Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: Atr17Fe9HxBFTYGw83MBLfFMvIZuT7c+l9lFIGIvaaQ=
Subject key identifier: 12:49:7F:BC:A6:10:D6:2F:D7:0B:5B:9C:38:E5:6C:DA:E2:45:B0:6E
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 0194BD4E70EF1345394A4122D9EF3BB1B7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0488
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: Xaq2/dTd0sGFdr+rR1sS4GnsyfSAG7lVeSzGZyVcwAg=)
2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:ef:13:45:39:4a:41:22:d9:ef:3b:b1:b7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=12497fbca610d62fd70b5b9c38e56cdae245b06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:ff:20:dd:01:bc:39:40:de:29:4a:af:3e:
e2:0c:2f:71:3a:0c:35:4f:71:78:90:02:ab:11:3d:
70:a5:a6:d8:19:da:1f:51:80:6b:ae:67:72:5f:24:
b5:3a:8a:c6:91:95:18:89:5c:09:d1:9c:d4:4d:a8:
9b:23:83:6d:e0:e2:80:8e:25:97:94:96:32:ba:8b:
a5:e3:27:e6:5d:9c:ca:45:5f:2c:f7:78:73:2d:b4:
9c:10:b1:6e:9e:79:05:f6:0b:36:0f:ff:71:84:45:
90:10:67:f5:6f:87:91:d6:08:69:ed:7f:e3:ac:1a:
d3:f2:ae:67:56:69:5f:2d:90:a7:2f:95:30:a1:fa:
31:eb:7d:a9:d9:95:3d:8c:6a:6d:15:cc:08:c1:61:
b1:a7:9d:b2:e7:75:77:2b:ad:2a:50:45:3c:f0:ad:
aa:8c:e1:ec:cf:20:78:37:84:91:24:89:5c:13:8d:
eb:b6:60:ac:7b:89:3e:30:85:42:56:1c:73:cd:a9:
1b:3c:8b:72:54:90:e5:9d:e2:3f:cc:34:a9:2a:a3:
05:20:da:92:d0:f4:9f:8b:49:10:ef:d8:c1:a9:c7:
84:4c:b8:9d:2a:02:d6:2e:3c:01:79:19:ae:97:0e:
6c:a2:d5:02:9e:db:c1:21:26:75:13:d5:bd:cf:f4:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:49:7F:BC:A6:10:D6:2F:D7:0B:5B:9C:38:E5:6C:DA:E2:45:B0:6E
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0d:63:f6:e0:18:05:d0:d3:7c:93:c3:b6:5f:36:34:04:de:
2f:a4:92:60:79:c4:d2:88:a8:f7:b9:b2:50:da:f0:ca:9c:f5:
3d:ac:d4:da:30:b9:f6:21:02:d9:8d:d9:dc:fa:ee:cc:1a:10:
21:77:6e:0c:08:5e:de:1f:21:59:ba:49:1d:81:7d:52:3e:18:
ac:7c:58:c3:56:d3:ca:d4:33:b7:b5:f2:49:ec:67:ed:81:de:
4d:47:7c:03:8f:06:61:4c:de:04:b6:31:8b:8f:42:cc:11:8f:
cc:e7:08:b3:cb:ed:7f:16:50:3d:b9:d5:12:fe:b3:e3:14:87:
8f:f6:a5:d9:76:eb:63:e4:45:b2:d9:cf:cc:30:ff:00:26:3c:
a9:c2:32:1e:0e:7c:a4:ec:cc:4e:8d:a8:db:b4:c7:71:63:c2:
ba:a8:f2:d3:cf:25:b7:5e:2f:22:b4:cb:d1:2f:93:a1:c0:73:
0e:49:f7:f2:e9:56:29:76:90:08:83:51:61:83:57:02:12:54:
2d:4f:37:84:98:ec:00:c0:fd:14:89:2f:b8:e1:58:55:8d:38:
50:99:2b:65:82:1b:a7:5e:38:b4:c4:32:3c:25:47:6f:fe:58:
0a:4a:9a:a9:f2:13:c2:56:ff:1d:a0:1e:0a:62:ec:39:6a:1f:
94:20:02:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnDvE0U5SkEi2e87sbfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl
YjVhODQwHhcNMjUwMTMxMTcwMDIyWhcNMjUwMjAxMTcwMDIyWjAzMTEwLwYDVQQD
EygxMjQ5N2ZiY2E2MTBkNjJmZDcwYjViOWMzOGU1NmNkYWUyNDViMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CD/IN0BvDlA3ilKrz7iDC9xOgw1
T3F4kAKrET1wpabYGdofUYBrrmdyXyS1OorGkZUYiVwJ0ZzUTaibI4Nt4OKAjiWX
lJYyuoul4yfmXZzKRV8s93hzLbScELFunnkF9gs2D/9xhEWQEGf1b4eR1ghp7X/j
rBrT8q5nVmlfLZCnL5Uwofox632p2ZU9jGptFcwIwWGxp52y53V3K60qUEU88K2q
jOHszyB4N4SRJIlcE43rtmCse4k+MIVCVhxzzakbPItyVJDlneI/zDSpKqMFINqS
0PSfi0kQ79jBqceETLidKgLWLjwBeRmulw5sotUCntvBISZ1E9W9z/Q8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJJf7ymENYv1wtbnDjlbNriRbBuMB8GA1UdIwQY
MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt
MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi
LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ1j9uAY
BdDTfJPDtl82NATeL6SSYHnE0oio97myUNrwypz1PazU2jC59iEC2Y3Z3PruzBoQ
IXduDAhe3h8hWbpJHYF9Uj4YrHxYw1bTytQzt7XySexn7YHeTUd8A48GYUzeBLYx
i49CzBGPzOcIs8vtfxZQPbnVEv6z4xSHj/al2XbrY+RFstnPzDD/ACY8qcIyHg58
pOzMTo2o27THcWPCuqjy088lt14vIrTL0S+TocBzDkn38ulWKXaQCINRYYNXAhJU
LU83hJjsAMD9FIkvuOFYVY04UJkrZYIbp144tMQyPCVHb/5YCkqaqfITwlb/HaAe
CmLsOWoflCAC2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:44:13 2025 by rpki-client