJkcWEIG/6SfPv6sYjTtbUXzddgK/wTKawmAwaosYcIF77n6BH/gYw
r0UGzT4o8DiWI7UjLpEB5ew9JihCwS6+0jePAPet1L9sgtw61NeDVKx41chEWG59
HDywr7CpLSi6hrCDRVsFcXL8xRjv5lJEs3ECn6TSGzZVQy4htnbYlxZBfCORBgSN
M/mqY+WmwUanTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:04 2025 by rpki-client