Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1cfa05-01a2-4e90-8abf-b7263b4e541b/1/JDmz4TNh9WTThQSDvsgXUNiSGgs.mft
File: JDmz4TNh9WTThQSDvsgXUNiSGgs.mft (raw, json)
Hash identifier: YFDfdDZ4otPZ4eB8V6hjU6qui+ei1TeOBIiKAUYTfBY=
Subject key identifier: C7:53:8F:9D:E5:01:55:A1:0B:81:39:35:72:23:4C:69:DF:46:F4:1E
Authority key identifier: 24:39:B3:E1:33:61:F5:64:D3:85:04:83:BE:C8:17:50:D8:92:1A:0B
Certificate issuer: /CN=2439b3e13361f564d3850483bec81750d8921a0b
Certificate serial: 0183E9B4B7727B78CE9965C300CF13029227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDmz4TNh9WTThQSDvsgXUNiSGgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1cfa05-01a2-4e90-8abf-b7263b4e541b/1/JDmz4TNh9WTThQSDvsgXUNiSGgs.mft
Manifest number: 36
Signing time: Tue 18 Oct 2022 06:07:58 +0000
Manifest this update: Tue 18 Oct 2022 06:07:58 +0000
Manifest next update: Wed 19 Oct 2022 06:07:58 +0000
Files and hashes: 1: JDmz4TNh9WTThQSDvsgXUNiSGgs.crl (hash: 5Of8uEbNmcqWG5R9NrvQC+btt4+Cln1/knyMgW1d8b8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:b4:b7:72:7b:78:ce:99:65:c3:00:cf:13:02:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2439b3e13361f564d3850483bec81750d8921a0b
Validity
Not Before: Oct 18 06:07:58 2022 GMT
Not After : Oct 19 06:07:58 2022 GMT
Subject: CN=c7538f9de50155a10b81393572234c69df46f41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1c:51:2c:cd:fa:0a:7f:94:96:3e:6a:69:62:
82:35:82:0f:19:26:76:d3:a8:c2:d8:9d:65:1a:51:
ab:83:57:2a:9d:e5:2c:ac:13:b1:48:b2:ff:4b:65:
23:c9:96:e6:45:d0:7c:f1:53:09:95:e6:8e:2e:46:
61:73:74:3a:c3:31:12:96:60:7a:da:1d:e9:8f:16:
5f:e1:7a:ad:d6:e1:98:f0:3d:7c:be:d3:cf:00:64:
da:f1:44:e6:51:33:41:52:2c:35:17:d1:0a:88:be:
57:9c:18:89:bb:0d:ce:2f:ef:cf:73:b1:1f:35:25:
3f:e3:0d:e9:1d:2a:25:16:12:a5:1e:a4:19:4b:5a:
fc:d4:f2:15:51:f4:7f:cb:54:c2:dc:0b:6f:55:45:
19:48:70:df:83:59:a0:4f:2c:10:ae:0e:94:ea:e1:
45:66:41:f1:d7:d1:06:fa:97:5b:92:95:12:4f:9a:
a4:1e:e8:cb:4f:fa:38:fb:43:92:15:a7:f0:47:76:
ca:2d:13:8c:36:fa:fc:bd:4f:02:fd:ee:90:30:7e:
23:ba:43:4a:12:b7:f9:5d:2d:89:c4:eb:64:8a:da:
dc:4c:01:70:50:5b:c0:0c:b4:96:f0:20:fc:5f:75:
e5:08:e0:ce:93:00:f2:77:41:92:83:ac:1d:fd:28:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:8F:9D:E5:01:55:A1:0B:81:39:35:72:23:4C:69:DF:46:F4:1E
X509v3 Authority Key Identifier:
keyid:24:39:B3:E1:33:61:F5:64:D3:85:04:83:BE:C8:17:50:D8:92:1A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDmz4TNh9WTThQSDvsgXUNiSGgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1cfa05-01a2-4e90-8abf-b7263b4e541b/1/JDmz4TNh9WTThQSDvsgXUNiSGgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1cfa05-01a2-4e90-8abf-b7263b4e541b/1/JDmz4TNh9WTThQSDvsgXUNiSGgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:b6:af:e1:71:7f:42:c6:83:f4:62:24:25:3f:a1:88:08:
d0:4c:da:d2:e6:5e:56:e9:5a:ed:f7:96:6d:2f:3c:7f:98:f0:
32:60:cd:5b:ba:7c:5d:a0:9f:18:04:e6:ab:d1:ab:40:8d:c6:
af:39:50:c2:04:ad:0e:ed:ea:40:09:ec:d4:35:b7:b9:5a:53:
1e:0b:22:4c:0b:1d:35:e5:52:71:3a:56:ba:53:04:94:dd:79:
71:7a:3b:56:80:54:d3:47:54:af:69:ac:05:bf:04:b3:a9:f9:
cb:c0:5e:ac:4e:90:87:12:97:d9:57:d9:f7:8a:d1:4d:bc:a9:
16:6b:30:fb:3d:5c:08:fb:42:73:fa:60:f7:6e:f3:dd:d4:f8:
b6:30:fe:98:38:30:6b:1c:6c:c1:3e:c9:c7:7c:a8:e4:6c:0d:
04:cd:eb:4b:7c:ad:c3:8b:7a:ac:71:90:58:a3:12:ae:8e:06:
2b:a4:5a:b6:12:05:22:df:ca:b6:13:3f:54:85:8a:c6:4b:b1:
69:e2:ad:af:d8:21:b1:a1:33:7e:fc:1d:36:cd:ca:d7:ad:19:
29:87:ea:b1:05:70:ef:a5:ea:9f:8d:4d:d7:23:51:e3:20:4d:
3c:8f:f3:d9:6c:18:21:8b:be:00:a5:49:4e:70:23:e3:4e:47:
fb:ba:aa:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPptLdye3jOmWXDAM8TApInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzliM2UxMzM2MWY1NjRkMzg1MDQ4M2JlYzgxNzUwZDg5
MjFhMGIwHhcNMjIxMDE4MDYwNzU4WhcNMjIxMDE5MDYwNzU4WjAzMTEwLwYDVQQD
EyhjNzUzOGY5ZGU1MDE1NWExMGI4MTM5MzU3MjIzNGM2OWRmNDZmNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBxRLM36Cn+Ulj5qaWKCNYIPGSZ2
06jC2J1lGlGrg1cqneUsrBOxSLL/S2UjyZbmRdB88VMJleaOLkZhc3Q6wzESlmB6
2h3pjxZf4Xqt1uGY8D18vtPPAGTa8UTmUTNBUiw1F9EKiL5XnBiJuw3OL+/Pc7Ef
NSU/4w3pHSolFhKlHqQZS1r81PIVUfR/y1TC3AtvVUUZSHDfg1mgTywQrg6U6uFF
ZkHx19EG+pdbkpUST5qkHujLT/o4+0OSFafwR3bKLROMNvr8vU8C/e6QMH4jukNK
Erf5XS2JxOtkitrcTAFwUFvADLSW8CD8X3XlCODOkwDyd0GSg6wd/SiIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdTj53lAVWhC4E5NXIjTGnfRvQeMB8GA1UdIwQY
MBaAFCQ5s+EzYfVk04UEg77IF1DYkhoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRtejRUTmg5V1RUaFFTRHZzZ1hVTmlTR2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xY2ZhMDUtMDFhMi00ZTkwLThhYmYt
YjcyNjNiNGU1NDFiLzEvSkRtejRUTmg5V1RUaFFTRHZzZ1hVTmlTR2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xY2ZhMDUtMDFhMi00ZTkwLThhYmYtYjcyNjNiNGU1NDFi
LzEvSkRtejRUTmg5V1RUaFFTRHZzZ1hVTmlTR2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmG2r+Fx
f0LGg/RiJCU/oYgI0Eza0uZeVula7feWbS88f5jwMmDNW7p8XaCfGATmq9GrQI3G
rzlQwgStDu3qQAns1DW3uVpTHgsiTAsdNeVScTpWulMElN15cXo7VoBU00dUr2ms
Bb8Es6n5y8BerE6QhxKX2VfZ94rRTbypFmsw+z1cCPtCc/pg927z3dT4tjD+mDgw
axxswT7Jx3yo5GwNBM3rS3ytw4t6rHGQWKMSro4GK6RathIFIt/KthM/VIWKxkux
aeKtr9ghsaEzfvwdNs3K160ZKYfqsQVw76Xqn41N1yNR4yBNPI/z2WwYIYu+AKVJ
TnAj405H+7qq3w==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:33 2025 by rpki-client