Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: Iv6dKeUuTaF1UwIOW9QVDGKUuGzlGFRHtJ/s0nHfgOI=
Subject key identifier: 7B:BC:7B:3A:7B:FE:59:82:4F:50:EF:78:3F:7A:C8:6E:BB:35:27:EB
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 0194BD178BD69E820CE40492CFE2793DEA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 0E06
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: 2KAsI2gHyw95kYhnQ35SUx9IBFZ4VxbYkH4bsiFzvYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:d6:9e:82:0c:e4:04:92:cf:e2:79:3d:ea:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=7bbc7b3a7bfe59824f50ef783f7ac86ebb3527eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:7c:a2:8d:db:5b:ed:53:52:df:16:45:d5:
c2:af:f5:06:1d:46:1d:79:51:14:53:fb:86:e2:50:
5f:4c:1a:d2:e6:a5:73:6d:63:1e:dd:20:5e:ff:9f:
0c:6c:43:b3:31:4e:3f:a1:01:94:fb:c5:3d:89:cd:
54:89:c8:53:d7:76:36:dd:64:2c:66:17:f2:c0:02:
d5:8e:87:25:b4:15:1a:07:51:e1:2f:70:63:9d:32:
e4:79:5e:af:10:b1:cd:10:9d:ca:c1:37:9f:24:50:
3a:90:12:db:39:29:5f:cc:fb:ed:88:45:18:4c:cf:
68:5f:71:a2:f7:c3:71:bf:ec:04:b1:ab:f5:b2:42:
bd:68:d9:17:d8:db:e2:f6:b2:f7:6e:2c:78:94:20:
54:13:5a:35:d7:de:74:25:77:3d:c8:4e:66:88:50:
0f:05:2a:1f:e0:9f:b7:89:b0:b8:07:de:48:79:b5:
cb:2c:29:58:64:c4:47:55:a5:8f:64:75:57:03:2d:
4f:43:21:f1:42:8f:4b:d0:67:c4:3f:bc:b3:8e:2d:
ea:43:47:52:59:4a:3c:a5:c1:4b:0f:35:b2:41:8e:
29:5f:e4:f3:8a:22:14:8b:7e:28:2e:52:4b:c3:57:
37:af:f5:a2:d2:fc:59:e1:70:c6:e0:22:d3:ce:6e:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:7B:3A:7B:FE:59:82:4F:50:EF:78:3F:7A:C8:6E:BB:35:27:EB
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:c0:29:39:b7:99:e6:67:1f:69:65:b2:82:0c:20:d5:f8:
c1:f3:22:26:f8:fd:3c:c2:b2:9d:7a:93:a4:65:dc:5e:8d:aa:
c2:dd:15:10:25:6d:94:b7:83:21:81:6b:95:76:d4:2f:b4:b3:
13:99:09:59:10:78:05:12:1b:2f:a8:99:8b:69:91:3d:26:70:
e5:49:32:87:44:3c:bf:c8:08:28:1e:c6:9e:34:d6:ef:ba:65:
08:44:4e:45:f6:bd:b7:eb:0a:cd:7e:43:1c:48:d1:a9:d4:43:
20:74:8b:16:69:d2:89:7e:d3:79:cc:85:1f:b6:90:66:14:83:
53:4c:fe:0f:ee:98:a8:b6:95:f0:5b:3b:a5:44:44:51:bb:12:
66:1c:ba:a2:36:47:27:7c:19:a2:63:f0:9e:15:12:b0:89:2b:
e1:cc:6b:93:df:67:b6:b4:6b:55:0b:bf:0d:8e:3a:4a:3e:a6:
4d:3b:88:15:87:4e:f6:ab:9c:5b:2c:e2:5d:20:71:0a:39:de:
86:7a:32:3b:e7:4c:64:79:c0:51:c7:2c:9d:c5:aa:87:b7:9e:
2c:19:19:1a:f0:17:b0:20:d5:0e:00:88:d6:f2:6b:06:c7:50:
75:5c:bb:f0:78:3f:68:7f:3a:23:c1:7c:d5:88:b0:f9:b1:aa:
1f:93:e4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4vWnoIM5ASSz+J5PepXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzNhODZiYmM1YzJiYWI0NTJmZjAzZjQ1YTllYWYwYTYx
MGM0MGMwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
Eyg3YmJjN2IzYTdiZmU1OTgyNGY1MGVmNzgzZjdhYzg2ZWJiMzUyN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxl8oo3bW+1TUt8WRdXCr/UGHUYd
eVEUU/uG4lBfTBrS5qVzbWMe3SBe/58MbEOzMU4/oQGU+8U9ic1UichT13Y23WQs
ZhfywALVjocltBUaB1HhL3BjnTLkeV6vELHNEJ3KwTefJFA6kBLbOSlfzPvtiEUY
TM9oX3Gi98Nxv+wEsav1skK9aNkX2Nvi9rL3bix4lCBUE1o11950JXc9yE5miFAP
BSof4J+3ibC4B95IebXLLClYZMRHVaWPZHVXAy1PQyHxQo9L0GfEP7yzji3qQ0dS
WUo8pcFLDzWyQY4pX+TziiIUi34oLlJLw1c3r/Wi0vxZ4XDG4CLTzm5foQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu8ezp7/lmCT1DveD96yG67NSfrMB8GA1UdIwQY
MBaAFCQzqGu8XCurRS/wP0Wp6vCmEMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDkt
MDViNmM5YzE2NDQxLzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDktMDViNmM5YzE2NDQx
LzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobzAKTm3
meZnH2llsoIMINX4wfMiJvj9PMKynXqTpGXcXo2qwt0VECVtlLeDIYFrlXbUL7Sz
E5kJWRB4BRIbL6iZi2mRPSZw5Ukyh0Q8v8gIKB7GnjTW77plCERORfa9t+sKzX5D
HEjRqdRDIHSLFmnSiX7TecyFH7aQZhSDU0z+D+6YqLaV8Fs7pUREUbsSZhy6ojZH
J3wZomPwnhUSsIkr4cxrk99ntrRrVQu/DY46Sj6mTTuIFYdO9qucWyziXSBxCjne
hnoyO+dMZHnAUccsncWqh7eeLBkZGvAXsCDVDgCI1vJrBsdQdVy78Hg/aH86I8F8
1Yiw+bGqH5Pk8g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:00 2025 by rpki-client