Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.mft
File: JSNb7I94QYqI57ecIROUD6S8Lbo.mft (raw, json)
Hash identifier: EOmVggVdI9eCbSejwineFfSJUOLA8D4dlbnMkyI4Vns=
Subject key identifier: E8:F7:85:CC:7E:9A:5D:F5:FB:F2:B7:8F:E4:61:8A:8C:AF:AD:20:A6
Authority key identifier: 25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
Certificate issuer: /CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Certificate serial: 018DC098F4777D38C781B411B167D9653AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.mft
Manifest number: 070E
Signing time: Mon 19 Feb 2024 09:01:05 +0000
Manifest this update: Mon 19 Feb 2024 09:01:05 +0000
Manifest next update: Tue 20 Feb 2024 09:01:05 +0000
Files and hashes: 1: JSNb7I94QYqI57ecIROUD6S8Lbo.crl (hash: J7G6SB8kxVMSujqTZaA9rZj2MKsTqqpJAx70jz4xwRc=)
2: LaD9ZXiLJhJDjzg3WIXs6FCeQnk.roa (hash: IDy3Bsp+WxKXrvVO95ULZT9Q1AIHyShfi353UecIvwk=)
3: xMmTPB2e6aZFznCH9LM-_44RiqA.roa (hash: hnf57H/XeRJsUOBZubtIfKC9qx4k+ZbZEwtSRHzRxRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:98:f4:77:7d:38:c7:81:b4:11:b1:67:d9:65:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25235bec8f78418a88e7b79c2113940fa4bc2dba
Validity
Not Before: Feb 19 09:01:05 2024 GMT
Not After : Feb 20 09:01:05 2024 GMT
Subject: CN=e8f785cc7e9a5df5fbf2b78fe4618a8cafad20a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:c6:d8:48:9e:47:69:dd:eb:e8:c2:35:ad:
8f:15:36:5a:86:0c:89:04:0b:1a:58:7c:0f:5c:12:
b7:43:ef:28:df:60:0b:52:15:f2:73:59:78:79:9a:
96:8f:5f:f0:43:0f:f6:71:e2:b6:db:82:35:c1:c1:
f3:ba:80:84:fb:fb:9c:0e:e2:d6:da:b9:94:ce:6e:
e0:1b:7d:3f:64:ef:38:e9:ae:85:28:e5:3b:44:dd:
e0:f0:86:97:5c:78:6b:39:ab:15:c9:8d:b3:7e:b1:
6f:90:23:99:be:07:e4:20:ba:50:00:97:ab:e2:81:
9d:b3:a5:88:17:1a:c9:74:da:89:92:14:c0:ca:c0:
58:87:02:97:d2:a5:f7:c6:5f:8c:8d:5e:85:41:16:
1c:e1:fc:54:04:1e:a9:c8:11:a5:4f:7a:49:71:0c:
5b:df:37:b5:95:66:90:9b:0b:4c:ff:64:6c:58:10:
25:60:77:b1:79:c7:3d:6d:bd:f2:be:a2:7f:ff:aa:
30:ed:e0:80:47:60:84:f1:d2:91:82:10:18:b6:38:
11:77:49:73:26:53:4b:6b:22:0a:5d:8b:01:9a:4c:
01:a5:c3:0d:ae:6f:f7:2e:13:af:96:b8:59:7b:54:
b1:1e:87:81:81:c4:a3:6d:bd:e1:3c:d0:94:0a:14:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:85:CC:7E:9A:5D:F5:FB:F2:B7:8F:E4:61:8A:8C:AF:AD:20:A6
X509v3 Authority Key Identifier:
keyid:25:23:5B:EC:8F:78:41:8A:88:E7:B7:9C:21:13:94:0F:A4:BC:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSNb7I94QYqI57ecIROUD6S8Lbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/41d4ce-9fd1-49ef-866c-375c8b7f88c7/1/JSNb7I94QYqI57ecIROUD6S8Lbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:f2:2b:d6:06:f3:f4:c9:eb:77:bf:c2:8f:9b:f2:68:2f:
b6:fa:df:10:77:23:07:2e:7a:b1:3a:f5:ff:a0:5d:03:ff:8f:
71:c3:c9:c4:0b:ee:f9:4e:70:4b:28:3a:42:5d:07:cb:dd:1a:
37:46:2a:96:57:68:f7:37:8e:f6:0e:93:2c:b2:51:49:6d:ec:
05:7c:08:72:ac:84:53:f4:f2:e8:cf:98:b6:74:d0:0d:8b:c7:
bf:3c:fb:c9:70:77:33:6f:d0:a3:33:23:ce:e4:82:fd:ed:b8:
40:ad:e2:5c:a5:b2:9f:4d:5e:e8:92:5c:72:6b:89:e5:19:88:
8b:eb:6a:38:a3:37:42:43:49:61:51:11:ee:44:9f:54:ae:ba:
5b:f5:96:bc:d1:9d:2c:79:e6:9c:b3:af:3b:7e:b7:5c:d2:c6:
ab:cd:ee:11:41:49:22:ba:07:ab:9c:02:60:eb:03:01:45:2d:
a7:04:ff:b2:89:80:76:ac:b3:f4:64:f7:f3:7d:fb:5c:04:6e:
aa:d2:e6:90:87:70:6b:a5:a0:07:54:16:ee:8d:14:01:ab:b5:
49:19:60:dd:3a:d6:0c:b8:59:44:d5:ae:22:1d:b5:0a:f7:fd:
2c:be:90:f9:a5:06:1c:14:4d:a4:5e:ed:1f:52:07:a6:d6:c0:
dd:2b:43:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3AmPR3fTjHgbQRsWfZZTr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjM1YmVjOGY3ODQxOGE4OGU3Yjc5YzIxMTM5NDBmYTRi
YzJkYmEwHhcNMjQwMjE5MDkwMTA1WhcNMjQwMjIwMDkwMTA1WjAzMTEwLwYDVQQD
EyhlOGY3ODVjYzdlOWE1ZGY1ZmJmMmI3OGZlNDYxOGE4Y2FmYWQyMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQbG2EieR2nd6+jCNa2PFTZahgyJ
BAsaWHwPXBK3Q+8o32ALUhXyc1l4eZqWj1/wQw/2ceK224I1wcHzuoCE+/ucDuLW
2rmUzm7gG30/ZO846a6FKOU7RN3g8IaXXHhrOasVyY2zfrFvkCOZvgfkILpQAJer
4oGds6WIFxrJdNqJkhTAysBYhwKX0qX3xl+MjV6FQRYc4fxUBB6pyBGlT3pJcQxb
3ze1lWaQmwtM/2RsWBAlYHexecc9bb3yvqJ//6ow7eCAR2CE8dKRghAYtjgRd0lz
JlNLayIKXYsBmkwBpcMNrm/3LhOvlrhZe1SxHoeBgcSjbb3hPNCUChSdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj3hcx+ml31+/K3j+RhioyvrSCmMB8GA1UdIwQY
MBaAFCUjW+yPeEGKiOe3nCETlA+kvC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNOYjdJOTRRWXFJNTdlY0lST1VENlM4TGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MWQ0Y2UtOWZkMS00OWVmLTg2NmMt
Mzc1YzhiN2Y4OGM3LzEvSlNOYjdJOTRRWXFJNTdlY0lST1VENlM4TGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MWQ0Y2UtOWZkMS00OWVmLTg2NmMtMzc1YzhiN2Y4OGM3
LzEvSlNOYjdJOTRRWXFJNTdlY0lST1VENlM4TGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorLyK9YG
8/TJ63e/wo+b8mgvtvrfEHcjBy56sTr1/6BdA/+PccPJxAvu+U5wSyg6Ql0Hy90a
N0Yqlldo9zeO9g6TLLJRSW3sBXwIcqyEU/Ty6M+YtnTQDYvHvzz7yXB3M2/QozMj
zuSC/e24QK3iXKWyn01e6JJccmuJ5RmIi+tqOKM3QkNJYVER7kSfVK66W/WWvNGd
LHnmnLOvO363XNLGq83uEUFJIroHq5wCYOsDAUUtpwT/somAdqyz9GT38337XARu
qtLmkIdwa6WgB1QW7o0UAau1SRlg3TrWDLhZRNWuIh21Cvf9LL6Q+aUGHBRNpF7t
H1IHptbA3StDpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org