Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: /7uO2WjwjFpHFIcj8tiErn2V4Gl8mZPxRubM8a+M3y0=
Subject key identifier: 0A:3F:AE:AC:E8:88:20:40:3C:70:E8:3B:3B:92:07:CF:A0:7E:AF:26
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0195E1595299829795614CC3322EBA5DBB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1322
Signing time: Sat 29 Mar 2025 10:01:22 +0000
Manifest this update: Sat 29 Mar 2025 10:01:22 +0000
Manifest next update: Sun 30 Mar 2025 10:01:22 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: q63CbRopt8bTFO8r2lji1WiojtbqjsPcNu2vh6qGq1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:52:99:82:97:95:61:4c:c3:32:2e:ba:5d:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Mar 29 10:01:22 2025 GMT
Not After : Mar 30 10:01:22 2025 GMT
Subject: CN=0a3faeace88820403c70e83b3b9207cfa07eaf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:ba:a5:a7:af:df:b6:88:f8:f5:55:7f:3f:
e1:4f:a9:7a:9c:c9:c1:e7:f0:0d:19:97:8f:69:93:
9e:00:d9:6e:ae:8f:55:ad:27:c4:ce:7c:19:02:e2:
93:2b:44:a1:7a:55:2b:84:63:19:f1:cc:cf:ac:05:
ee:f9:c4:7e:b2:2d:3b:a9:72:88:03:b1:3f:85:6f:
1f:23:62:b6:53:04:10:a7:c7:1e:b4:89:0d:e4:3b:
7c:1b:9c:63:97:b0:04:da:b9:50:d6:12:0c:2e:42:
68:da:4b:fc:06:38:37:a9:93:c8:5a:a7:fb:7b:e5:
80:c0:6c:79:f1:26:f4:76:77:b1:35:21:05:ba:52:
8b:a8:1b:2c:ac:d4:54:b8:5e:76:ad:94:8e:69:ff:
7c:c4:67:aa:7f:11:17:02:8b:47:bc:c0:86:8f:00:
d2:48:cc:72:df:38:e7:20:2d:07:da:da:b0:38:a3:
90:29:17:39:a1:db:8c:24:c1:47:c2:6e:c2:22:10:
85:22:b5:aa:ce:99:c0:ea:0d:e7:25:f0:2c:9c:b5:
a0:a5:9d:04:35:87:37:05:f4:6f:74:56:e7:a8:5c:
f9:c9:2f:b9:70:50:10:04:82:41:94:c5:17:12:83:
0e:6a:04:1f:fa:1a:a1:85:74:c6:0c:d9:33:2e:4d:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:AE:AC:E8:88:20:40:3C:70:E8:3B:3B:92:07:CF:A0:7E:AF:26
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b1:9b:6c:9e:bd:48:59:ea:24:c7:5c:74:2d:2d:28:ab:93:
54:64:5e:0e:28:55:10:86:be:a0:21:7c:d8:9b:6f:91:25:3f:
f3:c2:7d:88:b5:87:cb:4f:5d:a9:45:16:67:2f:02:ec:80:ea:
89:a8:95:6f:76:8c:c5:2c:ec:f3:ca:b4:58:34:30:3b:5e:bc:
92:93:ae:7f:12:ab:62:7a:93:c6:38:01:3c:72:d2:61:fb:31:
cf:e9:98:bb:1b:ed:20:f5:3c:9b:3c:8f:52:f6:8e:f4:d4:d4:
27:9a:6e:93:ef:3e:10:78:dd:3a:e9:bb:74:14:70:c0:19:ae:
46:21:90:6c:0d:41:21:d2:fb:c1:90:95:9f:b6:2e:96:e9:19:
35:4c:03:b3:d8:c8:18:eb:1f:aa:38:13:3e:6e:c4:e5:44:47:
d0:2e:58:06:5f:48:3c:6d:f5:eb:59:fe:98:4e:44:bb:c2:b8:
cd:c7:b4:dd:62:97:86:fc:99:d3:8d:17:8c:93:d4:f1:68:71:
01:2a:cc:35:cc:37:f0:8f:77:f0:2d:4c:52:17:2d:bb:8d:87:
c9:31:1f:8f:c5:82:14:d0:25:68:2a:08:cf:fb:97:c2:a3:73:
90:e6:e9:fa:db:dd:48:35:42:5f:3e:88:a1:8e:e5:5f:18:c0:
62:f7:a7:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWVKZgpeVYUzDMi66XbuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjUwMzI5MTAwMTIyWhcNMjUwMzMwMTAwMTIyWjAzMTEwLwYDVQQD
EygwYTNmYWVhY2U4ODgyMDQwM2M3MGU4M2IzYjkyMDdjZmEwN2VhZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n66paev37aI+PVVfz/hT6l6nMnB
5/ANGZePaZOeANluro9VrSfEznwZAuKTK0ShelUrhGMZ8czPrAXu+cR+si07qXKI
A7E/hW8fI2K2UwQQp8cetIkN5Dt8G5xjl7AE2rlQ1hIMLkJo2kv8Bjg3qZPIWqf7
e+WAwGx58Sb0dnexNSEFulKLqBssrNRUuF52rZSOaf98xGeqfxEXAotHvMCGjwDS
SMxy3zjnIC0H2tqwOKOQKRc5oduMJMFHwm7CIhCFIrWqzpnA6g3nJfAsnLWgpZ0E
NYc3BfRvdFbnqFz5yS+5cFAQBIJBlMUXEoMOagQf+hqhhXTGDNkzLk0SIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo/rqzoiCBAPHDoOzuSB8+gfq8mMB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbGbbJ69
SFnqJMdcdC0tKKuTVGReDihVEIa+oCF82JtvkSU/88J9iLWHy09dqUUWZy8C7IDq
iaiVb3aMxSzs88q0WDQwO168kpOufxKrYnqTxjgBPHLSYfsxz+mYuxvtIPU8mzyP
UvaO9NTUJ5puk+8+EHjdOum7dBRwwBmuRiGQbA1BIdL7wZCVn7YulukZNUwDs9jI
GOsfqjgTPm7E5URH0C5YBl9IPG3161n+mE5Eu8K4zce03WKXhvyZ040XjJPU8Whx
ASrMNcw38I938C1MUhctu42HyTEfj8WCFNAlaCoIz/uXwqNzkObp+tvdSDVCXz6I
oY7lXxjAYvenOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:43 2025 by rpki-client