Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: DSOcpzxe/+arOTJkuM5TRvFSil09RINcjlQArXkjITY=
Subject key identifier: 3F:47:3D:FE:FF:A5:76:3E:C6:1D:F8:96:9C:BD:FA:68:A4:42:6F:D1
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 01962E619FB407C753FE151B6F4302CC275B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 07E5
Signing time: Sun 13 Apr 2025 09:01:11 +0000
Manifest this update: Sun 13 Apr 2025 09:01:11 +0000
Manifest next update: Mon 14 Apr 2025 09:01:11 +0000
Files and hashes: 1: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: RErM30eVNV1kVu3JiP+ijveh43v5KqudMQQB3I6rsHw=)
2: nJjrSgE7Va7EKxllkFfukC6fvJY.roa (hash: V3JIEPfJn7JzMttrERHm2nxfQ8d/LYnbQ0isiQmawx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:9f:b4:07:c7:53:fe:15:1b:6f:43:02:cc:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Apr 13 09:01:11 2025 GMT
Not After : Apr 14 09:01:11 2025 GMT
Subject: CN=3f473dfeffa5763ec61df8969cbdfa68a4426fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:a8:4b:09:d8:d8:5a:e6:7c:4e:2f:03:9f:
28:9e:fc:aa:97:73:fc:46:1d:d9:6f:56:38:89:60:
95:b7:a0:4a:ce:b0:79:22:f5:8f:70:cc:54:a6:11:
32:2a:33:74:ca:41:5b:cf:45:f2:bb:49:12:0f:82:
36:9b:8b:69:9b:16:d6:19:16:43:6c:ac:ef:41:5d:
a1:6e:70:ba:19:f2:cf:ab:8d:27:a5:4e:64:06:c5:
17:11:62:9e:e1:19:79:68:e0:18:3d:76:04:9b:cc:
e1:9d:08:c4:09:6e:6b:dd:7b:c4:ac:ec:85:29:8e:
cb:2d:06:f8:68:d9:d4:69:9a:ef:5e:3a:c9:2b:6c:
41:aa:17:35:c6:81:bd:7a:99:89:18:14:6e:31:c4:
ea:4f:ab:d6:b0:27:22:69:91:ec:c6:60:e0:ed:ea:
0b:4f:57:80:3b:89:99:d4:f0:91:25:80:ad:9a:b5:
bc:0a:b6:46:24:40:a4:ac:ff:31:a0:8f:6f:7d:18:
50:0a:17:f3:19:98:e1:0a:c7:8f:18:08:12:64:76:
78:35:9f:30:02:f5:b2:9a:99:2e:4a:38:5a:06:82:
36:32:cc:7d:8a:dc:42:81:e6:d4:52:8d:1f:d1:91:
81:0b:01:7b:f9:40:b4:7f:25:de:8c:7b:bb:9f:42:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:3D:FE:FF:A5:76:3E:C6:1D:F8:96:9C:BD:FA:68:A4:42:6F:D1
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:72:43:47:3c:b6:4e:a6:04:a1:b6:c5:44:c7:ab:12:49:ea:
e9:ef:f9:94:2a:c4:79:44:b4:a5:cf:1e:a9:58:7b:51:ff:0d:
fc:b1:03:96:2d:42:cb:63:04:a8:e7:79:b2:8f:38:a5:90:0a:
ea:a1:c9:ed:1b:c1:f8:fc:bd:4b:b2:5b:fe:93:aa:bf:55:6b:
d8:9d:a5:6b:35:e6:5c:fe:ff:30:02:cc:87:3c:5b:10:5b:be:
ba:5a:16:5f:d4:b3:ee:0e:fd:8f:3a:84:92:49:c9:e0:1c:71:
fd:63:32:20:a2:01:21:66:32:0a:c5:3d:fe:89:dd:e4:c8:73:
2f:41:96:73:ab:2f:21:8c:a1:c3:0c:98:21:f9:cc:27:6a:6e:
8a:eb:b3:46:0c:39:3d:3f:b5:67:57:4a:a6:50:0a:79:21:65:
91:f3:75:41:2a:84:62:0a:a3:da:8b:c6:f5:a9:a1:e3:ae:ad:
a5:77:43:19:95:58:ef:5a:d5:b1:2d:ea:68:85:3c:db:0e:85:
35:eb:eb:be:59:48:b6:82:10:8e:27:0e:8b:7d:77:34:bf:fc:
4f:cc:6e:1c:21:26:0a:9b:5d:57:48:98:dd:0f:79:c7:78:37:
95:f3:ae:34:7e:03:64:b8:3f:30:31:b2:c6:f4:a0:70:c8:5f:
75:88:99:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZ+0B8dT/hUbb0MCzCdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjUwNDEzMDkwMTExWhcNMjUwNDE0MDkwMTExWjAzMTEwLwYDVQQD
EygzZjQ3M2RmZWZmYTU3NjNlYzYxZGY4OTY5Y2JkZmE2OGE0NDI2ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMaoSwnY2FrmfE4vA58onvyql3P8
Rh3Zb1Y4iWCVt6BKzrB5IvWPcMxUphEyKjN0ykFbz0Xyu0kSD4I2m4tpmxbWGRZD
bKzvQV2hbnC6GfLPq40npU5kBsUXEWKe4Rl5aOAYPXYEm8zhnQjECW5r3XvErOyF
KY7LLQb4aNnUaZrvXjrJK2xBqhc1xoG9epmJGBRuMcTqT6vWsCciaZHsxmDg7eoL
T1eAO4mZ1PCRJYCtmrW8CrZGJECkrP8xoI9vfRhQChfzGZjhCsePGAgSZHZ4NZ8w
AvWympkuSjhaBoI2Msx9itxCgebUUo0f0ZGBCwF7+UC0fyXejHu7n0JzkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9HPf7/pXY+xh34lpy9+mikQm/RMB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHJDRzy2
TqYEobbFRMerEknq6e/5lCrEeUS0pc8eqVh7Uf8N/LEDli1Cy2MEqOd5so84pZAK
6qHJ7RvB+Py9S7Jb/pOqv1Vr2J2lazXmXP7/MALMhzxbEFu+uloWX9Sz7g79jzqE
kknJ4Bxx/WMyIKIBIWYyCsU9/ond5MhzL0GWc6svIYyhwwyYIfnMJ2puiuuzRgw5
PT+1Z1dKplAKeSFlkfN1QSqEYgqj2ovG9amh466tpXdDGZVY71rVsS3qaIU82w6F
NevrvllItoIQjicOi313NL/8T8xuHCEmCptdV0iY3Q95x3g3lfOuNH4DZLg/MDGy
xvSgcMhfdYiZDw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:49 2025 by rpki-client on console.sobornost.net