Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: P/ZmysLdK87pEJKLpEdRi3BLrKJl/y0rT4sRpGmApxA=
Subject key identifier: 88:FC:FE:DA:5F:81:5B:A5:81:78:C6:48:2F:76:1C:72:06:26:F0:DA
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 0194BD853517E79FC8EA3B809D79AA3C0098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: uigd/zT8jpYc+5d7vwM/6RONltRf+IMn3rGX1oZqc4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:17:e7:9f:c8:ea:3b:80:9d:79:aa:3c:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=88fcfeda5f815ba58178c6482f761c720626f0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:40:f6:c5:d7:48:52:6c:ad:a5:6b:19:ad:
37:73:7c:b5:91:57:22:5a:bd:8f:74:a7:c8:a6:77:
ea:fb:9a:27:81:57:a9:11:67:b9:36:5f:1e:d2:9c:
96:1b:59:bf:38:03:78:c4:c4:43:94:84:52:9b:30:
51:54:67:7a:50:b5:66:cb:da:38:22:20:32:db:22:
21:96:3a:18:0c:78:5b:fd:36:f4:c2:ed:c0:44:b5:
23:5a:46:df:e4:37:4c:1f:c4:16:4e:db:d1:a4:93:
d8:55:15:fa:37:76:5c:66:c2:7c:4e:b4:a5:35:b7:
57:c0:56:ae:96:5a:1e:23:16:b6:50:3c:65:fa:7e:
50:22:06:47:e8:6a:0d:91:c3:30:e8:08:6b:f4:33:
3c:a1:84:d6:be:72:e3:76:84:a3:ef:28:a9:08:90:
25:8c:53:e9:19:cb:20:1f:5d:92:2c:b9:c3:22:25:
2b:ac:c9:f2:86:6f:41:02:4b:8f:57:34:46:e3:0e:
cb:b8:50:5b:fc:c1:7a:72:81:33:19:86:6b:19:49:
80:90:47:42:f8:52:a9:dd:9b:17:16:bf:2e:af:82:
82:6a:ed:33:a5:53:27:a6:c0:06:60:60:df:10:b9:
46:73:43:c7:5f:25:95:80:86:f3:68:c4:24:ca:94:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:FE:DA:5F:81:5B:A5:81:78:C6:48:2F:76:1C:72:06:26:F0:DA
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:83:48:19:fd:c9:60:b3:71:7b:b7:5f:83:23:6e:98:24:e6:
14:d9:a0:9a:e2:69:73:1d:04:72:02:d8:b5:47:94:2a:4e:4b:
f5:45:e4:36:55:8a:a8:56:af:13:04:b3:e7:c7:fa:14:21:f3:
4a:79:1d:2f:c3:3c:31:5f:b5:6a:06:76:0f:95:fb:39:ff:d6:
d0:69:3d:83:2d:40:05:31:c8:27:7e:36:5a:7c:81:b6:61:03:
dd:83:75:f2:dc:1a:ae:ee:65:a3:09:3a:64:dd:f2:e7:05:a1:
1c:bf:b5:59:d9:60:0a:87:6b:5f:6b:f7:11:12:af:87:67:90:
1a:dd:91:ae:e9:8b:8e:fb:69:fc:a0:96:36:61:6d:66:db:6e:
48:cd:cc:56:02:4f:f0:d9:63:e9:b8:cd:ed:89:9b:a9:25:f2:
7d:66:52:8a:93:3a:64:7c:31:d3:43:6a:67:db:5d:60:6f:20:
c0:24:34:8e:20:2c:17:90:21:4c:f6:33:05:65:80:4a:9d:f8:
b6:8b:61:60:f7:23:34:d0:77:88:a4:2b:4d:69:f0:5b:1d:ef:
26:54:18:31:38:0b:ca:ee:62:0c:22:da:36:4a:69:72:ae:b1:
33:d6:b1:63:dd:d4:f1:fd:40:18:7e:3f:32:ef:dc:d9:f1:c5:
d6:72:4d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTUX55/I6juAnXmqPACYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz
MjA4MjkwHhcNMjUwMTMxMTgwMDExWhcNMjUwMjAxMTgwMDExWjAzMTEwLwYDVQQD
Eyg4OGZjZmVkYTVmODE1YmE1ODE3OGM2NDgyZjc2MWM3MjA2MjZmMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9pA9sXXSFJsraVrGa03c3y1kVci
Wr2PdKfIpnfq+5ongVepEWe5Nl8e0pyWG1m/OAN4xMRDlIRSmzBRVGd6ULVmy9o4
IiAy2yIhljoYDHhb/Tb0wu3ARLUjWkbf5DdMH8QWTtvRpJPYVRX6N3ZcZsJ8TrSl
NbdXwFaulloeIxa2UDxl+n5QIgZH6GoNkcMw6Ahr9DM8oYTWvnLjdoSj7yipCJAl
jFPpGcsgH12SLLnDIiUrrMnyhm9BAkuPVzRG4w7LuFBb/MF6coEzGYZrGUmAkEdC
+FKp3ZsXFr8ur4KCau0zpVMnpsAGYGDfELlGc0PHXyWVgIbzaMQkypSfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj8/tpfgVulgXjGSC92HHIGJvDaMB8GA1UdIwQY
MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut
Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0
LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4NIGf3J
YLNxe7dfgyNumCTmFNmgmuJpcx0EcgLYtUeUKk5L9UXkNlWKqFavEwSz58f6FCHz
SnkdL8M8MV+1agZ2D5X7Of/W0Gk9gy1ABTHIJ342WnyBtmED3YN18twaru5lowk6
ZN3y5wWhHL+1WdlgCodrX2v3ERKvh2eQGt2RrumLjvtp/KCWNmFtZttuSM3MVgJP
8Nlj6bjN7YmbqSXyfWZSipM6ZHwx00NqZ9tdYG8gwCQ0jiAsF5AhTPYzBWWASp34
tothYPcjNNB3iKQrTWnwWx3vJlQYMTgLyu5iDCLaNkppcq6xM9axY93U8f1AGH4/
Mu/c2fHF1nJNOA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client