Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.mft
File: JcelLNVWKU0XTThzvfKSQ2TryRs.mft (raw, json)
Hash identifier: t01vBjzcWY7ssuS9A9KR050gfQ9G7Ke9MY+Ydkteo8w=
Subject key identifier: 01:15:BC:5E:DB:AB:C4:F9:16:1B:35:BC:E2:B5:03:F5:06:28:6A:FA
Authority key identifier: 25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
Certificate issuer: /CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Certificate serial: 018BEAAC4A6C7039431323A0AEC1A54507BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.mft
Manifest number: 0873
Signing time: Mon 20 Nov 2023 03:00:41 +0000
Manifest this update: Mon 20 Nov 2023 03:00:41 +0000
Manifest next update: Tue 21 Nov 2023 03:00:41 +0000
Files and hashes: 1: ATkqo-9qbIkZ_1B1rHNu-KZSeVU.roa (hash: ADk1lgz9d55Iud6O3WlF91IgEFGy7XMGKvVRNaryVKM=)
2: JcelLNVWKU0XTThzvfKSQ2TryRs.crl (hash: v2FqBHnwa5Y4zY4O4M1Vits9d7m1EVgUltGEa0QfPqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:ac:4a:6c:70:39:43:13:23:a0:ae:c1:a5:45:07:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c7a52cd556294d174d3873bdf2924364ebc91b
Validity
Not Before: Nov 20 03:00:41 2023 GMT
Not After : Nov 21 03:00:41 2023 GMT
Subject: CN=0115bc5edbabc4f9161b35bce2b503f506286afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b7:91:43:4f:29:7a:71:cc:05:e1:d9:f6:f8:
5d:27:64:3e:a2:99:05:2d:cb:f2:1d:09:bb:ec:c6:
85:4a:c9:bb:aa:b3:56:7d:49:4f:32:26:fb:20:31:
01:f0:73:a4:0b:97:71:fb:19:83:3f:d7:bd:98:1b:
0c:60:8f:aa:01:d8:a3:dc:15:fc:ad:a7:04:9c:1d:
34:c0:d8:53:0f:1c:fe:c6:d1:85:f9:78:91:75:b9:
14:3d:d8:a8:66:c7:8e:ca:31:b2:8f:d7:c4:06:62:
a7:c7:b7:c8:b7:2d:cf:ce:17:85:5c:da:9b:13:5d:
b6:21:7e:19:54:c1:c8:43:70:c2:bc:dc:3b:71:32:
63:1e:18:2a:58:13:41:38:f6:d0:cc:a9:c7:3a:77:
14:0d:1e:37:0b:c3:1c:36:3a:19:a1:0a:8c:c4:62:
ab:ec:db:bd:db:ee:e0:35:46:ae:37:75:b2:01:d1:
d3:21:bd:e1:c1:08:79:38:20:0e:a1:0c:3a:0d:35:
d4:de:44:9a:dd:74:b7:a4:23:4a:6f:db:61:ca:fb:
04:1d:3b:cd:2f:44:29:ca:0d:53:a7:59:69:ec:c2:
f8:6f:c6:35:43:61:d0:ed:2f:d9:d2:18:b0:49:31:
80:06:26:d3:2d:03:3b:8f:65:55:d3:8e:92:4d:e3:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:BC:5E:DB:AB:C4:F9:16:1B:35:BC:E2:B5:03:F5:06:28:6A:FA
X509v3 Authority Key Identifier:
keyid:25:C7:A5:2C:D5:56:29:4D:17:4D:38:73:BD:F2:92:43:64:EB:C9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcelLNVWKU0XTThzvfKSQ2TryRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/f449fd-d775-4077-8255-2a78c2febf3d/1/JcelLNVWKU0XTThzvfKSQ2TryRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a8:ce:50:88:57:02:ee:c6:10:d8:82:c9:7f:16:fc:cc:18:
3d:88:b6:cc:76:db:08:db:a6:a7:81:ed:52:1e:dc:46:ce:f2:
53:f7:c8:12:3a:60:25:a8:40:2e:cf:9c:a2:5f:d8:d4:1e:c2:
27:24:1a:53:d8:db:b8:12:57:be:85:16:f7:88:77:89:73:3d:
d9:d3:b2:32:59:e1:3c:88:d5:0b:a0:9b:8e:49:c5:64:9e:9b:
04:10:e8:0d:5d:f8:04:01:63:73:b8:c9:85:3e:e5:94:19:db:
69:3e:ae:8a:d9:55:dd:63:b6:60:bd:61:38:bc:e0:6a:91:22:
84:6a:60:5d:de:63:e6:a5:ff:3b:1f:2e:01:4b:50:5c:ab:34:
6a:79:05:41:a1:7a:4d:5d:ed:37:e5:92:63:dc:05:50:3a:c9:
c0:09:a0:b6:0c:3d:cb:7d:34:54:23:f2:d7:49:d2:b0:a4:20:
f0:aa:04:15:76:41:41:61:23:56:00:6a:dc:2c:75:75:53:f3:
71:46:8e:c1:f8:61:d8:e4:72:9c:08:7a:98:3f:07:68:1e:3c:
0f:a2:48:a5:f5:bf:4a:b2:7e:b6:fd:65:4e:a2:5b:29:83:e8:
e8:9b:79:5b:82:be:d9:65:19:d6:27:81:0c:8b:96:cd:86:9c:
e2:55:47:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqrEpscDlDEyOgrsGlRQe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzdhNTJjZDU1NjI5NGQxNzRkMzg3M2JkZjI5MjQzNjRl
YmM5MWIwHhcNMjMxMTIwMDMwMDQxWhcNMjMxMTIxMDMwMDQxWjAzMTEwLwYDVQQD
EygwMTE1YmM1ZWRiYWJjNGY5MTYxYjM1YmNlMmI1MDNmNTA2Mjg2YWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbeRQ08penHMBeHZ9vhdJ2Q+opkF
LcvyHQm77MaFSsm7qrNWfUlPMib7IDEB8HOkC5dx+xmDP9e9mBsMYI+qAdij3BX8
racEnB00wNhTDxz+xtGF+XiRdbkUPdioZseOyjGyj9fEBmKnx7fIty3PzheFXNqb
E122IX4ZVMHIQ3DCvNw7cTJjHhgqWBNBOPbQzKnHOncUDR43C8McNjoZoQqMxGKr
7Nu92+7gNUauN3WyAdHTIb3hwQh5OCAOoQw6DTXU3kSa3XS3pCNKb9thyvsEHTvN
L0Qpyg1Tp1lp7ML4b8Y1Q2HQ7S/Z0hiwSTGABibTLQM7j2VV046STePGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEVvF7bq8T5Fhs1vOK1A/UGKGr6MB8GA1UdIwQY
MBaAFCXHpSzVVilNF004c73ykkNk68kbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNlbExOVldLVTBYVFRoenZmS1NRMlRyeVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mNDQ5ZmQtZDc3NS00MDc3LTgyNTUt
MmE3OGMyZmViZjNkLzEvSmNlbExOVldLVTBYVFRoenZmS1NRMlRyeVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mNDQ5ZmQtZDc3NS00MDc3LTgyNTUtMmE3OGMyZmViZjNk
LzEvSmNlbExOVldLVTBYVFRoenZmS1NRMlRyeVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKjOUIhX
Au7GENiCyX8W/MwYPYi2zHbbCNump4HtUh7cRs7yU/fIEjpgJahALs+col/Y1B7C
JyQaU9jbuBJXvoUW94h3iXM92dOyMlnhPIjVC6CbjknFZJ6bBBDoDV34BAFjc7jJ
hT7llBnbaT6uitlV3WO2YL1hOLzgapEihGpgXd5j5qX/Ox8uAUtQXKs0ankFQaF6
TV3tN+WSY9wFUDrJwAmgtgw9y300VCPy10nSsKQg8KoEFXZBQWEjVgBq3Cx1dVPz
cUaOwfhh2ORynAh6mD8HaB48D6JIpfW/SrJ+tv1lTqJbKYPo6Jt5W4K+2WUZ1ieB
DIuWzYac4lVHJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:25 2024 by rpki-client on console-ams.rpki-client.org