Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
File: jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft (raw, json)
Hash identifier: cYgwDmnzgP5FnHC5Rtql7J7se9gqe5J4RgyCYlR/lRY=
Subject key identifier: 1F:D1:90:AC:AD:BB:BF:2F:2B:75:E4:F6:77:A1:6C:95:CC:DE:72:AF
Authority key identifier: 8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
Certificate issuer: /CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Certificate serial: 019492D24154B1E7CC025DED7974751D2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
Manifest number: 97
Signing time: Thu 23 Jan 2025 11:00:40 +0000
Manifest this update: Thu 23 Jan 2025 11:00:40 +0000
Manifest next update: Fri 24 Jan 2025 11:00:40 +0000
Files and hashes: 1: jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl (hash: 91tBXUot+QLIkcnhnO9wk5BYAeZtldFYfDstgwlE05Q=)
2: lc_ZnzmkngY0sodcizkIqhuzC70.roa (hash: ai21H6Ojd+rIxdvz8BuEQbQ4xb1pH2HpdJMIDMXYIWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:d2:41:54:b1:e7:cc:02:5d:ed:79:74:75:1d:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Validity
Not Before: Jan 23 11:00:40 2025 GMT
Not After : Jan 24 11:00:40 2025 GMT
Subject: CN=1fd190acadbbbf2f2b75e4f677a16c95ccde72af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:9f:7c:42:fc:54:1c:8e:49:29:f3:35:fb:
28:73:f1:27:5b:42:88:2e:b8:ab:ea:e7:32:bb:86:
83:54:40:1b:2d:cf:0d:b0:ee:d8:02:b9:e5:47:4a:
ae:95:79:7c:df:6f:09:a4:df:0e:19:16:d8:4a:71:
4b:0b:49:7e:bf:f2:82:b9:91:6f:39:7c:9b:9a:51:
67:56:4e:64:87:45:57:85:f4:60:61:ff:8e:37:6b:
ed:5d:69:46:b8:09:7f:82:98:9e:ff:a3:b0:c7:fe:
79:7f:bc:b9:20:3a:0e:4c:57:e7:e5:ae:92:52:39:
0c:80:2e:af:b4:b5:39:f6:3f:21:b6:23:ac:c1:1b:
ae:77:46:d4:5f:6d:ec:1a:f6:17:a0:25:b1:59:d4:
1c:74:30:57:81:b8:a1:15:47:d6:b5:88:86:1b:2c:
68:1a:d8:de:bf:00:fd:8a:89:2c:88:80:86:82:bc:
fc:fe:8c:93:3e:9e:d8:55:44:0d:2c:09:eb:3f:97:
47:b0:ca:05:8e:8e:0b:09:af:2f:95:f2:a2:13:74:
64:bf:7d:fb:68:41:13:fd:bf:5a:5c:08:7e:cf:6b:
eb:dd:7e:cc:fb:a4:4b:46:13:a4:fa:dd:a0:9c:9d:
0f:42:56:e3:0a:98:e8:66:1b:2d:3a:07:80:6c:97:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D1:90:AC:AD:BB:BF:2F:2B:75:E4:F6:77:A1:6C:95:CC:DE:72:AF
X509v3 Authority Key Identifier:
keyid:8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:02:f8:4f:cf:7e:93:6c:89:b3:24:3e:6a:92:e3:ba:02:
49:3a:38:5c:5b:9b:ff:09:45:b6:af:9e:3a:f7:c0:89:4c:f7:
bc:f0:f7:0c:1f:8c:1b:61:20:d8:e7:cf:05:a2:4d:78:25:3e:
80:03:ef:23:a6:b1:df:b3:1a:68:43:52:4a:cb:6d:97:c9:37:
e0:0e:f9:8c:63:62:21:9c:b9:83:c1:1d:2b:55:38:e3:49:36:
2d:80:d1:87:04:7b:25:c8:22:37:8a:96:1f:b3:23:f3:6d:f1:
13:3a:71:1f:3c:06:a6:37:34:46:96:cb:51:7d:bc:ef:d7:d0:
40:f5:e0:44:e0:1d:da:f4:29:7b:6d:b4:92:d4:fe:ba:44:72:
84:a7:f1:f6:be:9c:12:92:b0:fe:79:a3:3e:88:78:b5:4f:40:
d4:87:e1:ed:ef:da:46:a7:b4:31:28:e2:42:a4:97:bd:29:41:
36:6a:80:2c:bc:88:ad:c2:a2:43:20:af:ba:38:6d:51:b9:e8:
2b:e5:5d:b7:35:16:88:7e:c6:aa:f3:10:63:e2:74:43:09:6b:
4d:ac:da:7c:f8:e1:d2:6b:df:2a:36:69:3f:8a:1a:65:ea:c1:
1f:50:65:c0:fc:6b:b1:29:b4:75:57:7c:bc:a8:34:11:65:42:
4a:9f:9f:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSS0kFUsefMAl3teXR1HS4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGVjM2ExOTA4M2RhOWQ5YmE5ZjJmYTVjYzBkMjEyM2Zi
MzAxYmIwHhcNMjUwMTIzMTEwMDQwWhcNMjUwMTI0MTEwMDQwWjAzMTEwLwYDVQQD
EygxZmQxOTBhY2FkYmJiZjJmMmI3NWU0ZjY3N2ExNmM5NWNjZGU3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfeffEL8VByOSSnzNfsoc/EnW0KI
Lrir6ucyu4aDVEAbLc8NsO7YArnlR0qulXl8328JpN8OGRbYSnFLC0l+v/KCuZFv
OXybmlFnVk5kh0VXhfRgYf+ON2vtXWlGuAl/gpie/6Owx/55f7y5IDoOTFfn5a6S
UjkMgC6vtLU59j8htiOswRuud0bUX23sGvYXoCWxWdQcdDBXgbihFUfWtYiGGyxo
GtjevwD9ioksiICGgrz8/oyTPp7YVUQNLAnrP5dHsMoFjo4LCa8vlfKiE3Rkv337
aEET/b9aXAh+z2vr3X7M+6RLRhOk+t2gnJ0PQlbjCpjoZhstOgeAbJfJQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/RkKytu78vK3Xk9nehbJXM3nKvMB8GA1UdIwQY
MBaAFI1Ow6GQg9qdm6ny+lzA0hI/swG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjdkODYtMWVjMy00OTU4LWE5Nzkt
MWFiNzIzYzAwZTVmLzEvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjdkODYtMWVjMy00OTU4LWE5NzktMWFiNzIzYzAwZTVm
LzEvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVgC+E/P
fpNsibMkPmqS47oCSTo4XFub/wlFtq+eOvfAiUz3vPD3DB+MG2Eg2OfPBaJNeCU+
gAPvI6ax37MaaENSSsttl8k34A75jGNiIZy5g8EdK1U440k2LYDRhwR7JcgiN4qW
H7Mj823xEzpxHzwGpjc0RpbLUX2879fQQPXgROAd2vQpe220ktT+ukRyhKfx9r6c
EpKw/nmjPoh4tU9A1Ifh7e/aRqe0MSjiQqSXvSlBNmqALLyIrcKiQyCvujhtUbno
K+VdtzUWiH7GqvMQY+J0QwlrTazafPjh0mvfKjZpP4oaZerBH1BlwPxrsSm0dVd8
vKg0EWVCSp+fdg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:34:38 2025 by rpki-client