Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: lPWU3imCxcYyndCZNBmatBPEu6/KrxaFoH4AOE9nqpg=
Subject key identifier: F7:88:09:C8:73:2F:02:E2:73:67:F2:93:27:05:C1:FF:DA:ED:11:FB
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0194BD4E4920FBB1290D0F787C0427163DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 130D
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: xQPhDLF/4xndgVrf0lGpEmRre5zljfb+3N45WPBpjno=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:20:fb:b1:29:0d:0f:78:7c:04:27:16:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=f78809c8732f02e27367f2932705c1ffdaed11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:88:d8:7e:d2:e3:78:4f:fc:81:89:b1:21:
5e:4b:5d:b8:c9:82:ee:36:6a:82:df:ea:11:63:7f:
20:58:59:f7:ed:9c:1b:3a:ef:bc:38:9f:04:be:7c:
c7:07:d2:8c:f3:63:86:62:23:b8:37:a4:80:9b:8b:
05:c9:f5:5e:2e:4b:df:70:d5:31:ee:a5:4b:68:0c:
38:9c:1a:77:69:a9:44:36:2a:85:15:03:a3:a4:86:
d4:26:9e:82:95:05:96:7c:42:31:ff:57:54:a7:e6:
1c:93:1f:3e:4b:f7:9c:93:b1:2b:cb:8a:c2:c2:3c:
7f:6c:7a:00:cd:28:ff:81:e5:e6:ec:97:f1:46:e0:
5b:ce:92:42:fe:05:d1:5f:ff:f5:a9:30:e8:a8:a8:
5a:c5:ef:a9:39:a9:d4:46:df:70:3e:03:b8:48:b0:
2d:4e:da:69:84:94:b5:54:b4:a0:70:e8:15:1a:f6:
f6:7b:d3:16:71:c2:23:65:0e:15:50:af:52:96:34:
7c:be:c9:3a:4f:05:6c:4d:05:3c:06:a9:b2:96:5c:
21:bc:81:d1:ae:08:34:ea:0f:09:ee:ad:02:dd:8b:
cb:93:00:11:ff:3e:50:da:f1:ad:41:f5:bf:c2:2c:
c7:b8:dc:df:fa:5c:11:01:0c:33:17:80:ef:f8:d0:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:09:C8:73:2F:02:E2:73:67:F2:93:27:05:C1:FF:DA:ED:11:FB
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:1e:2f:4b:68:34:1a:7f:d5:74:a4:df:95:81:39:a8:47:
d4:63:f6:3e:63:7b:df:4b:fe:43:f2:79:f4:f6:a3:84:b5:8d:
c0:0d:a6:5e:45:3e:5c:aa:33:a1:0f:46:d1:7a:d0:7a:47:96:
67:6b:b0:1c:1e:0a:f6:7a:4a:f1:a2:be:43:bf:13:22:05:ac:
85:4d:29:0c:79:6d:99:3b:2b:2a:f5:cb:8a:7e:06:e3:79:5d:
17:66:70:98:96:f9:c0:a4:a0:47:d1:86:9e:b0:db:15:ea:11:
8b:a6:57:38:b4:16:87:fe:82:ff:f3:61:ac:6c:ad:9e:e0:81:
f8:ad:4d:4d:d3:ed:bb:a1:bd:72:ca:36:d6:ee:d2:da:94:4d:
b7:ac:d3:10:4c:ee:af:6a:e3:77:61:ce:24:cd:b9:88:f6:73:
12:ce:59:af:af:ad:83:3c:7f:93:35:92:a2:c4:cb:db:52:d6:
96:a8:f0:ae:e7:dd:e9:a7:b0:1c:79:04:51:6e:0b:f4:85:ac:
02:13:21:ad:a6:54:80:3d:91:9f:c8:5b:fc:9b:72:c0:8d:61:
92:c3:5d:02:89:55:dc:f5:59:f6:8f:7d:ad:05:97:c8:e1:64:
6a:7b:fc:d6:c7:da:b6:f9:5b:ad:c0:4b:41:3c:13:2c:21:39:
44:71:45:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tkkg+7EpDQ94fAQnFj3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0
ODU3YzYwHhcNMjUwMTMxMTcwMDExWhcNMjUwMjAxMTcwMDExWjAzMTEwLwYDVQQD
EyhmNzg4MDljODczMmYwMmUyNzM2N2YyOTMyNzA1YzFmZmRhZWQxMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtyI2H7S43hP/IGJsSFeS124yYLu
NmqC3+oRY38gWFn37ZwbOu+8OJ8EvnzHB9KM82OGYiO4N6SAm4sFyfVeLkvfcNUx
7qVLaAw4nBp3aalENiqFFQOjpIbUJp6ClQWWfEIx/1dUp+Yckx8+S/eck7Ery4rC
wjx/bHoAzSj/geXm7JfxRuBbzpJC/gXRX//1qTDoqKhaxe+pOanURt9wPgO4SLAt
TtpphJS1VLSgcOgVGvb2e9MWccIjZQ4VUK9SljR8vsk6TwVsTQU8BqmyllwhvIHR
rgg06g8J7q0C3YvLkwAR/z5Q2vGtQfW/wizHuNzf+lwRAQwzF4Dv+NBNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeICchzLwLic2fykycFwf/a7RH7MB8GA1UdIwQY
MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt
NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0
LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/geL0to
NBp/1XSk35WBOahH1GP2PmN730v+Q/J59PajhLWNwA2mXkU+XKozoQ9G0XrQekeW
Z2uwHB4K9npK8aK+Q78TIgWshU0pDHltmTsrKvXLin4G43ldF2ZwmJb5wKSgR9GG
nrDbFeoRi6ZXOLQWh/6C//NhrGytnuCB+K1NTdPtu6G9cso21u7S2pRNt6zTEEzu
r2rjd2HOJM25iPZzEs5Zr6+tgzx/kzWSosTL21LWlqjwrufd6aewHHkEUW4L9IWs
AhMhraZUgD2Rn8hb/JtywI1hksNdAolV3PVZ9o99rQWXyOFkanv81sfatvlbrcBL
QTwTLCE5RHFFUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:02 2025 by rpki-client