Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
File: jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft (raw, json)
Hash identifier: nRGgxLnKx30IRf8+x0Xd7XYjVklrP3jCPVTSb9gHheQ=
Subject key identifier: 09:9E:1E:45:0C:8C:4C:7D:9A:22:4C:00:6A:42:C0:85:39:B1:37:C7
Authority key identifier: 8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
Certificate issuer: /CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Certificate serial: 01948EF5875A1CF1C03E76346FBE8EB12C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
Manifest number: 95
Signing time: Wed 22 Jan 2025 17:00:43 +0000
Manifest this update: Wed 22 Jan 2025 17:00:43 +0000
Manifest next update: Thu 23 Jan 2025 17:00:43 +0000
Files and hashes: 1: jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl (hash: ntoLC/f9Flupz3rjEw5CoAmzoDwUtXhwNsaW9jW2C5o=)
2: lc_ZnzmkngY0sodcizkIqhuzC70.roa (hash: ai21H6Ojd+rIxdvz8BuEQbQ4xb1pH2HpdJMIDMXYIWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:f5:87:5a:1c:f1:c0:3e:76:34:6f:be:8e:b1:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4ec3a19083da9d9ba9f2fa5cc0d2123fb301bb
Validity
Not Before: Jan 22 17:00:43 2025 GMT
Not After : Jan 23 17:00:43 2025 GMT
Subject: CN=099e1e450c8c4c7d9a224c006a42c08539b137c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b9:d0:b5:16:9b:3e:f1:70:4f:fc:19:9a:74:
5b:34:14:00:a9:1a:93:0e:3d:29:55:39:22:69:8f:
37:77:e6:87:48:1b:f0:7d:71:f1:25:c9:96:04:9e:
17:fc:33:cf:e1:d2:d3:19:1b:56:f7:8a:3f:ec:14:
6c:6d:e8:11:a7:4f:40:59:6f:64:60:05:7a:82:5e:
f2:11:34:ed:21:02:c0:64:1b:51:62:e2:51:01:4d:
a1:1b:80:ce:a2:a4:32:1b:1c:34:04:26:55:d6:21:
24:73:c1:56:53:84:98:c7:df:63:b6:8d:84:03:97:
4e:29:e2:97:8d:e2:6b:64:5f:24:d2:e7:bd:08:bb:
5d:65:55:af:39:1b:78:84:cf:20:5b:38:49:b2:eb:
ac:16:3b:3f:b1:5d:4f:7e:7f:61:7e:ef:85:ce:70:
d7:ec:de:a0:3e:9c:d3:e8:2d:79:3d:56:d6:7f:17:
99:e3:8e:4d:14:53:4a:e3:74:75:64:cf:d8:8a:91:
0e:0f:00:c5:17:d8:f7:98:75:f5:e0:5b:39:84:b0:
dc:c8:0c:b4:b2:27:e6:8a:a3:cd:2f:ba:2e:f2:62:
70:ee:24:40:32:d9:36:69:c2:ed:2c:0a:29:ef:4b:
f7:7e:05:be:4f:75:c7:d0:e8:7d:b7:70:04:9d:eb:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9E:1E:45:0C:8C:4C:7D:9A:22:4C:00:6A:42:C0:85:39:B1:37:C7
X509v3 Authority Key Identifier:
keyid:8D:4E:C3:A1:90:83:DA:9D:9B:A9:F2:FA:5C:C0:D2:12:3F:B3:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU7DoZCD2p2bqfL6XMDSEj-zAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b7d86-1ec3-4958-a979-1ab723c00e5f/1/jU7DoZCD2p2bqfL6XMDSEj-zAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5a:1e:14:4b:58:74:27:6f:00:10:ac:4c:b4:30:eb:01:2e:
5d:f1:37:60:c3:4a:22:23:9b:c1:1f:02:c0:7e:4a:c1:8a:fb:
67:a2:6c:94:8d:2c:52:0d:25:5e:cd:ac:db:60:3c:19:87:51:
49:f4:3d:1a:f1:d5:c7:12:96:03:ee:cb:75:44:09:77:fd:6f:
30:a1:32:f6:c0:a4:dd:ab:fe:7a:c9:3a:0f:06:ac:5f:df:4a:
d2:de:42:d8:f7:c2:94:e8:22:37:28:35:81:c9:02:a6:17:36:
ea:a9:30:1a:b7:be:86:ce:86:60:71:62:e2:7d:82:0a:cc:6a:
c9:4b:2c:55:e1:5a:6f:7b:77:c7:21:91:62:08:61:c5:56:4f:
15:62:b8:6d:7b:ad:e4:2b:2e:f2:e6:e0:c6:34:ce:26:72:5d:
13:30:d2:f8:29:b4:ce:fd:ca:a4:7d:a3:f8:07:34:7b:e2:3d:
a2:65:ca:54:af:b8:ef:0a:72:80:e9:c4:c5:92:24:ff:72:2e:
c1:03:d5:aa:7b:be:ba:ab:5c:49:0a:8a:21:13:74:b3:c6:16:
cc:71:44:e4:d7:bd:0c:5c:ba:ff:dd:c2:b4:36:2c:58:43:7b:
42:ea:1a:cc:59:8d:0a:8c:af:15:ae:91:f4:e1:8f:cd:70:b6:
00:16:84:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSO9YdaHPHAPnY0b76OsSwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGVjM2ExOTA4M2RhOWQ5YmE5ZjJmYTVjYzBkMjEyM2Zi
MzAxYmIwHhcNMjUwMTIyMTcwMDQzWhcNMjUwMTIzMTcwMDQzWjAzMTEwLwYDVQQD
EygwOTllMWU0NTBjOGM0YzdkOWEyMjRjMDA2YTQyYzA4NTM5YjEzN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibnQtRabPvFwT/wZmnRbNBQAqRqT
Dj0pVTkiaY83d+aHSBvwfXHxJcmWBJ4X/DPP4dLTGRtW94o/7BRsbegRp09AWW9k
YAV6gl7yETTtIQLAZBtRYuJRAU2hG4DOoqQyGxw0BCZV1iEkc8FWU4SYx99jto2E
A5dOKeKXjeJrZF8k0ue9CLtdZVWvORt4hM8gWzhJsuusFjs/sV1Pfn9hfu+FznDX
7N6gPpzT6C15PVbWfxeZ445NFFNK43R1ZM/YipEODwDFF9j3mHX14Fs5hLDcyAy0
sifmiqPNL7ou8mJw7iRAMtk2acLtLAop70v3fgW+T3XH0Oh9t3AEnet7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmeHkUMjEx9miJMAGpCwIU5sTfHMB8GA1UdIwQY
MBaAFI1Ow6GQg9qdm6ny+lzA0hI/swG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjdkODYtMWVjMy00OTU4LWE5Nzkt
MWFiNzIzYzAwZTVmLzEvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjdkODYtMWVjMy00OTU4LWE5NzktMWFiNzIzYzAwZTVm
LzEvalU3RG9aQ0QycDJicWZMNlhNRFNFai16QWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFoeFEtY
dCdvABCsTLQw6wEuXfE3YMNKIiObwR8CwH5KwYr7Z6JslI0sUg0lXs2s22A8GYdR
SfQ9GvHVxxKWA+7LdUQJd/1vMKEy9sCk3av+esk6DwasX99K0t5C2PfClOgiNyg1
gckCphc26qkwGre+hs6GYHFi4n2CCsxqyUssVeFab3t3xyGRYghhxVZPFWK4bXut
5Csu8ubgxjTOJnJdEzDS+Cm0zv3KpH2j+Ac0e+I9omXKVK+47wpygOnExZIk/3Iu
wQPVqnu+uqtcSQqKIRN0s8YWzHFE5Ne9DFy6/93CtDYsWEN7QuoazFmNCoyvFa6R
9OGPzXC2ABaEWw==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:46 2025 by rpki-client on console.sobornost.net