Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: 1deJAAv/anqJOiGJI7yW3UzO3Ay3NUJSLvZaUloSuk0=
Subject key identifier: C1:C8:88:DB:05:F8:17:73:CD:3D:F1:4E:91:D0:1B:4D:E4:6A:56:6E
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 0195E046FC30C1764AE24EC99FC8F2A4EBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0368
Signing time: Sat 29 Mar 2025 05:01:43 +0000
Manifest this update: Sat 29 Mar 2025 05:01:43 +0000
Manifest next update: Sun 30 Mar 2025 05:01:43 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: 4Y5JYzEe8CXri5iIMYukt2v5wWjEagluMaNDji2hmUQ=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:fc:30:c1:76:4a:e2:4e:c9:9f:c8:f2:a4:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Mar 29 05:01:43 2025 GMT
Not After : Mar 30 05:01:43 2025 GMT
Subject: CN=c1c888db05f81773cd3df14e91d01b4de46a566e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:9e:02:bf:06:f2:19:ea:4d:19:28:88:70:
e1:f4:ae:a7:90:4c:39:b3:e4:54:c7:6d:4e:08:a7:
be:f1:78:a4:e5:6b:62:9d:f5:1e:90:2e:12:3c:4d:
41:64:3a:0b:c2:83:0a:8a:52:23:a0:b3:da:31:75:
c9:b5:0a:e1:db:1d:56:c3:82:77:ab:03:72:28:93:
8b:da:8a:5d:36:db:6a:4a:6f:33:73:2a:08:24:66:
80:9c:01:fb:4c:a8:07:60:c2:6a:98:7c:5d:c8:67:
a0:c4:91:2a:4c:c0:bd:2f:83:7d:53:f5:0c:c4:60:
d5:ca:4e:2b:d7:d1:3b:6c:fc:7a:e0:11:dd:08:04:
fb:16:30:36:4f:99:69:6d:89:ee:ec:f9:99:29:55:
bc:b4:94:ab:fa:49:42:a6:55:1d:00:0f:25:93:8a:
b5:cd:ce:96:96:1d:a9:6d:2e:60:01:4c:6a:0e:69:
28:e4:d4:38:61:3b:7c:5f:71:07:84:fb:1c:d9:eb:
33:98:73:8a:a9:16:34:67:81:ab:67:58:c9:d3:db:
1f:eb:72:68:44:76:bb:85:98:f2:a5:f2:39:51:58:
de:31:f6:4c:e5:7a:14:48:f1:64:9e:84:a8:00:82:
53:9c:f6:9d:e3:a9:7c:4c:b6:8e:72:f5:18:71:51:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:88:DB:05:F8:17:73:CD:3D:F1:4E:91:D0:1B:4D:E4:6A:56:6E
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:72:3e:84:ef:8a:82:dd:94:a9:a8:f4:2a:d3:34:4a:63:ac:
6f:a1:74:8a:81:ad:99:df:bc:4d:60:04:f9:44:71:b4:87:58:
2f:d2:fb:3d:2f:28:4a:0e:7f:4c:3a:6c:3a:76:ba:78:be:54:
5f:b0:15:c2:9e:92:44:23:d2:25:52:57:24:36:3f:1f:d0:56:
b8:8c:10:63:88:0b:ab:1d:65:89:f9:df:83:9e:68:ca:25:bb:
5b:c9:a3:a4:0c:a5:c9:49:d0:58:80:bc:a6:88:96:43:64:73:
f9:bd:82:83:64:07:64:f9:5e:57:70:8f:b2:1f:2d:e3:f3:bf:
8b:b2:5c:2c:af:f9:0f:d5:9b:ee:98:ae:13:12:52:15:aa:52:
e4:89:a5:eb:1e:fb:c3:91:d8:69:cd:29:61:6c:e2:1b:28:48:
b0:a4:be:ae:b7:fc:0f:66:1f:39:26:d2:88:f8:4c:b1:3d:c3:
82:3f:dc:75:4c:a7:68:14:f3:75:11:e2:79:05:f2:ce:88:2e:
50:13:0e:f5:6a:c3:38:94:ce:c8:bb:02:0e:8c:ae:82:12:23:
79:a8:43:95:a7:df:7f:78:e8:95:b0:f9:c6:cb:99:aa:1a:aa:
14:3b:2f:ef:64:b5:e4:34:51:ff:34:f9:e2:4b:55:78:c3:65:
5f:8c:a4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRvwwwXZK4k7Jn8jypOvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjUwMzI5MDUwMTQzWhcNMjUwMzMwMDUwMTQzWjAzMTEwLwYDVQQD
EyhjMWM4ODhkYjA1ZjgxNzczY2QzZGYxNGU5MWQwMWI0ZGU0NmE1NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAaeAr8G8hnqTRkoiHDh9K6nkEw5
s+RUx21OCKe+8Xik5WtinfUekC4SPE1BZDoLwoMKilIjoLPaMXXJtQrh2x1Ww4J3
qwNyKJOL2opdNttqSm8zcyoIJGaAnAH7TKgHYMJqmHxdyGegxJEqTMC9L4N9U/UM
xGDVyk4r19E7bPx64BHdCAT7FjA2T5lpbYnu7PmZKVW8tJSr+klCplUdAA8lk4q1
zc6Wlh2pbS5gAUxqDmko5NQ4YTt8X3EHhPsc2eszmHOKqRY0Z4GrZ1jJ09sf63Jo
RHa7hZjypfI5UVjeMfZM5XoUSPFknoSoAIJTnPad46l8TLaOcvUYcVEmFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHIiNsF+BdzzT3xTpHQG03kalZuMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXI+hO+K
gt2Uqaj0KtM0SmOsb6F0ioGtmd+8TWAE+URxtIdYL9L7PS8oSg5/TDpsOna6eL5U
X7AVwp6SRCPSJVJXJDY/H9BWuIwQY4gLqx1lifnfg55oyiW7W8mjpAylyUnQWIC8
poiWQ2Rz+b2Cg2QHZPleV3CPsh8t4/O/i7JcLK/5D9Wb7piuExJSFapS5Iml6x77
w5HYac0pYWziGyhIsKS+rrf8D2YfOSbSiPhMsT3Dgj/cdUynaBTzdRHieQXyzogu
UBMO9WrDOJTOyLsCDoyughIjeahDlafff3jolbD5xsuZqhqqFDsv72S15DRR/zT5
4ktVeMNlX4ykDg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:20 2025 by rpki-client