Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: 4tyAIimCJXhffId9lESde7gOXQkcZRkIQnfbVuT+4MQ=
Subject key identifier: 7B:EA:64:CE:1D:68:55:B1:F4:B9:B4:E2:9C:C8:75:83:B5:93:FC:45
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 0194BD8537A6FC569D909E714907E3A90419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: NPRBfjkvr7DJqvOFVCrDoCTWRbLd3xjnzIBeBgt8zmA=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:a6:fc:56:9d:90:9e:71:49:07:e3:a9:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=7bea64ce1d6855b1f4b9b4e29cc87583b593fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:c0:af:ca:ef:00:e1:6e:a6:e3:da:d6:fb:
d9:c5:de:65:a4:d4:7a:d2:9d:ed:5e:b2:86:32:0e:
62:a5:85:45:e9:1b:f9:13:ec:39:f6:c2:76:70:a6:
b1:c9:63:3f:e9:d2:89:de:25:31:84:4b:cf:48:19:
87:96:1d:d6:1a:97:46:f7:7d:ea:54:ba:49:31:e1:
c2:68:52:4d:a7:8c:2a:f2:24:c5:cf:70:b9:47:b1:
05:a2:c9:17:5c:1b:1c:14:2a:e5:cd:21:b7:81:59:
b8:95:bc:67:0b:7c:47:11:5e:a2:19:5c:d1:ed:b9:
44:71:0e:7f:e4:14:23:e4:52:29:8a:e7:dc:39:e7:
11:10:67:77:14:b9:95:5f:bd:6d:3a:ae:f5:47:49:
98:16:8d:88:a3:2b:5e:a3:cd:36:07:cf:da:46:3f:
e0:91:a9:8b:79:48:8e:9e:f2:de:c1:f1:5e:74:39:
b1:d9:b7:ff:2b:00:45:aa:90:f5:dc:2e:6d:5b:fc:
bd:45:71:06:1a:b3:2d:2d:9a:d6:86:a5:56:b4:9f:
95:a0:ca:a3:a3:ec:87:f6:86:61:7c:d8:f8:c5:38:
89:54:02:85:13:e1:c8:2f:e3:20:47:6c:4b:e6:74:
f9:57:e3:e8:1c:86:50:e6:2b:9f:bb:eb:13:e1:99:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EA:64:CE:1D:68:55:B1:F4:B9:B4:E2:9C:C8:75:83:B5:93:FC:45
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:90:71:81:8f:fc:d0:33:b1:28:52:60:2c:78:32:bd:56:64:
be:f9:78:32:67:38:5f:8b:72:c9:00:ff:ef:b7:be:c5:f8:91:
b8:5b:77:3f:6b:4b:4a:5c:d3:6d:66:53:fb:5e:72:bb:26:15:
7c:c9:ac:90:2d:fc:f9:3f:e3:c5:0f:73:13:5b:43:f1:10:39:
1b:e4:60:35:25:96:89:80:98:95:5a:d7:0a:3e:09:9b:75:c1:
b9:0a:60:ba:79:38:ec:e5:96:2e:29:7e:32:09:7e:b9:ee:f4:
e4:d4:ae:18:46:2f:05:49:0c:1c:46:fb:7d:66:c8:9c:f6:5b:
ce:68:f0:b8:51:a3:56:c0:db:1a:c1:74:64:07:b9:51:54:97:
62:92:03:f8:40:6e:02:fc:2d:bf:ee:c1:a1:1f:94:c6:a8:32:
5b:b0:4c:5c:f8:ed:44:9a:55:8e:c5:d4:e4:df:c6:b4:01:50:
9f:6e:b9:3a:ed:99:3c:cb:e2:7f:05:1a:ef:49:79:d7:52:92:
c2:02:bd:f5:26:fc:5f:3f:24:9a:a6:38:b1:3d:a6:3e:d5:2f:
17:a6:c2:0c:79:93:20:11:83:02:6e:3f:3c:3d:b8:ca:59:0d:
4f:02:50:6d:dd:f3:2b:76:aa:3e:af:7d:07:a4:9a:93:46:90:
96:cf:6d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTem/FadkJ5xSQfjqQQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw
YWFkMmYwHhcNMjUwMTMxMTgwMDExWhcNMjUwMjAxMTgwMDExWjAzMTEwLwYDVQQD
Eyg3YmVhNjRjZTFkNjg1NWIxZjRiOWI0ZTI5Y2M4NzU4M2I1OTNmYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9zAr8rvAOFupuPa1vvZxd5lpNR6
0p3tXrKGMg5ipYVF6Rv5E+w59sJ2cKaxyWM/6dKJ3iUxhEvPSBmHlh3WGpdG933q
VLpJMeHCaFJNp4wq8iTFz3C5R7EFoskXXBscFCrlzSG3gVm4lbxnC3xHEV6iGVzR
7blEcQ5/5BQj5FIpiufcOecREGd3FLmVX71tOq71R0mYFo2Ioyteo802B8/aRj/g
kamLeUiOnvLewfFedDmx2bf/KwBFqpD13C5tW/y9RXEGGrMtLZrWhqVWtJ+VoMqj
o+yH9oZhfNj4xTiJVAKFE+HIL+MgR2xL5nT5V+PoHIZQ5iufu+sT4ZkaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvqZM4daFWx9Lm04pzIdYO1k/xFMB8GA1UdIwQY
MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt
ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2
LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppBxgY/8
0DOxKFJgLHgyvVZkvvl4Mmc4X4tyyQD/77e+xfiRuFt3P2tLSlzTbWZT+15yuyYV
fMmskC38+T/jxQ9zE1tD8RA5G+RgNSWWiYCYlVrXCj4Jm3XBuQpgunk47OWWLil+
Mgl+ue705NSuGEYvBUkMHEb7fWbInPZbzmjwuFGjVsDbGsF0ZAe5UVSXYpID+EBu
Avwtv+7BoR+UxqgyW7BMXPjtRJpVjsXU5N/GtAFQn265Ou2ZPMvifwUa70l511KS
wgK99Sb8Xz8kmqY4sT2mPtUvF6bCDHmTIBGDAm4/PD24ylkNTwJQbd3zK3aqPq99
B6Sak0aQls9tVg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:34 2025 by rpki-client