Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
File: Ji78PF7gPcXRlJTTqlCOJTnraQY.mft (raw, json)
Hash identifier: Ct9QdBdFEpyNtU1uRnNmbjHQkywbMqfG47ltIoO8wIk=
Subject key identifier: 8D:F6:75:1E:44:48:E3:D1:54:DD:94:FC:70:11:69:E4:63:A7:D7:9E
Authority key identifier: 26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06
Certificate issuer: /CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
Certificate serial: 01957D91D4A3AD6D481B2141A9CD01D027C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
Manifest number: 0305
Signing time: Mon 10 Mar 2025 01:01:03 +0000
Manifest this update: Mon 10 Mar 2025 01:01:03 +0000
Manifest next update: Tue 11 Mar 2025 01:01:03 +0000
Files and hashes: 1: Ji78PF7gPcXRlJTTqlCOJTnraQY.crl (hash: qXTmhb+JL78Da220h4dn6GBIUf/O4etIDQhCchKAwPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7d:91:d4:a3:ad:6d:48:1b:21:41:a9:cd:01:d0:27:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262efc3c5ee03dc5d19494d3aa508e2539eb6906
Validity
Not Before: Mar 10 01:01:03 2025 GMT
Not After : Mar 11 01:01:03 2025 GMT
Subject: CN=8df6751e4448e3d154dd94fc701169e463a7d79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:1b:1d:da:e7:11:0a:da:46:4b:94:06:a8:
aa:90:0e:d3:43:54:b3:4b:d8:ac:1e:64:d5:40:ac:
26:ca:ca:ee:52:31:2f:d8:34:03:12:c6:3b:10:07:
89:54:07:ee:48:d6:f8:dd:87:05:f9:59:5b:5e:43:
f1:af:cb:ae:bc:73:4a:09:b7:17:b2:0d:b8:e8:f2:
39:57:b6:0b:f2:d4:39:ad:d0:3b:00:fc:2e:4f:31:
1c:10:31:67:49:4d:fe:13:2c:26:0c:66:e6:cf:06:
ea:c4:57:7f:47:62:37:01:97:28:ef:8b:6d:4c:59:
90:60:f5:ac:c8:d9:b5:15:cb:4e:23:b9:1d:fd:9b:
f0:7a:87:99:56:c5:54:c7:03:7d:3b:13:6c:5e:9f:
42:7f:36:c3:27:09:40:87:94:3b:48:e2:8e:75:f6:
45:d3:36:74:9e:92:a8:a4:1b:4d:e6:45:48:c6:20:
99:32:ac:e8:6c:23:9b:19:6d:ee:64:bf:e2:4c:c6:
36:ba:84:1c:ed:c3:6e:94:d6:e3:c0:2d:4c:7c:28:
1a:01:8f:b9:53:43:b8:61:ea:d6:ed:0b:46:dc:b9:
83:e3:dd:f0:74:e7:7f:b6:b8:08:90:c7:98:27:6c:
ee:8d:5d:83:13:9a:c6:e6:75:24:a9:e9:51:ab:da:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:75:1E:44:48:E3:D1:54:DD:94:FC:70:11:69:E4:63:A7:D7:9E
X509v3 Authority Key Identifier:
keyid:26:2E:FC:3C:5E:E0:3D:C5:D1:94:94:D3:AA:50:8E:25:39:EB:69:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji78PF7gPcXRlJTTqlCOJTnraQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/36f478-1826-44cf-8dd7-aa41db6ce4f9/1/Ji78PF7gPcXRlJTTqlCOJTnraQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:56:fb:7f:50:da:2f:b9:40:6b:bc:e5:25:5d:31:04:0b:
b1:85:02:97:7b:4c:3f:72:5d:05:51:3e:83:84:9d:dc:5d:3e:
04:df:c2:67:c1:ea:4f:f8:53:16:2d:44:ae:40:40:fb:b9:ef:
73:aa:c6:0f:10:dd:4c:18:9c:fb:e7:d6:b5:06:a0:15:ab:ab:
79:6f:e9:fc:dc:85:b2:7c:ad:27:72:0d:84:99:3c:26:e2:92:
55:a6:04:a6:61:7b:88:e6:95:4b:83:b1:02:d2:37:3f:74:24:
84:e5:2a:91:86:51:b4:40:2b:74:db:aa:6f:a3:ac:8a:15:6e:
2b:ee:02:30:4a:71:ad:4e:df:90:f4:e8:ce:f6:6f:82:b2:3d:
87:4f:69:a4:a3:e8:c3:9c:1a:77:c0:a2:d8:0b:83:8e:1f:2b:
3c:dd:5d:b8:f6:ff:81:9d:cf:ba:fa:c8:ea:c9:22:9d:78:84:
83:9d:a8:4e:0e:a6:1f:46:18:29:96:98:15:a6:06:2c:36:86:
26:0f:e8:f3:b0:79:c5:7d:17:cd:33:58:32:f4:06:ac:c9:72:
f8:ee:94:17:2d:bd:61:02:09:34:a0:d1:d2:07:65:f3:56:16:
54:b0:d3:8a:9d:e0:f3:34:9f:8e:92:79:85:44:7d:e9:d6:6b:
d4:e9:97:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV9kdSjrW1IGyFBqc0B0CfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MmVmYzNjNWVlMDNkYzVkMTk0OTRkM2FhNTA4ZTI1Mzll
YjY5MDYwHhcNMjUwMzEwMDEwMTAzWhcNMjUwMzExMDEwMTAzWjAzMTEwLwYDVQQD
Eyg4ZGY2NzUxZTQ0NDhlM2QxNTRkZDk0ZmM3MDExNjllNDYzYTdkNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+8bHdrnEQraRkuUBqiqkA7TQ1Sz
S9isHmTVQKwmysruUjEv2DQDEsY7EAeJVAfuSNb43YcF+VlbXkPxr8uuvHNKCbcX
sg246PI5V7YL8tQ5rdA7APwuTzEcEDFnSU3+EywmDGbmzwbqxFd/R2I3AZco74tt
TFmQYPWsyNm1FctOI7kd/ZvweoeZVsVUxwN9OxNsXp9CfzbDJwlAh5Q7SOKOdfZF
0zZ0npKopBtN5kVIxiCZMqzobCObGW3uZL/iTMY2uoQc7cNulNbjwC1MfCgaAY+5
U0O4YerW7QtG3LmD493wdOd/trgIkMeYJ2zujV2DE5rG5nUkqelRq9pIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI32dR5ESOPRVN2U/HARaeRjp9eeMB8GA1UdIwQY
MBaAFCYu/Dxe4D3F0ZSU06pQjiU562kGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmk3OFBGN2dQY1hSbEpUVHFsQ09KVG5yYVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNmY0NzgtMTgyNi00NGNmLThkZDct
YWE0MWRiNmNlNGY5LzEvSmk3OFBGN2dQY1hSbEpUVHFsQ09KVG5yYVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNmY0NzgtMTgyNi00NGNmLThkZDctYWE0MWRiNmNlNGY5
LzEvSmk3OFBGN2dQY1hSbEpUVHFsQ09KVG5yYVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQFW+39Q
2i+5QGu85SVdMQQLsYUCl3tMP3JdBVE+g4Sd3F0+BN/CZ8HqT/hTFi1ErkBA+7nv
c6rGDxDdTBic++fWtQagFaureW/p/NyFsnytJ3INhJk8JuKSVaYEpmF7iOaVS4Ox
AtI3P3QkhOUqkYZRtEArdNuqb6OsihVuK+4CMEpxrU7fkPTozvZvgrI9h09ppKPo
w5wad8Ci2AuDjh8rPN1duPb/gZ3PuvrI6skinXiEg52oTg6mH0YYKZaYFaYGLDaG
Jg/o87B5xX0XzTNYMvQGrMly+O6UFy29YQIJNKDR0gdl81YWVLDTip3g8zSfjpJ5
hUR96dZr1OmXnA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:20:42 2025 by rpki-client