Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: fCHNYAyQxszTkIlzobcTNrHBbY+S4g2Wyb16l9AHiDM=
Subject key identifier: 6B:0D:55:C5:3B:35:8A:63:DF:45:6C:5F:10:E6:9C:5C:B2:C0:E9:02
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 0194BD4E3A1567AC20E270D41FDC18E016C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: sepgL6L4FbrnelRbLG4zbpdK76aNdhym5pNApPzfSKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:15:67:ac:20:e2:70:d4:1f:dc:18:e0:16:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=6b0d55c53b358a63df456c5f10e69c5cb2c0e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:b8:cb:6b:e6:52:e8:0a:c2:ff:3c:07:3c:
a5:e1:71:b9:5b:7b:b7:fc:9b:c8:55:66:73:66:68:
e1:45:6d:e9:60:1a:5e:2c:38:03:64:09:62:6d:65:
1e:c4:00:9d:58:7c:a8:40:c5:f7:bc:71:08:63:22:
27:d3:b4:81:89:c8:1e:9b:49:44:c2:44:0b:ad:42:
85:6b:02:d2:d1:8f:00:9d:3b:ab:88:8a:60:60:0a:
f8:a6:37:fa:19:d5:59:41:61:fd:1f:b3:bf:0c:c8:
49:5d:6b:7a:d4:5f:f7:87:b1:7b:03:83:b6:14:44:
89:bf:51:86:5e:fa:03:18:71:d6:72:02:e6:9a:47:
3c:70:d9:44:d1:0f:b9:27:7d:89:65:a1:c7:f0:e4:
f3:e0:5b:07:b3:89:c8:2c:8c:b7:4d:9a:68:7c:cb:
cc:70:40:92:08:d8:8d:d4:ef:28:44:d0:94:74:ba:
f1:67:05:2b:73:4f:06:62:dd:f7:cc:0d:4f:0b:76:
f9:ff:17:94:0e:af:95:4b:c9:e6:31:b1:f8:e4:79:
95:ff:41:50:28:ec:fa:ff:93:7c:1d:12:8a:cc:71:
21:95:57:52:d2:5f:af:1d:9e:21:2b:5c:9a:8b:50:
8a:ae:e4:8d:de:6c:c8:3b:ec:62:4d:5a:98:5f:1d:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0D:55:C5:3B:35:8A:63:DF:45:6C:5F:10:E6:9C:5C:B2:C0:E9:02
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b1:3b:69:7a:75:f7:5a:96:55:52:17:e2:20:01:67:52:06:
b7:07:e7:97:9b:ea:c3:ab:f2:29:92:cd:15:42:5e:93:a5:c1:
8e:6d:0b:87:d9:22:1e:fc:dd:a3:ec:72:f6:86:d0:9b:d9:f1:
78:29:a3:87:94:a8:81:e8:4c:e9:52:4b:c1:7f:eb:1e:2f:31:
83:0d:a5:9f:47:ce:96:99:00:df:fd:0f:bb:a6:b6:60:2f:d4:
f0:5a:77:9c:fa:73:1d:0a:fb:c9:ca:c7:63:9e:b3:e6:b0:aa:
e1:6e:5a:8b:c3:84:df:90:32:c0:66:aa:8d:b7:5c:48:93:32:
1f:2e:59:d0:8b:d5:f9:78:b6:8f:7e:4c:52:f7:30:55:24:d0:
39:07:2e:61:c1:a4:22:22:d7:44:7a:c3:d0:50:e0:38:d2:18:
e6:4a:e0:41:c2:93:14:23:9c:7c:ac:c9:b5:d7:3d:29:19:17:
a2:83:9a:fb:d3:5c:f7:5d:d3:ce:1b:77:1b:a0:be:b4:57:e8:
66:43:79:40:44:d1:aa:58:a5:a7:7f:54:b6:02:43:63:73:39:
ce:80:dd:db:f1:ef:1e:ee:a4:be:63:2e:56:e6:fe:b8:59:ad:
b8:38:fd:42:c1:18:00:50:27:e0:b7:2d:f0:f3:9b:ee:ac:db:
dc:a4:fc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TjoVZ6wg4nDUH9wY4BbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDI3YTI2MGQ2ZDk2Y2MxMTE1Y2NjZThhOTE0YWZmYjBl
MWQxNmIwHhcNMjUwMTMxMTcwMDA3WhcNMjUwMjAxMTcwMDA3WjAzMTEwLwYDVQQD
Eyg2YjBkNTVjNTNiMzU4YTYzZGY0NTZjNWYxMGU2OWM1Y2IyYzBlOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyre4y2vmUugKwv88Bzyl4XG5W3u3
/JvIVWZzZmjhRW3pYBpeLDgDZAlibWUexACdWHyoQMX3vHEIYyIn07SBicgem0lE
wkQLrUKFawLS0Y8AnTuriIpgYAr4pjf6GdVZQWH9H7O/DMhJXWt61F/3h7F7A4O2
FESJv1GGXvoDGHHWcgLmmkc8cNlE0Q+5J32JZaHH8OTz4FsHs4nILIy3TZpofMvM
cECSCNiN1O8oRNCUdLrxZwUrc08GYt33zA1PC3b5/xeUDq+VS8nmMbH45HmV/0FQ
KOz6/5N8HRKKzHEhlVdS0l+vHZ4hK1yai1CKruSN3mzIO+xiTVqYXx37cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsNVcU7NYpj30VsXxDmnFyywOkCMB8GA1UdIwQY
MBaAFCZCeiYNbZbMERXMzoqRSv+w4dFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTIt
ODUyOGU1NTMyYzBlLzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mM2ZkZjAtYTFhNS00NWExLTgyNTItODUyOGU1NTMyYzBl
LzEvSmtKNkpnMXRsc3dSRmN6T2lwRktfN0RoMFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILE7aXp1
91qWVVIX4iABZ1IGtwfnl5vqw6vyKZLNFUJek6XBjm0Lh9kiHvzdo+xy9obQm9nx
eCmjh5SogehM6VJLwX/rHi8xgw2ln0fOlpkA3/0Pu6a2YC/U8Fp3nPpzHQr7ycrH
Y56z5rCq4W5ai8OE35AywGaqjbdcSJMyHy5Z0IvV+Xi2j35MUvcwVSTQOQcuYcGk
IiLXRHrD0FDgONIY5krgQcKTFCOcfKzJtdc9KRkXooOa+9Nc913Tzht3G6C+tFfo
ZkN5QETRqlilp39UtgJDY3M5zoDd2/HvHu6kvmMuVub+uFmtuDj9QsEYAFAn4Lct
8POb7qzb3KT8Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:11 2025 by rpki-client