Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
File: JfgKOI5PDiZBTOq-q036hBkdgUA.mft (raw, json)
Hash identifier: MQPu9E6sAdC+xYs1jiR3KiynRgjsnSw68WLaPbWmUBc=
Subject key identifier: 61:A1:80:C4:05:4F:66:CD:E1:EF:2B:CF:9B:32:37:EE:AA:D0:36:26
Authority key identifier: 25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
Certificate issuer: /CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Certificate serial: 0194BC3C714F3354EC6D70FE98BCE263EF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
Manifest number: 1332
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: JfgKOI5PDiZBTOq-q036hBkdgUA.crl (hash: qwHrnSceTzR3AfZlH7uE9v2BnGzdhMpEO3G5TACGA14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:71:4f:33:54:ec:6d:70:fe:98:bc:e2:63:ef:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f80a388e4f0e26414ceabeab4dfa84191d8140
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=61a180c4054f66cde1ef2bcf9b3237eeaad03626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ff:de:78:ac:2b:ce:43:28:c6:dd:d7:1f:6a:
99:2b:7e:78:9f:b6:2c:40:94:3d:9a:7a:fe:37:eb:
e2:c5:67:11:35:6e:be:ed:96:ae:93:0e:4d:f7:b7:
c9:75:30:83:7c:cb:61:9b:2f:cd:1b:a8:dc:04:3e:
ea:ae:1c:38:9a:26:66:ff:c6:7c:e9:a0:99:e0:b8:
03:d8:51:9b:78:4f:22:c9:26:5e:bb:24:0b:19:06:
dd:ba:30:25:8c:50:ad:4b:21:d3:56:bd:fc:57:05:
4a:51:37:d2:9a:ff:41:47:ac:a2:3b:39:c5:2c:76:
d1:af:7d:02:dc:8f:4e:50:2a:35:f7:6d:49:5e:44:
8a:5a:32:fe:76:ec:27:35:a7:a2:64:71:ad:37:89:
4e:78:3b:84:24:85:fd:00:74:8f:95:b0:1a:05:e6:
fd:91:b6:d9:e9:c5:dd:76:4b:0e:80:f2:50:b4:75:
6b:ca:6d:ce:02:d0:34:a9:e9:b2:7a:ab:cc:d9:3f:
e7:79:d2:e5:6c:f8:f9:85:73:7a:4c:ea:4c:42:f1:
41:95:73:20:41:ba:bc:4c:a1:19:35:5b:d1:03:46:
80:03:90:01:a2:26:7f:b3:2a:82:36:00:a2:53:f1:
08:a8:fd:2c:f5:9b:d9:35:9e:e8:47:8a:9a:8d:bf:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:80:C4:05:4F:66:CD:E1:EF:2B:CF:9B:32:37:EE:AA:D0:36:26
X509v3 Authority Key Identifier:
keyid:25:F8:0A:38:8E:4F:0E:26:41:4C:EA:BE:AB:4D:FA:84:19:1D:81:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfgKOI5PDiZBTOq-q036hBkdgUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20cfa4-e08b-4b70-9362-97dc7b535b1d/1/JfgKOI5PDiZBTOq-q036hBkdgUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ad:6b:e9:a8:65:ae:d9:6d:c0:a3:93:a3:07:12:4a:b5:4d:
57:e4:02:a0:c0:76:bf:2a:01:16:ff:f0:d5:03:1d:23:b2:7e:
38:3b:c7:1b:10:cd:51:dd:c9:90:c1:7e:7b:31:f2:b1:db:4e:
7d:fd:3d:96:1c:b4:cf:63:e3:65:29:9e:cd:1a:c9:03:a8:ee:
23:53:17:5c:2f:1f:05:25:84:3a:5e:75:03:f5:b0:af:d9:3a:
c5:0f:25:21:4c:bd:d2:ad:55:3d:1c:20:28:38:4b:5e:e2:bf:
c5:9d:f8:a0:a6:77:9e:34:2f:ba:df:f4:fb:ce:e6:e1:5b:15:
2e:b8:79:f7:b6:a6:b1:c6:a6:eb:a8:07:45:8d:33:f4:42:f7:
3e:86:d0:d5:1e:76:52:c1:dd:cd:d9:dd:3d:4f:a6:eb:02:c1:
e0:d5:5b:c6:f7:df:4c:63:14:bc:e1:7e:ba:a0:ff:41:f8:b9:
30:7b:1c:77:26:51:a7:24:7e:1b:d8:bb:a9:e8:a7:19:40:96:
b6:11:f2:ff:1c:a2:e5:74:d0:96:47:6e:db:d1:c3:dc:69:a0:
18:6e:b6:44:21:f2:fb:68:7e:ce:61:cf:1a:14:dc:5c:1a:01:
9f:42:b6:8d:65:71:ad:4c:fe:97:21:60:25:eb:ac:fd:80:b8:
c5:2d:bf:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHFPM1TsbXD+mLziY++BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjgwYTM4OGU0ZjBlMjY0MTRjZWFiZWFiNGRmYTg0MTkx
ZDgxNDAwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
Eyg2MWExODBjNDA1NGY2NmNkZTFlZjJiY2Y5YjMyMzdlZWFhZDAzNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf/eeKwrzkMoxt3XH2qZK354n7Ys
QJQ9mnr+N+vixWcRNW6+7Zaukw5N97fJdTCDfMthmy/NG6jcBD7qrhw4miZm/8Z8
6aCZ4LgD2FGbeE8iySZeuyQLGQbdujAljFCtSyHTVr38VwVKUTfSmv9BR6yiOznF
LHbRr30C3I9OUCo1921JXkSKWjL+duwnNaeiZHGtN4lOeDuEJIX9AHSPlbAaBeb9
kbbZ6cXddksOgPJQtHVrym3OAtA0qemyeqvM2T/nedLlbPj5hXN6TOpMQvFBlXMg
Qbq8TKEZNVvRA0aAA5ABoiZ/syqCNgCiU/EIqP0s9ZvZNZ7oR4qajb+B+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGhgMQFT2bN4e8rz5syN+6q0DYmMB8GA1UdIwQY
MBaAFCX4CjiOTw4mQUzqvqtN+oQZHYFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yMGNmYTQtZTA4Yi00YjcwLTkzNjIt
OTdkYzdiNTM1YjFkLzEvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yMGNmYTQtZTA4Yi00YjcwLTkzNjItOTdkYzdiNTM1YjFk
LzEvSmZnS09JNVBEaVpCVE9xLXEwMzZoQmtkZ1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbq1r6ahl
rtltwKOTowcSSrVNV+QCoMB2vyoBFv/w1QMdI7J+ODvHGxDNUd3JkMF+ezHysdtO
ff09lhy0z2PjZSmezRrJA6juI1MXXC8fBSWEOl51A/Wwr9k6xQ8lIUy90q1VPRwg
KDhLXuK/xZ34oKZ3njQvut/0+87m4VsVLrh597amscam66gHRY0z9EL3PobQ1R52
UsHdzdndPU+m6wLB4NVbxvffTGMUvOF+uqD/Qfi5MHscdyZRpyR+G9i7qeinGUCW
thHy/xyi5XTQlkdu29HD3GmgGG62RCHy+2h+zmHPGhTcXBoBn0K2jWVxrUz+lyFg
Jeus/YC4xS2/gg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:11 2025 by rpki-client