Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
File: j2slsXxNBOCwSSNA56wkzITSo0c.mft (raw, json)
Hash identifier: R8vW/Rl1OGjUimfjWV/fMduqWXl8SqcVQ8FBXIqh6Wk=
Subject key identifier: A4:C0:E3:04:40:13:88:25:C4:FA:A2:35:C7:1D:72:46:CD:0D:09:39
Authority key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Certificate issuer: /CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Certificate serial: 01957F49B4B6B5933DD738C537A6F3C61164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
Manifest number: 0B39
Signing time: Mon 10 Mar 2025 09:01:31 +0000
Manifest this update: Mon 10 Mar 2025 09:01:31 +0000
Manifest next update: Tue 11 Mar 2025 09:01:31 +0000
Files and hashes: 1: Lj8ZQG5prjnQTAKbKF-gLGS0tUk.roa (hash: wVKStyJBivT9nJImaGil3qt9ysG3+7PJS2LVMDfgE2I=)
2: j2slsXxNBOCwSSNA56wkzITSo0c.crl (hash: MnbOQ1iyTi+5+plBLJLJ5d4zW+5AQpMzthpSZDz+lmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:49:b4:b6:b5:93:3d:d7:38:c5:37:a6:f3:c6:11:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Validity
Not Before: Mar 10 09:01:31 2025 GMT
Not After : Mar 11 09:01:31 2025 GMT
Subject: CN=a4c0e30440138825c4faa235c71d7246cd0d0939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:e7:ea:e8:af:24:f4:ed:4d:c0:6d:fa:cc:
39:56:7f:a3:80:96:73:d7:c8:58:dc:85:e6:3d:3e:
6a:ff:7c:77:96:e3:d8:db:12:2f:7c:de:bf:b7:4c:
d3:10:f2:5c:a7:af:19:32:7d:d1:d5:ce:38:29:29:
e0:0f:d4:1f:0e:13:3a:3b:77:cb:7c:11:31:dd:15:
00:a1:cb:a1:aa:32:72:fa:32:15:d4:30:6d:61:0a:
32:2b:17:19:f7:9d:9c:8d:18:19:56:03:4f:a3:1b:
8a:3a:7b:03:35:06:0b:5f:bf:68:6b:76:80:16:fd:
de:08:0c:c3:71:26:74:6b:ee:5e:bd:8d:77:57:5e:
44:6e:a8:bf:d4:af:08:b8:52:26:11:55:90:5f:20:
a5:cc:f3:d9:34:31:a6:15:22:8e:99:36:cf:22:b1:
4a:3c:eb:dd:ec:f5:71:33:5b:2a:c8:18:e1:f2:1b:
c9:b6:40:e3:eb:6d:53:ec:21:0e:49:12:29:a2:50:
73:f9:6c:d2:bc:ea:99:15:98:c4:8a:e5:c1:c3:22:
13:8b:6b:40:00:da:31:f2:58:cf:54:3a:5e:b8:f5:
c7:7b:3c:1a:4b:b9:99:0f:31:4a:2a:80:05:95:c4:
3f:64:ad:74:7b:2e:f7:ab:fe:d6:9b:e8:de:4c:c0:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:E3:04:40:13:88:25:C4:FA:A2:35:C7:1D:72:46:CD:0D:09:39
X509v3 Authority Key Identifier:
keyid:8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cf:ac:d8:c3:52:4a:8a:b2:37:ec:11:72:58:b7:e0:7d:84:
f5:a0:15:2c:b7:89:31:bc:89:ed:d3:2e:7d:0c:2c:a8:50:b3:
48:97:2f:5e:8b:c6:38:f0:0b:0f:4b:25:17:c7:d9:25:f0:59:
91:fa:08:fb:aa:01:86:3a:91:cc:b5:20:06:c7:90:d7:f7:c3:
33:62:01:5e:28:6f:cd:23:04:49:4d:39:02:bf:5f:84:e2:f3:
2c:1e:a4:b7:ec:42:05:e0:03:73:5a:f1:88:e5:b4:1d:23:00:
f7:aa:7e:b5:90:ef:29:7c:c4:48:7e:7b:f5:db:5e:25:4c:20:
ec:96:ff:16:08:54:3e:00:c4:ea:f8:3f:e8:0c:95:51:29:f8:
cc:98:90:7f:c0:3c:fe:13:cc:19:af:10:c4:77:a5:4e:e5:5e:
db:51:ca:83:01:d9:04:2a:14:e0:46:25:de:eb:98:d2:5b:76:
a1:23:51:ce:b4:35:42:be:90:00:97:bb:ac:30:67:0c:5a:73:
34:3e:54:ad:ba:6f:e9:af:00:60:36:b9:d2:84:3d:30:ed:20:
26:4f:12:74:26:fa:07:94:fe:7c:73:d0:14:75:48:cb:fb:3e:
9e:d9:71:2f:12:f5:52:88:57:d3:96:73:6a:07:83:45:4e:71:
69:b7:80:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV/SbS2tZM91zjFN6bzxhFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmIyNWIxN2M0ZDA0ZTBiMDQ5MjM0MGU3YWMyNGNjODRk
MmEzNDcwHhcNMjUwMzEwMDkwMTMxWhcNMjUwMzExMDkwMTMxWjAzMTEwLwYDVQQD
EyhhNGMwZTMwNDQwMTM4ODI1YzRmYWEyMzVjNzFkNzI0NmNkMGQwOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmDn6uivJPTtTcBt+sw5Vn+jgJZz
18hY3IXmPT5q/3x3luPY2xIvfN6/t0zTEPJcp68ZMn3R1c44KSngD9QfDhM6O3fL
fBEx3RUAocuhqjJy+jIV1DBtYQoyKxcZ952cjRgZVgNPoxuKOnsDNQYLX79oa3aA
Fv3eCAzDcSZ0a+5evY13V15Ebqi/1K8IuFImEVWQXyClzPPZNDGmFSKOmTbPIrFK
POvd7PVxM1sqyBjh8hvJtkDj621T7CEOSRIpolBz+WzSvOqZFZjEiuXBwyITi2tA
ANox8ljPVDpeuPXHezwaS7mZDzFKKoAFlcQ/ZK10ey73q/7Wm+jeTMBR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTA4wRAE4glxPqiNccdckbNDQk5MB8GA1UdIwQY
MBaAFI9rJbF8TQTgsEkjQOesJMyE0qNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMt
MzgzODNmODJiY2Y5LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85NTMwMGEtN2QxNi00ZDBhLTg2OGMtMzgzODNmODJiY2Y5
LzEvajJzbHNYeE5CT0N3U1NOQTU2d2t6SVRTbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8+s2MNS
SoqyN+wRcli34H2E9aAVLLeJMbyJ7dMufQwsqFCzSJcvXovGOPALD0slF8fZJfBZ
kfoI+6oBhjqRzLUgBseQ1/fDM2IBXihvzSMESU05Ar9fhOLzLB6kt+xCBeADc1rx
iOW0HSMA96p+tZDvKXzESH579dteJUwg7Jb/FghUPgDE6vg/6AyVUSn4zJiQf8A8
/hPMGa8QxHelTuVe21HKgwHZBCoU4EYl3uuY0lt2oSNRzrQ1Qr6QAJe7rDBnDFpz
ND5Urbpv6a8AYDa50oQ9MO0gJk8SdCb6B5T+fHPQFHVIy/s+ntlxLxL1UohX05Zz
ageDRU5xabeAgw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:26 2025 by rpki-client