Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
File: jzHMNgWz78CbJohQgGO2_UhVYd0.mft (raw, json)
Hash identifier: 31WL0i+OUzQi5B/qo3IjvW2SeIooHwZgAlA8dC3aY4E=
Subject key identifier: B5:9E:C0:0F:05:96:05:D6:D5:B6:FF:AD:A8:B4:86:79:C5:56:EB:F9
Authority key identifier: 8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
Certificate issuer: /CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Certificate serial: 0194BCE0738B021D7FF898E58388E65FEC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
Manifest number: 090F
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: KGShywXbD4wB1PLsBTNT01VDQKY.roa (hash: hBh9EiIl2TqddpHizY/LGkFYV3Ncy9Yws3g05SvVJTg=)
2: jzHMNgWz78CbJohQgGO2_UhVYd0.crl (hash: 5QM6fdCIUKUiGG+a8TAJVNmmPIZnPlgz7MOwxluvnjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:8b:02:1d:7f:f8:98:e5:83:88:e6:5f:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f31cc3605b3efc09b2688508063b6fd485561dd
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=b59ec00f059605d6d5b6ffada8b48679c556ebf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:50:e8:a8:a0:1b:41:4f:95:6d:52:46:42:8b:
90:5b:65:9d:7c:8e:3a:9f:85:50:a8:56:88:8f:c8:
53:40:bb:b4:59:6f:77:40:61:2f:a0:54:0d:0b:96:
23:74:88:0f:79:17:61:b8:e7:2b:b8:1a:6c:78:4b:
76:60:42:dd:c9:bb:c3:2a:07:0f:b7:5c:c1:2c:a2:
93:ee:57:02:65:1a:28:6f:54:e9:01:fb:cc:e7:63:
0a:b6:bc:45:ba:36:c5:44:52:fa:1d:3e:86:69:49:
1b:aa:8c:48:68:d3:ef:ad:a5:14:3b:df:2d:e5:4a:
dd:92:61:7e:53:4a:60:10:d6:95:a0:e2:b0:97:46:
06:86:7d:a2:40:fb:58:d9:1c:d1:9d:17:6a:e7:01:
06:30:05:8b:cb:bb:79:08:17:b8:60:5c:27:ba:19:
34:1a:7a:e4:36:59:18:bc:bc:48:2e:49:4f:5e:67:
de:2a:30:52:cb:12:ec:ff:0a:bf:c9:1e:70:4f:84:
48:ce:04:27:d4:98:a1:2d:4c:7c:58:9f:98:6d:53:
5c:b7:5d:cb:52:d0:be:ea:9e:86:3b:60:87:fa:bc:
8e:3b:61:45:f5:d4:a3:fd:27:f9:0d:eb:52:5d:f2:
84:b0:91:3e:bf:75:9c:70:2d:40:79:17:32:95:65:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:C0:0F:05:96:05:D6:D5:B6:FF:AD:A8:B4:86:79:C5:56:EB:F9
X509v3 Authority Key Identifier:
keyid:8F:31:CC:36:05:B3:EF:C0:9B:26:88:50:80:63:B6:FD:48:55:61:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzHMNgWz78CbJohQgGO2_UhVYd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a5a4-d07d-4abd-b129-227f7497dc1e/1/jzHMNgWz78CbJohQgGO2_UhVYd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:d6:ce:8d:f1:52:58:9e:ca:bb:3c:8b:23:a9:6f:cc:b5:
30:9a:c4:c3:eb:94:42:f2:ea:23:66:43:92:1c:a3:c9:83:16:
78:b7:dc:0b:cd:3a:5b:66:9f:d5:b0:a7:3c:fb:5d:41:d9:84:
41:b4:5b:5d:3d:b5:63:2b:69:97:2e:b1:1d:ab:f8:b5:e6:44:
c5:82:f8:00:fc:0c:92:f6:ed:5c:25:08:c0:7d:f6:69:0d:4f:
0a:2d:cb:c6:66:f1:8e:f7:6d:79:95:a4:6c:22:7a:46:6a:71:
7a:be:66:b6:af:4d:03:c2:c9:dd:3b:d6:8c:c6:91:e1:2d:56:
b1:63:1f:c7:75:e5:61:1d:b4:9a:41:8e:f1:1c:02:ed:56:49:
18:29:e1:34:87:6d:31:46:24:98:8e:1f:08:cc:56:34:a4:f4:
6a:9a:f2:69:80:b9:65:79:ac:4a:83:ef:b3:23:d4:91:82:3d:
57:e3:bc:23:8b:79:7b:7e:75:dd:0f:94:91:a7:7a:18:ff:82:
78:a1:48:98:03:93:87:14:60:ef:f6:00:26:ed:c9:d0:d9:30:
d3:a4:09:11:d0:30:80:35:a5:53:33:86:04:36:5d:b1:59:f9:
e8:41:f6:5d:c8:75:62:c7:d1:00:79:7e:65:b7:ee:d6:1f:d6:
aa:f7:8e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HOLAh1/+Jjlg4jmX+wEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzFjYzM2MDViM2VmYzA5YjI2ODg1MDgwNjNiNmZkNDg1
NTYxZGQwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EyhiNTllYzAwZjA1OTYwNWQ2ZDViNmZmYWRhOGI0ODY3OWM1NTZlYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FDoqKAbQU+VbVJGQouQW2WdfI46
n4VQqFaIj8hTQLu0WW93QGEvoFQNC5YjdIgPeRdhuOcruBpseEt2YELdybvDKgcP
t1zBLKKT7lcCZRoob1TpAfvM52MKtrxFujbFRFL6HT6GaUkbqoxIaNPvraUUO98t
5UrdkmF+U0pgENaVoOKwl0YGhn2iQPtY2RzRnRdq5wEGMAWLy7t5CBe4YFwnuhk0
GnrkNlkYvLxILklPXmfeKjBSyxLs/wq/yR5wT4RIzgQn1JihLUx8WJ+YbVNct13L
UtC+6p6GO2CH+ryOO2FF9dSj/Sf5DetSXfKEsJE+v3WccC1AeRcylWXcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWewA8FlgXW1bb/rai0hnnFVuv5MB8GA1UdIwQY
MBaAFI8xzDYFs+/AmyaIUIBjtv1IVWHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjkt
MjI3Zjc0OTdkYzFlLzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hM2E1YTQtZDA3ZC00YWJkLWIxMjktMjI3Zjc0OTdkYzFl
LzEvanpITU5nV3o3OENiSm9oUWdHTzJfVWhWWWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgl7Wzo3x
Ulieyrs8iyOpb8y1MJrEw+uUQvLqI2ZDkhyjyYMWeLfcC806W2af1bCnPPtdQdmE
QbRbXT21Yytply6xHav4teZExYL4APwMkvbtXCUIwH32aQ1PCi3LxmbxjvdteZWk
bCJ6Rmpxer5mtq9NA8LJ3TvWjMaR4S1WsWMfx3XlYR20mkGO8RwC7VZJGCnhNIdt
MUYkmI4fCMxWNKT0apryaYC5ZXmsSoPvsyPUkYI9V+O8I4t5e3513Q+Ukad6GP+C
eKFImAOThxRg7/YAJu3J0Nkw06QJEdAwgDWlUzOGBDZdsVn56EH2Xch1YsfRAHl+
Zbfu1h/WqveOPg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:07 2025 by rpki-client