Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
File: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft (raw, json)
Hash identifier: 5FczI2g2EVHnfzbeek3mjQRsYcRVZPfXlXD8F5R3s8Y=
Subject key identifier: EC:04:8E:E2:9B:AA:E9:36:EB:F3:53:4F:A1:D6:EE:F3:6F:29:A0:78
Authority key identifier: 8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
Certificate issuer: /CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Certificate serial: 01938586CE4CFC266A8312719FF2130A6392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
Manifest number: 0D4A
Signing time: Mon 02 Dec 2024 04:00:24 +0000
Manifest this update: Mon 02 Dec 2024 04:00:24 +0000
Manifest next update: Tue 03 Dec 2024 04:00:24 +0000
Files and hashes: 1: QJg-CbaRmp7x7cWECceto1So7ig.roa (hash: VCDbu3ps5PQjvpKEg6A+yNRmqHLrVBgU+3KXmVTaxIg=)
2: aoIUzEs6QhPKBDGrylsB49coCpQ.roa (hash: njsc2yMTQjcEgBeAXcbusvFBe4XeVh5KYG+KfigxNV4=)
3: jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl (hash: jtnSdCsjJaWPQ6xuxf9ys9lNveRRBxzFW679MFwvEmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:85:86:ce:4c:fc:26:6a:83:12:71:9f:f2:13:0a:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd2d0277ce991213e67b7bbdc7650490f8a31bf
Validity
Not Before: Dec 2 04:00:24 2024 GMT
Not After : Dec 3 04:00:24 2024 GMT
Subject: CN=ec048ee29baae936ebf3534fa1d6eef36f29a078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:b0:cf:08:e0:c5:d3:46:40:d4:78:b4:57:
7a:08:78:24:58:43:68:78:04:e8:ee:9b:91:b4:1a:
78:21:af:a0:76:7a:74:ae:e0:37:33:0b:80:45:fb:
c4:48:97:3e:78:73:e6:ce:9d:1c:09:ad:cc:dd:cd:
71:64:ef:1b:8c:30:fd:cd:9a:d4:75:c5:f7:ed:10:
81:d4:ba:87:c8:00:b1:16:29:7c:2a:27:62:e5:d0:
76:db:4f:83:28:e3:27:f0:f5:c5:f4:3e:00:ba:2c:
3d:df:40:81:0c:85:8e:1b:1b:7d:79:38:a3:28:19:
96:12:7c:ce:2b:8d:45:77:72:e7:02:51:ef:0e:47:
f5:e2:7e:6b:c3:94:2f:c3:36:fc:b4:64:a9:35:52:
64:a4:94:ec:61:70:5d:1b:93:e5:0c:55:4c:ee:67:
53:83:9d:2e:d1:e7:29:c5:75:ba:42:b9:e0:9c:17:
19:8d:07:71:fe:fd:e3:83:2b:e1:6a:27:91:de:08:
df:3a:83:cc:0e:3f:76:26:4f:3c:1c:fe:78:2a:92:
ef:c3:38:a6:0c:f8:e3:e7:ce:52:09:90:79:ca:ec:
9c:82:ae:8b:42:72:51:a4:ee:d9:d9:40:fe:86:39:
9b:58:28:35:1d:a2:12:2e:70:9f:e2:c4:d1:6c:95:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:8E:E2:9B:AA:E9:36:EB:F3:53:4F:A1:D6:EE:F3:6F:29:A0:78
X509v3 Authority Key Identifier:
keyid:8C:D2:D0:27:7C:E9:91:21:3E:67:B7:BB:DC:76:50:49:0F:8A:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/fba2cd-4868-4254-b1e9-cad30099ab1e/1/jNLQJ3zpkSE-Z7e73HZQSQ-KMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:57:a0:8a:a8:3d:d2:4e:30:4e:91:53:1b:b6:e8:e2:44:49:
a3:6d:0d:03:32:48:81:e9:fc:9b:93:22:37:37:7b:3f:18:20:
b2:45:51:97:30:ec:90:ca:91:a6:19:31:7d:66:ba:01:33:1b:
ab:04:3f:ce:2d:79:b3:1e:10:f4:cf:e9:b7:16:89:1d:2e:bb:
d4:41:86:1e:36:34:4b:29:f5:23:0f:ae:ff:20:9d:3b:51:b0:
92:b8:7f:9c:ad:34:20:68:8a:c3:f9:c4:25:e4:42:fc:04:fc:
2d:45:db:5b:b4:e3:2b:90:5a:82:b8:d6:ab:0e:e3:4e:f1:6a:
66:a5:72:9c:1b:0d:17:0d:7f:5e:bd:ea:8c:4f:17:ce:6e:9a:
a1:70:74:37:e3:19:c8:1a:b8:43:e0:5f:16:21:e1:46:9a:b4:
90:8c:6d:20:7a:81:34:0e:bb:58:4e:71:cb:5a:73:dc:96:00:
b9:81:2c:d7:12:04:1f:43:d8:70:cc:31:8d:26:c2:7d:81:d0:
84:d0:0d:5d:0a:b5:ad:e8:6a:44:c4:74:f1:c9:26:f7:e7:5e:
02:93:5d:c2:c9:74:db:7f:06:7e:12:95:92:6b:57:0e:c1:75:
30:33:86:22:ff:f0:c4:a9:90:c2:91:86:f6:84:cd:21:c3:f3:
73:c4:ed:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOFhs5M/CZqgxJxn/ITCmOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDJkMDI3N2NlOTkxMjEzZTY3YjdiYmRjNzY1MDQ5MGY4
YTMxYmYwHhcNMjQxMjAyMDQwMDI0WhcNMjQxMjAzMDQwMDI0WjAzMTEwLwYDVQQD
EyhlYzA0OGVlMjliYWFlOTM2ZWJmMzUzNGZhMWQ2ZWVmMzZmMjlhMDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YiwzwjgxdNGQNR4tFd6CHgkWENo
eATo7puRtBp4Ia+gdnp0ruA3MwuARfvESJc+eHPmzp0cCa3M3c1xZO8bjDD9zZrU
dcX37RCB1LqHyACxFil8Kidi5dB220+DKOMn8PXF9D4Auiw930CBDIWOGxt9eTij
KBmWEnzOK41Fd3LnAlHvDkf14n5rw5Qvwzb8tGSpNVJkpJTsYXBdG5PlDFVM7mdT
g50u0ecpxXW6QrngnBcZjQdx/v3jgyvhaieR3gjfOoPMDj92Jk88HP54KpLvwzim
DPjj585SCZB5yuycgq6LQnJRpO7Z2UD+hjmbWCg1HaISLnCf4sTRbJXQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwEjuKbquk26/NTT6HW7vNvKaB4MB8GA1UdIwQY
MBaAFIzS0Cd86ZEhPme3u9x2UEkPijG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTkt
Y2FkMzAwOTlhYjFlLzEvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mYmEyY2QtNDg2OC00MjU0LWIxZTktY2FkMzAwOTlhYjFl
LzEvak5MUUozenBrU0UtWjdlNzNIWlFTUS1LTWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVegiqg9
0k4wTpFTG7bo4kRJo20NAzJIgen8m5MiNzd7PxggskVRlzDskMqRphkxfWa6ATMb
qwQ/zi15sx4Q9M/ptxaJHS671EGGHjY0Syn1Iw+u/yCdO1Gwkrh/nK00IGiKw/nE
JeRC/AT8LUXbW7TjK5BagrjWqw7jTvFqZqVynBsNFw1/Xr3qjE8Xzm6aoXB0N+MZ
yBq4Q+BfFiHhRpq0kIxtIHqBNA67WE5xy1pz3JYAuYEs1xIEH0PYcMwxjSbCfYHQ
hNANXQq1rehqRMR08ckm9+deApNdwsl0238GfhKVkmtXDsF1MDOGIv/wxKmQwpGG
9oTNIcPzc8TtQA==
-----END CERTIFICATE-----
Generated at Wed May 14 20:38:10 2025 by rpki-client