Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: jwUWoV+N/qSmQYwL8dn9b5kDgM6bydyrm1qSJUaWkwQ=
Subject key identifier: CF:66:7A:E0:7B:34:CF:0F:9B:57:CE:38:17:A4:49:93:75:E1:F7:81
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 0195E046AF9511720459091B904DC0D4D853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 14C7
Signing time: Sat 29 Mar 2025 05:01:23 +0000
Manifest this update: Sat 29 Mar 2025 05:01:23 +0000
Manifest next update: Sun 30 Mar 2025 05:01:23 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: gTARLNY4UyeIBRz1S/gjSbneQijkvDx1k2vbOZ5i8yo=)
2: VmjhuzrK06h5F7GtuU6dsi8hn1g.roa (hash: gGDiZCD/tlVCECKmAFNRX/tBWljfywnrFyxgpkW8vqI=)
3: nR__W6eKmJDCSQ-Ve5BuBqRgj1w.roa (hash: ZNjHEO/Wo6ExM8zMnQZKVmVx5Txz3u+vK2dWd4D/o1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:af:95:11:72:04:59:09:1b:90:4d:c0:d4:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Mar 29 05:01:23 2025 GMT
Not After : Mar 30 05:01:23 2025 GMT
Subject: CN=cf667ae07b34cf0f9b57ce3817a4499375e1f781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:ab:cc:b1:0f:ce:78:5a:c6:b7:e1:60:f5:
cd:4b:e5:3b:36:ab:11:10:f6:76:be:2c:b3:26:28:
eb:a9:30:2c:a7:0f:39:2a:d2:54:af:e7:0f:e2:8e:
1f:c2:97:07:f7:6c:a9:12:35:7e:b4:1b:e8:13:4a:
42:d4:37:0f:ff:0b:61:7f:40:0b:9c:2d:91:33:b8:
ff:0b:f7:81:f9:a4:eb:a0:65:f4:50:e2:f3:36:7e:
88:0b:4d:54:b0:ac:29:73:84:e1:3c:b4:b6:eb:13:
53:09:35:d2:1c:c8:a2:66:ab:de:8b:61:d9:00:1c:
0e:a5:8b:2d:95:0b:c2:e0:f7:9e:80:e9:29:a2:39:
b9:0e:5c:f4:d5:a9:d6:8a:17:80:4b:ac:4b:74:80:
4c:ff:53:6a:75:d2:92:39:95:5e:eb:2b:57:87:a4:
e2:27:63:be:72:30:3f:eb:e1:e6:03:73:f3:95:4a:
cc:d4:ed:d0:7a:c8:25:02:e7:1d:c3:9d:96:c4:97:
3d:94:f4:b0:fd:5d:62:48:85:f0:5d:05:82:74:c1:
c5:53:d2:f9:61:22:c4:8f:4d:5f:8b:f8:ca:80:37:
d0:3e:42:db:7a:97:ec:8f:b9:0b:bd:57:5d:82:82:
5b:89:d2:6a:e5:fd:2a:98:07:0a:d7:16:8e:13:80:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:7A:E0:7B:34:CF:0F:9B:57:CE:38:17:A4:49:93:75:E1:F7:81
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c2:3e:81:4e:eb:76:94:8a:c7:83:3e:ba:30:85:0a:5c:51:
02:9b:7e:19:c7:76:e3:41:a2:d9:00:21:ed:00:69:99:47:da:
95:c0:7c:61:1a:c8:08:0c:93:09:dd:69:65:f9:01:0e:1b:1c:
53:13:16:4b:74:07:ee:79:2f:99:54:63:9e:2b:6d:94:77:9b:
e0:5c:67:20:6b:1e:21:e9:61:a2:ed:6c:58:2c:aa:56:24:14:
fc:ee:62:60:4f:93:1b:6d:4b:9a:be:a0:f0:45:97:a8:32:f9:
11:b0:d1:c7:e1:be:1d:f9:ac:c4:a8:8c:60:a5:56:8f:7c:39:
d3:8a:59:24:e0:40:b6:14:af:33:0a:6f:5f:3a:97:24:69:55:
06:d0:32:fb:25:e3:12:ab:c7:d9:70:b8:48:a6:03:22:36:fa:
35:fd:5f:84:9a:e9:fd:71:ef:5c:cc:aa:75:53:cf:00:be:a9:
41:f9:8b:77:60:b9:12:d2:94:78:66:2b:33:00:b3:fc:73:b5:
42:03:e2:fd:09:37:96:89:72:79:56:ab:13:a8:9c:16:ad:e8:
c3:21:cf:d4:1c:17:22:b5:75:fe:d4:92:cd:f0:e0:b4:3a:b0:
8d:6e:49:d2:d3:d2:c4:a9:eb:40:24:4e:05:1a:ca:1d:76:12:
b6:d2:3c:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRq+VEXIEWQkbkE3A1NhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjVjMTdmYTAyOGIzMTM0OGY2MzBmNmI1NmRmNDIyY2Uw
NjJiM2IwHhcNMjUwMzI5MDUwMTIzWhcNMjUwMzMwMDUwMTIzWjAzMTEwLwYDVQQD
EyhjZjY2N2FlMDdiMzRjZjBmOWI1N2NlMzgxN2E0NDk5Mzc1ZTFmNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvqrzLEPznhaxrfhYPXNS+U7NqsR
EPZ2viyzJijrqTAspw85KtJUr+cP4o4fwpcH92ypEjV+tBvoE0pC1DcP/wthf0AL
nC2RM7j/C/eB+aTroGX0UOLzNn6IC01UsKwpc4ThPLS26xNTCTXSHMiiZqvei2HZ
ABwOpYstlQvC4PeegOkpojm5Dlz01anWiheAS6xLdIBM/1NqddKSOZVe6ytXh6Ti
J2O+cjA/6+HmA3PzlUrM1O3QesglAucdw52WxJc9lPSw/V1iSIXwXQWCdMHFU9L5
YSLEj01fi/jKgDfQPkLbepfsj7kLvVddgoJbidJq5f0qmAcK1xaOE4BD/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9meuB7NM8Pm1fOOBekSZN14feBMB8GA1UdIwQY
MBaAFCZlwX+gKLMTSPYw9rVt9CLOBis7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2Et
YzM4M2E5MDEwMDA1LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mYzkwYTAtODA0Yy00MGZhLWIyN2EtYzM4M2E5MDEwMDA1
LzEvSm1YQmY2QW9zeE5JOWpEMnRXMzBJczRHS3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsI+gU7r
dpSKx4M+ujCFClxRApt+Gcd240Gi2QAh7QBpmUfalcB8YRrICAyTCd1pZfkBDhsc
UxMWS3QH7nkvmVRjnittlHeb4FxnIGseIelhou1sWCyqViQU/O5iYE+TG21Lmr6g
8EWXqDL5EbDRx+G+HfmsxKiMYKVWj3w504pZJOBAthSvMwpvXzqXJGlVBtAy+yXj
EqvH2XC4SKYDIjb6Nf1fhJrp/XHvXMyqdVPPAL6pQfmLd2C5EtKUeGYrMwCz/HO1
QgPi/Qk3lolyeVarE6icFq3owyHP1BwXIrV1/tSSzfDgtDqwjW5J0tPSxKnrQCRO
BRrKHXYSttI8pg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:10 2025 by rpki-client