Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: n/BI3GOD0k1teEG2Sl38bMqWFXzFXde2nKUdYtNtMFA=
Subject key identifier: A0:6F:89:B1:21:BD:33:ED:6E:20:77:84:26:DA:BB:45:DB:7E:1C:33
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 0195E00F90CE6A32F7F849CDD6D6185A0CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 0E8C
Signing time: Sat 29 Mar 2025 04:01:11 +0000
Manifest this update: Sat 29 Mar 2025 04:01:11 +0000
Manifest next update: Sun 30 Mar 2025 04:01:11 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: /5I3y56jY5a9k3fuEk0O2lYxUNjA7Wvln6N9eRCV2n0=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:90:ce:6a:32:f7:f8:49:cd:d6:d6:18:5a:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Mar 29 04:01:11 2025 GMT
Not After : Mar 30 04:01:11 2025 GMT
Subject: CN=a06f89b121bd33ed6e20778426dabb45db7e1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:bc:f2:4c:26:45:66:57:dc:bc:a9:f5:7d:
18:92:e6:aa:03:85:5e:c1:dd:cb:3d:7b:04:18:0a:
0f:ca:b5:81:92:1c:76:2e:9e:13:0c:91:ee:d9:0e:
65:f2:27:a2:02:9a:d1:28:15:5b:d7:c5:21:31:9a:
98:96:ed:aa:84:e8:ea:e6:20:c8:72:d0:11:e2:3d:
2d:95:99:c1:d7:f6:77:28:52:3d:b3:b2:c4:fe:c6:
4a:30:c1:3d:fc:d8:7b:3c:07:02:82:83:41:b1:8d:
86:36:f3:d3:6f:8d:eb:6c:fd:11:89:29:ff:69:69:
66:08:47:9e:6e:fe:fb:5f:d8:00:f2:82:61:52:e5:
74:9b:cc:ae:97:ff:aa:41:b9:e3:e4:ff:d9:26:bb:
88:d9:29:6e:8a:0e:1f:79:1b:d6:53:0e:95:0b:f9:
26:b2:71:74:d1:42:37:1b:bd:0e:f9:b9:7e:58:3d:
13:04:53:e6:c5:d3:31:77:0e:56:b6:84:b1:9c:2a:
6c:b1:32:25:e1:78:b8:df:3b:47:d8:d3:ec:ba:33:
7e:d5:fa:3b:6c:4a:c0:6f:74:5b:6b:7c:2f:3f:dc:
12:c1:b5:45:15:67:5a:9b:7e:cf:e7:2a:a1:97:cd:
09:38:ee:43:3e:9f:85:f3:f0:f1:d9:f7:77:97:31:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:89:B1:21:BD:33:ED:6E:20:77:84:26:DA:BB:45:DB:7E:1C:33
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:c6:f4:29:76:e4:ce:0a:b7:57:73:20:0d:bf:9f:e7:0e:
6d:1f:f7:65:de:b5:ef:ed:c9:48:ed:de:62:d7:53:5d:ea:2d:
00:0d:97:60:4a:9f:4b:08:89:48:18:4c:9b:54:76:2a:cb:8f:
92:fd:30:de:d5:18:ee:15:cc:f2:70:51:b7:4a:23:de:7a:d4:
1f:ee:e9:54:4d:c8:6f:f3:47:11:de:30:09:28:f4:9e:67:61:
7e:47:59:8f:8f:ae:0b:6c:53:8a:b4:cf:0c:5a:c4:b7:55:81:
9e:a5:59:45:4f:2d:29:3e:48:e0:3a:78:dc:a0:1f:df:45:d9:
ec:89:36:e5:59:c4:5f:35:d3:e1:07:5c:4b:8d:3e:ef:fd:01:
25:bd:d5:da:5b:4e:72:84:4c:87:12:d7:4e:1c:a8:8e:44:06:
69:cb:b4:80:43:8b:49:1a:20:fa:54:d9:91:b6:98:9d:ac:ea:
ac:f5:62:b7:9c:ae:62:f8:2e:59:52:82:56:f8:7f:d1:3b:f3:
43:cd:81:bd:d8:4b:af:7e:75:7a:a0:21:ba:57:e1:74:32:39:
2d:90:c7:9f:80:e1:57:f1:bb:34:d2:f6:a2:e5:46:07:8e:7c:
73:b6:77:38:b5:9a:dc:9f:4a:13:a9:6a:04:ba:b9:cb:9d:39:
c8:5b:e5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5DOajL3+EnN1tYYWgzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm
ZDk4ODkwHhcNMjUwMzI5MDQwMTExWhcNMjUwMzMwMDQwMTExWjAzMTEwLwYDVQQD
EyhhMDZmODliMTIxYmQzM2VkNmUyMDc3ODQyNmRhYmI0NWRiN2UxYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYi88kwmRWZX3Lyp9X0YkuaqA4Ve
wd3LPXsEGAoPyrWBkhx2Lp4TDJHu2Q5l8ieiAprRKBVb18UhMZqYlu2qhOjq5iDI
ctAR4j0tlZnB1/Z3KFI9s7LE/sZKMME9/Nh7PAcCgoNBsY2GNvPTb43rbP0RiSn/
aWlmCEeebv77X9gA8oJhUuV0m8yul/+qQbnj5P/ZJruI2Sluig4feRvWUw6VC/km
snF00UI3G70O+bl+WD0TBFPmxdMxdw5WtoSxnCpssTIl4Xi43ztH2NPsujN+1fo7
bErAb3Rba3wvP9wSwbVFFWdam37P5yqhl80JOO5DPp+F8/Dx2fd3lzFlfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBvibEhvTPtbiB3hCbau0XbfhwzMB8GA1UdIwQY
MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt
NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk
LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9PG9Cl2
5M4Kt1dzIA2/n+cObR/3Zd617+3JSO3eYtdTXeotAA2XYEqfSwiJSBhMm1R2KsuP
kv0w3tUY7hXM8nBRt0oj3nrUH+7pVE3Ib/NHEd4wCSj0nmdhfkdZj4+uC2xTirTP
DFrEt1WBnqVZRU8tKT5I4Dp43KAf30XZ7Ik25VnEXzXT4QdcS40+7/0BJb3V2ltO
coRMhxLXThyojkQGacu0gEOLSRog+lTZkbaYnazqrPVit5yuYvguWVKCVvh/0Tvz
Q82BvdhLr351eqAhulfhdDI5LZDHn4DhV/G7NNL2ouVGB458c7Z3OLWa3J9KE6lq
BLq5y505yFvliw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:52 2025 by rpki-client