Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: MaGspnThob0TP1oYtl5fDSpIsu0b60kR+AONojC31Qw=
Subject key identifier: AE:68:35:00:3C:89:47:51:F2:51:91:47:80:C3:69:E8:BA:D3:4A:4D
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 0194BBCE889AA30A133EB787489CD0F1D37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: WJoJIEjRunBOJ8oxCYiBWgh1oNXShbi49WzCRXO7iTc=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:9a:a3:0a:13:3e:b7:87:48:9c:d0:f1:d3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=ae6835003c894751f251914780c369e8bad34a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:20:e3:1a:f8:a8:41:78:e2:52:49:94:2f:
e9:e3:c0:2f:0a:a8:cd:32:d6:cd:26:75:37:b6:42:
44:3a:12:e0:52:39:86:c5:b5:26:78:cf:59:ee:31:
92:16:97:d7:5c:fc:0e:29:0c:99:1b:c5:78:e7:d0:
19:bb:b7:01:40:5a:cc:b6:56:0b:aa:b4:8b:b3:7c:
2b:9d:f6:62:68:2a:e6:6f:19:b3:df:a4:37:f8:b2:
7e:c7:64:2d:f5:59:50:b7:4e:77:77:73:a6:ef:a3:
86:71:d1:ba:c9:41:a2:e3:c0:24:5d:97:bf:5e:e1:
b1:a0:b8:6f:be:c8:46:54:4d:7f:dd:01:55:2a:1b:
38:eb:be:66:64:fd:e8:6d:e8:ce:50:34:97:2d:94:
4f:59:75:82:80:a9:52:ca:56:e6:b5:7e:09:5b:7e:
aa:24:c1:cd:c4:38:97:a8:6c:27:c6:c0:62:3a:04:
de:a5:e6:a7:e4:85:64:81:f1:87:bc:79:18:17:c1:
da:9f:d1:66:50:0d:be:21:25:ab:61:1d:d9:89:58:
3c:f5:75:1c:00:59:c1:ac:fe:09:06:ba:53:ec:d1:
e5:a5:3c:8e:7d:5c:ba:df:85:c7:56:2f:3d:32:5f:
b6:9f:74:e2:a0:79:7b:59:9a:2b:71:cf:e9:54:b5:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:68:35:00:3C:89:47:51:F2:51:91:47:80:C3:69:E8:BA:D3:4A:4D
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d3:06:cd:f8:07:65:c4:cf:68:bb:a5:9e:49:1d:26:38:22:
3b:e5:8c:30:f5:09:f1:3c:df:8d:a4:74:d9:e6:dd:33:0f:c8:
ee:66:89:01:f5:38:67:e7:1e:fa:1b:35:4f:5e:a9:5a:29:28:
e4:41:90:96:09:18:d8:8c:52:97:38:4e:1d:f1:75:ee:1b:7e:
75:fc:b2:cf:96:83:47:c1:c0:d5:f5:7e:bf:11:e3:b5:c4:47:
65:90:9a:76:9e:2b:18:99:71:21:a2:f7:02:f4:98:57:81:ed:
72:68:0d:ee:39:8e:f7:13:68:49:19:e6:a7:57:8a:61:22:90:
45:0f:b5:5f:64:5f:51:54:fe:9f:ee:a6:b0:d1:bf:6f:56:4d:
3d:90:64:4f:48:e1:e8:ce:7e:86:29:41:5f:19:db:cd:47:65:
ce:32:96:ca:12:d1:c0:a3:14:85:36:03:46:49:8f:ce:1a:b6:
b4:72:5d:aa:a3:43:28:dd:5a:88:bd:8f:03:3e:fc:03:ca:ae:
be:d5:f4:0f:2d:ab:32:23:08:70:cd:36:60:dd:ea:6a:1b:9b:
ef:e7:75:7e:2e:0d:a3:8a:5f:26:47:e6:c1:ae:41:50:ae:2f:
f2:d1:1f:1d:9b:be:61:e5:00:28:62:92:05:17:e1:7e:bd:2a:
4e:09:a1:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoiaowoTPreHSJzQ8dN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTNhMzQxOTY3YWVkYmU1MmE4YjExYzc5Y2IxMzkxMWE0
YTlmNzcwHhcNMjUwMTMxMTAwMTAyWhcNMjUwMjAxMTAwMTAyWjAzMTEwLwYDVQQD
EyhhZTY4MzUwMDNjODk0NzUxZjI1MTkxNDc4MGMzNjllOGJhZDM0YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfcg4xr4qEF44lJJlC/p48AvCqjN
MtbNJnU3tkJEOhLgUjmGxbUmeM9Z7jGSFpfXXPwOKQyZG8V459AZu7cBQFrMtlYL
qrSLs3wrnfZiaCrmbxmz36Q3+LJ+x2Qt9VlQt053d3Om76OGcdG6yUGi48AkXZe/
XuGxoLhvvshGVE1/3QFVKhs4675mZP3obejOUDSXLZRPWXWCgKlSylbmtX4JW36q
JMHNxDiXqGwnxsBiOgTepean5IVkgfGHvHkYF8Han9FmUA2+ISWrYR3ZiVg89XUc
AFnBrP4JBrpT7NHlpTyOfVy634XHVi89Ml+2n3TioHl7WZorcc/pVLUoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5oNQA8iUdR8lGRR4DDaei600pNMB8GA1UdIwQY
MBaAFCQTo0GWeu2+UqixHHnLE5EaSp93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTkt
NGQ5Mjk2ZTliM2FlLzEvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTktNGQ5Mjk2ZTliM2Fl
LzEvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNMGzfgH
ZcTPaLulnkkdJjgiO+WMMPUJ8TzfjaR02ebdMw/I7maJAfU4Z+ce+hs1T16pWiko
5EGQlgkY2IxSlzhOHfF17ht+dfyyz5aDR8HA1fV+vxHjtcRHZZCadp4rGJlxIaL3
AvSYV4HtcmgN7jmO9xNoSRnmp1eKYSKQRQ+1X2RfUVT+n+6msNG/b1ZNPZBkT0jh
6M5+hilBXxnbzUdlzjKWyhLRwKMUhTYDRkmPzhq2tHJdqqNDKN1aiL2PAz78A8qu
vtX0Dy2rMiMIcM02YN3qahub7+d1fi4No4pfJkfmwa5BUK4v8tEfHZu+YeUAKGKS
BRfhfr0qTgmh2w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:03 2025 by rpki-client