Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: T+kbSZv16hof9z5+sYT9DXj3rwPs6+r+XJ2FV6GJLsI=
Subject key identifier: 97:66:AE:12:4C:CB:A1:F1:F2:9D:91:9A:98:A9:20:93:3C:3E:14:51
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 0194BC729AD50BC05CE2FF03F665BB745E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 068E
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: BU1YFwzPITRJs7Qej4xcLZpPD5M.roa (hash: VsXDY2e9w0zN+nUNkUBmRlpbBzNwCWexC0/Pv60Tz48=)
2: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: weIkV4SMm4jyAjpAzI5fF/xRzSARn/Yg2n7cBT5smTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:d5:0b:c0:5c:e2:ff:03:f6:65:bb:74:5e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=9766ae124ccba1f1f29d919a98a920933c3e1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:22:08:74:fb:91:b0:46:e4:c7:90:08:2f:
33:ff:f0:80:3f:49:12:7f:44:73:d8:e4:c2:1d:8b:
6e:47:89:09:ae:de:d7:97:5e:12:51:37:97:fe:e1:
30:3e:0e:12:e4:d9:c6:72:9f:4e:b8:d1:a5:61:18:
3e:a2:89:1d:bd:2c:22:c9:bd:29:ac:6c:3f:13:7e:
75:53:07:0a:3a:a1:45:cb:aa:a8:3f:1e:83:05:8b:
0b:12:d2:49:48:fd:ea:c5:dd:4e:0e:be:b0:fa:8f:
e7:c1:3b:2a:8d:0d:9d:24:2c:3d:45:5e:a2:c2:ca:
b7:a0:12:50:88:2b:fa:28:e5:d8:64:75:ba:1e:c8:
5a:e3:af:5d:28:19:28:c3:06:24:34:d1:68:82:01:
02:f1:20:27:c7:fa:9d:28:dc:06:7d:69:cf:dd:79:
fd:0b:7d:fb:61:8a:3b:35:f1:94:b3:05:72:cf:ff:
30:de:48:15:3e:c1:2c:62:0a:d7:20:b3:16:96:26:
4d:d2:ad:70:19:66:25:36:b2:c9:eb:d3:2c:70:e3:
1e:dd:96:d7:32:d4:f8:8e:5d:1a:56:27:dd:ce:3c:
61:e0:24:80:ab:70:8d:42:63:8f:37:1b:ac:ad:ea:
49:93:76:78:1c:a7:68:13:f4:5d:a0:fa:59:c7:11:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:AE:12:4C:CB:A1:F1:F2:9D:91:9A:98:A9:20:93:3C:3E:14:51
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:91:f4:9e:78:22:66:1f:2f:6a:c4:97:ee:16:2d:44:2e:83:
ba:0e:8b:73:26:fe:f4:18:e4:97:96:70:54:1d:7f:25:57:46:
1e:60:2d:f9:65:3d:79:95:7a:cd:33:c2:48:0a:cb:f3:18:93:
d4:e6:8e:49:97:d3:f2:6c:e5:fe:96:05:a9:7a:ed:ee:c8:c8:
65:50:c6:dd:8b:64:1e:1e:a7:6c:2c:a5:b4:a5:d4:d7:a8:c3:
77:87:7c:2a:dc:5e:de:cc:3b:9d:a7:ae:2c:92:62:e0:06:d5:
63:74:0a:8b:16:5c:18:29:1b:a0:27:fe:86:3c:07:49:91:ae:
a0:96:f0:3c:3a:d2:6a:7c:20:ab:fe:26:3f:a9:0f:ef:48:55:
e2:dd:90:85:75:61:a9:40:64:45:e5:c3:1d:e1:8e:39:30:b1:
e3:ea:75:8b:92:af:b6:f6:68:22:56:28:02:c0:c8:6e:72:6e:
a7:55:a8:d0:e1:4a:73:b6:b2:74:be:ce:ac:63:74:2a:b0:30:
4e:79:7c:73:0f:fa:33:4b:85:39:7f:30:32:e5:83:b1:81:c2:
4d:ef:eb:e6:48:f0:f3:07:e9:5f:8e:5d:ca:0e:96:ce:46:ab:
7d:46:b4:b6:32:e4:12:aa:88:52:ca:20:cb:08:79:05:12:eb:
d8:7f:f6:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cprVC8Bc4v8D9mW7dF5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl
NDU4MGEwHhcNMjUwMTMxMTMwMDE0WhcNMjUwMjAxMTMwMDE0WjAzMTEwLwYDVQQD
Eyg5NzY2YWUxMjRjY2JhMWYxZjI5ZDkxOWE5OGE5MjA5MzNjM2UxNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SwiCHT7kbBG5MeQCC8z//CAP0kS
f0Rz2OTCHYtuR4kJrt7Xl14SUTeX/uEwPg4S5NnGcp9OuNGlYRg+ookdvSwiyb0p
rGw/E351UwcKOqFFy6qoPx6DBYsLEtJJSP3qxd1ODr6w+o/nwTsqjQ2dJCw9RV6i
wsq3oBJQiCv6KOXYZHW6Hsha469dKBkowwYkNNFoggEC8SAnx/qdKNwGfWnP3Xn9
C337YYo7NfGUswVyz/8w3kgVPsEsYgrXILMWliZN0q1wGWYlNrLJ69MscOMe3ZbX
MtT4jl0aVifdzjxh4CSAq3CNQmOPNxusrepJk3Z4HKdoE/RdoPpZxxHADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdmrhJMy6Hx8p2RmpipIJM8PhRRMB8GA1UdIwQY
MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt
YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4
LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJH0nngi
Zh8vasSX7hYtRC6Dug6Lcyb+9Bjkl5ZwVB1/JVdGHmAt+WU9eZV6zTPCSArL8xiT
1OaOSZfT8mzl/pYFqXrt7sjIZVDG3YtkHh6nbCyltKXU16jDd4d8Ktxe3sw7naeu
LJJi4AbVY3QKixZcGCkboCf+hjwHSZGuoJbwPDrSanwgq/4mP6kP70hV4t2QhXVh
qUBkReXDHeGOOTCx4+p1i5KvtvZoIlYoAsDIbnJup1Wo0OFKc7aydL7OrGN0KrAw
Tnl8cw/6M0uFOX8wMuWDsYHCTe/r5kjw8wfpX45dyg6WzkarfUa0tjLkEqqIUsog
ywh5BRLr2H/2Ew==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:18 2025 by rpki-client