Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json)
Hash identifier: bGw3viTknoty6hFgEGIMpkO3/mOI8lhtQnenpt2ThVw=
Subject key identifier: 5B:20:4A:3C:98:6B:E1:1F:E9:0C:85:00:D2:13:C6:59:D0:03:EC:0B
Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Certificate serial: 0194BBCEF9F5129599D2CAC0580780DB1C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
Manifest number: 1138
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: 6Zx8tvFW-otCSIx-0XXwdAcWAvY.roa (hash: vXtudZUUi1vh+dqd99m5Me5cUdKc0jshPf9ev6mVJpw=)
2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: OrGU8dRs30wkzyknSNv8mRKf4S08PqpmOTPhvj1+ruI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:f5:12:95:99:d2:ca:c0:58:07:80:db:1c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=5b204a3c986be11fe90c8500d213c659d003ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:17:43:e1:65:ae:2a:9e:d5:d6:3e:33:1c:
76:19:0a:f6:45:84:96:15:d3:3e:41:8d:7f:f1:bb:
63:21:35:8c:2c:4f:3d:31:6c:34:c7:19:2b:14:a5:
c9:4a:aa:65:b0:00:a8:2b:fb:4e:fa:eb:bc:eb:05:
3a:99:d3:6c:65:c2:f8:3d:61:ad:c9:62:73:c9:c1:
0c:9d:36:79:d7:99:c3:8e:6e:85:47:54:dd:87:de:
b8:5f:1b:94:13:d0:74:81:d0:93:28:8c:1c:c3:d0:
9d:83:6f:fd:06:4b:cd:76:71:5d:4d:79:5c:5d:13:
58:70:a4:e8:7c:5a:c1:81:f7:9d:74:b3:12:51:da:
ae:45:be:22:27:f2:48:ef:88:02:27:27:41:4a:8f:
6d:7b:2e:43:9f:c3:96:92:c1:d8:29:21:1c:64:09:
45:a1:e9:2d:d8:f1:91:c7:ce:c1:21:77:db:39:27:
40:94:5d:fc:a8:06:de:c0:0b:2d:f7:ce:0f:cb:4f:
62:6b:2a:77:dc:e8:a1:f6:6b:f9:aa:a2:50:9f:2d:
d1:3d:1d:9f:47:92:f6:ca:02:95:cf:bf:8f:13:35:
41:ac:a3:c9:5c:97:8a:5d:c6:5b:18:98:45:ba:84:
10:d5:07:1f:55:17:6c:c0:1e:fb:87:12:be:84:91:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:4A:3C:98:6B:E1:1F:E9:0C:85:00:D2:13:C6:59:D0:03:EC:0B
X509v3 Authority Key Identifier:
keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5f:2a:93:46:ba:65:a6:99:71:e5:5c:37:6b:07:d4:06:56:
96:db:ca:9e:b2:c0:e5:f9:e8:95:98:82:95:a4:da:8f:0b:51:
79:1e:2a:33:80:d8:38:90:e7:2e:ac:a3:d9:0d:6e:54:7e:3c:
e3:cf:23:e2:09:22:38:4e:20:82:a2:96:c7:0f:cc:7e:95:98:
71:4d:62:6f:3e:fc:05:bb:9f:96:de:da:3a:bc:29:b6:83:f6:
1f:86:23:82:52:a9:64:bd:b3:41:26:54:e7:7c:b5:c2:28:52:
7e:af:f0:d5:17:49:29:6a:c9:4d:31:58:8a:11:41:c5:37:98:
70:e6:92:3e:e1:01:e4:c0:04:5f:8d:a7:73:1d:3b:bd:5b:e7:
bb:3b:b7:65:42:52:b0:b2:e4:79:6f:30:44:94:94:92:ef:8f:
ef:6a:f1:75:c6:ca:19:05:51:d9:5f:56:6e:82:46:eb:cd:6c:
2b:d9:b3:03:55:59:88:2d:93:3a:16:21:0f:0f:4d:33:38:88:
cf:6e:d9:2a:e0:a7:15:bc:f7:58:f3:ef:8d:e4:f1:6c:96:dd:
63:ea:81:fc:15:60:b0:2c:3c:d3:a3:65:7a:7c:2f:06:4f:c5:
6d:4a:b7:ee:0e:d0:ca:03:a2:bf:84:50:c5:2b:f3:c9:f8:45:
39:fc:93:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvn1EpWZ0srAWAeA2xwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm
NzdjZDcwHhcNMjUwMTMxMTAwMTMxWhcNMjUwMjAxMTAwMTMxWjAzMTEwLwYDVQQD
Eyg1YjIwNGEzYzk4NmJlMTFmZTkwYzg1MDBkMjEzYzY1OWQwMDNlYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnkXQ+Flriqe1dY+Mxx2GQr2RYSW
FdM+QY1/8btjITWMLE89MWw0xxkrFKXJSqplsACoK/tO+uu86wU6mdNsZcL4PWGt
yWJzycEMnTZ515nDjm6FR1Tdh964XxuUE9B0gdCTKIwcw9Cdg2/9BkvNdnFdTXlc
XRNYcKTofFrBgfeddLMSUdquRb4iJ/JI74gCJydBSo9tey5Dn8OWksHYKSEcZAlF
oekt2PGRx87BIXfbOSdAlF38qAbewAst984Py09iayp33Oih9mv5qqJQny3RPR2f
R5L2ygKVz7+PEzVBrKPJXJeKXcZbGJhFuoQQ1QcfVRdswB77hxK+hJEhyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsgSjyYa+Ef6QyFANITxlnQA+wLMB8GA1UdIwQY
MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt
NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2
LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl8qk0a6
ZaaZceVcN2sH1AZWltvKnrLA5fnolZiClaTajwtReR4qM4DYOJDnLqyj2Q1uVH48
488j4gkiOE4ggqKWxw/MfpWYcU1ibz78Bbuflt7aOrwptoP2H4YjglKpZL2zQSZU
53y1wihSfq/w1RdJKWrJTTFYihFBxTeYcOaSPuEB5MAEX42ncx07vVvnuzu3ZUJS
sLLkeW8wRJSUku+P72rxdcbKGQVR2V9WboJG681sK9mzA1VZiC2TOhYhDw9NMziI
z27ZKuCnFbz3WPPvjeTxbJbdY+qB/BVgsCw806NlenwvBk/FbUq37g7QygOiv4RQ
xSvzyfhFOfyTzA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:26 2025 by rpki-client