Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: 0F1saZkkNemhol9q+uEfGOnIw3/q4zu5t1ibMQAmbwA=
Subject key identifier: AA:4B:4E:E7:C5:C9:E4:4C:21:E5:6C:DE:A3:74:61:D0:21:65:0F:9C
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 0194BBCDFBEB69F9F0F2A94E8FCEC67055BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1329
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: 19puAa/KGz1d0PFevcDJV26hLGTBsaX9krDertuwYL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:eb:69:f9:f0:f2:a9:4e:8f:ce:c6:70:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=aa4b4ee7c5c9e44c21e56cdea37461d021650f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:50:ac:2b:d6:88:fc:66:e2:db:86:80:a9:
fb:72:e2:af:99:68:10:9b:5c:d7:68:b8:ed:2e:e9:
9a:f6:89:6d:58:9f:f8:12:ae:82:31:76:cd:b2:e9:
3e:4f:fc:b8:9d:1a:20:3d:4d:62:38:3f:89:a7:b1:
23:38:df:f2:29:ae:f4:30:6c:26:00:f0:f0:6c:20:
c7:92:af:e6:3d:f0:29:f0:db:c1:b7:34:08:c9:a4:
9c:46:8b:a5:70:68:70:ab:61:c5:10:af:0c:c7:31:
90:c8:8e:95:0d:58:32:8f:66:de:54:9e:35:ef:f1:
d6:4a:2f:4e:27:42:ab:63:7e:c0:c1:ac:d7:c8:d0:
14:23:63:a0:dc:8f:6d:5f:15:c3:c5:ca:a4:c5:5c:
51:91:65:b0:47:a9:42:52:f2:36:21:b7:21:f5:b8:
2c:91:8b:6e:a8:36:10:ac:96:eb:cb:85:9a:b3:70:
8c:32:c4:b3:1a:2a:c5:15:1d:6b:48:9f:df:32:48:
36:4e:94:a0:4c:39:d2:4a:49:34:d6:84:85:33:4b:
4a:c4:68:45:f7:39:da:55:d9:bd:84:86:d7:6e:0a:
87:17:91:bd:96:5f:1b:20:98:c3:e0:0e:93:75:f1:
a0:32:7a:7a:7e:36:6c:d2:b3:e2:ce:c1:4e:16:8f:
8f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:4E:E7:C5:C9:E4:4C:21:E5:6C:DE:A3:74:61:D0:21:65:0F:9C
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b7:3e:e5:f6:71:d7:71:37:10:fa:42:e6:92:55:c6:ec:59:
8c:45:72:18:cd:18:94:3a:9b:a0:28:35:26:c8:b1:8a:86:d1:
15:ff:b5:54:fa:bf:29:f1:67:d7:76:8d:73:33:20:0e:3f:d9:
58:2c:f3:a1:e0:32:e9:7f:72:06:73:5f:e2:a3:6d:61:59:5b:
3e:15:af:b4:66:58:eb:50:80:7e:a5:92:b6:fb:67:44:65:75:
b0:11:b8:69:31:e1:bc:7d:7b:c5:b1:f4:4b:37:d9:4a:07:cc:
56:56:be:f2:c1:31:6f:f6:c6:d9:ec:30:51:2b:d4:c8:c7:70:
93:2c:78:01:bd:bf:52:15:48:73:ff:34:ea:cb:b5:3b:a7:5e:
13:a9:0d:a5:03:fd:9d:df:73:d1:e4:e0:5e:fd:ff:eb:26:a3:
f6:1e:88:fd:cf:dc:be:70:ab:46:da:24:e2:0c:f7:8d:c0:55:
51:d3:61:fb:f9:6e:b3:81:03:e5:c2:04:b1:c3:d0:b5:ab:1c:
53:0d:00:81:73:71:63:61:fa:61:83:1c:86:3a:67:e9:d2:30:
d4:33:50:02:55:95:47:d6:f4:08:54:16:f5:38:7b:af:40:b2:
11:1e:3f:0c:f6:63:5e:67:de:46:96:2e:dd:f3:c2:0d:ae:50:
38:de:84:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfvrafnw8qlOj87GcFW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EyhhYTRiNGVlN2M1YzllNDRjMjFlNTZjZGVhMzc0NjFkMDIxNjUwZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEBQrCvWiPxm4tuGgKn7cuKvmWgQ
m1zXaLjtLuma9oltWJ/4Eq6CMXbNsuk+T/y4nRogPU1iOD+Jp7EjON/yKa70MGwm
APDwbCDHkq/mPfAp8NvBtzQIyaScRoulcGhwq2HFEK8MxzGQyI6VDVgyj2beVJ41
7/HWSi9OJ0KrY37AwazXyNAUI2Og3I9tXxXDxcqkxVxRkWWwR6lCUvI2Ibch9bgs
kYtuqDYQrJbry4Was3CMMsSzGirFFR1rSJ/fMkg2TpSgTDnSSkk01oSFM0tKxGhF
9znaVdm9hIbXbgqHF5G9ll8bIJjD4A6TdfGgMnp6fjZs0rPizsFOFo+PxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpLTufFyeRMIeVs3qN0YdAhZQ+cMB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbc+5fZx
13E3EPpC5pJVxuxZjEVyGM0YlDqboCg1JsixiobRFf+1VPq/KfFn13aNczMgDj/Z
WCzzoeAy6X9yBnNf4qNtYVlbPhWvtGZY61CAfqWStvtnRGV1sBG4aTHhvH17xbH0
SzfZSgfMVla+8sExb/bG2ewwUSvUyMdwkyx4Ab2/UhVIc/806su1O6deE6kNpQP9
nd9z0eTgXv3/6yaj9h6I/c/cvnCrRtok4gz3jcBVUdNh+/lus4ED5cIEscPQtasc
Uw0AgXNxY2H6YYMchjpn6dIw1DNQAlWVR9b0CFQW9Th7r0CyER4/DPZjXmfeRpYu
3fPCDa5QON6EQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:57 2025 by rpki-client