Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: LtQvWBjAnnlCyeAAaEgA+j4CT2b4CVnC4uZk4HWFBns=
Subject key identifier: 91:7A:7F:E9:34:2C:F7:4D:97:46:3C:AB:63:AA:86:85:6C:E5:A2:A0
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 0194BC04B7CFDB232D3307AC42987FEDD226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: Qemv6jjMOnIkQoD0vHpEfIMduDlSWXkdUhAYUnvhlpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:cf:db:23:2d:33:07:ac:42:98:7f:ed:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=917a7fe9342cf74d97463cab63aa86856ce5a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:30:db:0f:ba:0a:5f:c2:6e:57:d1:e5:b7:
28:a5:cf:e9:70:8f:09:a5:c9:7f:58:87:f3:6c:cd:
8f:1d:fb:76:1a:9a:bc:c4:79:17:b9:28:88:86:f2:
25:3a:11:81:a2:ad:d2:84:6b:b5:fd:a9:0e:5c:9f:
5b:89:7e:3e:9b:d2:a0:7b:ec:60:23:e3:f8:57:27:
61:56:0a:56:f1:a5:f2:24:33:5b:7d:18:1e:5b:4b:
b7:71:2d:14:52:ef:db:3d:d1:e6:64:00:4b:fd:2e:
2e:46:3d:bc:b1:06:fd:31:7f:54:28:6b:c9:71:d6:
06:82:11:01:1c:15:07:a1:a1:dc:b7:6c:7d:e1:b4:
9c:46:7c:0f:e2:02:1b:e3:b5:ce:f9:fd:c2:42:d5:
d7:63:b9:bd:5e:4d:9a:8b:dd:64:33:9d:ec:98:a2:
b8:7c:ec:fa:75:93:e7:e0:b1:32:c5:17:bc:9d:26:
bc:6a:31:4c:b5:09:bb:5b:da:63:14:23:90:3a:31:
17:00:2c:13:b5:3d:18:6f:cb:6e:b8:38:8d:25:48:
b9:2f:fd:5d:3b:c6:ff:a4:1b:c5:70:2a:84:f0:a2:
8c:97:5a:d6:0f:c9:9d:86:7e:87:ec:c8:72:17:37:
ea:53:cc:ca:d1:bb:08:ec:e8:dc:e0:a6:21:ef:16:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:7F:E9:34:2C:F7:4D:97:46:3C:AB:63:AA:86:85:6C:E5:A2:A0
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:00:5c:db:6c:12:69:8b:e9:da:91:5b:a5:3b:85:51:d2:
9c:10:c2:9a:b4:54:39:c2:b4:c7:cb:2a:94:a8:a8:d0:3b:e1:
e5:a2:fd:3c:62:9b:77:b8:5f:f7:9f:19:de:d7:07:7c:e2:df:
01:91:bd:66:cd:e6:1f:9b:ce:37:12:47:45:54:84:e0:37:84:
7f:a5:f2:eb:39:a2:73:10:b3:a5:eb:90:96:b8:1c:a0:c9:03:
19:0a:17:bc:6e:92:07:b9:7d:7f:fa:a5:fc:5f:7b:bb:a9:7c:
82:84:07:e7:86:29:45:6a:ca:b8:b4:5b:a2:73:61:1a:68:f3:
f1:4a:e0:be:65:60:d8:54:db:59:d8:a0:5c:01:ee:94:3f:55:
b5:ed:59:68:d8:f6:70:91:c8:bb:df:af:7b:ba:a1:84:f6:1f:
bd:25:d9:ee:f5:e9:08:2e:dc:69:2a:04:66:a6:7d:8c:bd:ca:
6b:90:80:41:2a:d1:f2:ce:4d:94:ff:d5:1c:73:c7:22:51:85:
22:86:d6:98:bf:c4:5e:7a:e7:56:84:57:ad:bf:cf:1d:ef:5a:
d9:8a:d5:a1:24:7e:35:59:40:a5:a6:de:fe:a0:ae:be:29:75:
14:fe:f4:a1:1e:41:4d:0b:23:0d:86:91:b8:9b:3d:5a:ee:90:
5c:60:9c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLfP2yMtMwesQph/7dImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzA4OGVlNzFjYjY4MTU5OTBkYzI0ODY3YjRhMGUzMTk2
ODAwMGYwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
Eyg5MTdhN2ZlOTM0MmNmNzRkOTc0NjNjYWI2M2FhODY4NTZjZTVhMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR8w2w+6Cl/CblfR5bcopc/pcI8J
pcl/WIfzbM2PHft2Gpq8xHkXuSiIhvIlOhGBoq3ShGu1/akOXJ9biX4+m9Kge+xg
I+P4VydhVgpW8aXyJDNbfRgeW0u3cS0UUu/bPdHmZABL/S4uRj28sQb9MX9UKGvJ
cdYGghEBHBUHoaHct2x94bScRnwP4gIb47XO+f3CQtXXY7m9Xk2ai91kM53smKK4
fOz6dZPn4LEyxRe8nSa8ajFMtQm7W9pjFCOQOjEXACwTtT0Yb8tuuDiNJUi5L/1d
O8b/pBvFcCqE8KKMl1rWD8mdhn6H7MhyFzfqU8zK0bsI7Ojc4KYh7xb2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF6f+k0LPdNl0Y8q2OqhoVs5aKgMB8GA1UdIwQY
MBaAFI4wiO5xy2gVmQ3CSGe0oOMZaAAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2Et
OWVjMmEyYTA5NGQ3LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2EtOWVjMmEyYTA5NGQ3
LzEvampDSTduSExhQldaRGNKSVo3U2c0eGxvQUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJYAXNts
EmmL6dqRW6U7hVHSnBDCmrRUOcK0x8sqlKio0Dvh5aL9PGKbd7hf958Z3tcHfOLf
AZG9Zs3mH5vONxJHRVSE4DeEf6Xy6zmicxCzpeuQlrgcoMkDGQoXvG6SB7l9f/ql
/F97u6l8goQH54YpRWrKuLRbonNhGmjz8UrgvmVg2FTbWdigXAHulD9Vte1ZaNj2
cJHIu9+ve7qhhPYfvSXZ7vXpCC7caSoEZqZ9jL3Ka5CAQSrR8s5NlP/VHHPHIlGF
IobWmL/EXnrnVoRXrb/PHe9a2YrVoSR+NVlApabe/qCuvil1FP70oR5BTQsjDYaR
uJs9Wu6QXGCcQA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:57:48 2025 by rpki-client