Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: c5Cn4LXk51rHEzsorZAZ77YGK8Xj2LnKlVXcda3B6SA=
Subject key identifier: FA:DC:59:CD:CF:90:98:97:0A:A2:15:AF:E8:05:C2:91:B8:02:EF:A8
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 0194BD8532BE60751642125AD38153E4DD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0702
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: FyY0Es04iqnZBqqDW3zurWVjMxiMWGePK9h7gG+AmEI=)
2: NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa (hash: gMJAwS5d7p1yd0nZvOPAx6H6bdi5jN4+vJLXsEcA8rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:be:60:75:16:42:12:5a:d3:81:53:e4:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=fadc59cdcf9098970aa215afe805c291b802efa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:2c:6a:48:7d:05:9d:7b:7c:de:bf:5b:39:
48:b8:92:3b:34:34:03:5e:64:c0:ed:2e:81:20:77:
a9:f0:8a:19:ea:05:85:57:24:51:a5:18:2c:0f:70:
8e:11:c2:41:7e:d2:2e:2a:82:93:80:7d:e3:f2:1b:
b6:76:17:45:2c:fb:5e:bb:93:38:05:af:58:74:8d:
26:0e:a5:10:78:70:c4:e2:92:13:2f:c1:ca:0d:61:
82:13:af:e7:ee:f7:be:a1:d5:79:41:d7:fc:8c:b9:
54:fc:0f:a8:4c:47:ef:c7:2e:1d:7c:9e:39:fb:47:
e5:e6:c8:26:0a:3b:4b:af:26:f7:d7:80:48:83:28:
8b:18:bb:d7:a5:68:52:82:bc:f4:fa:f5:ee:95:fe:
5b:48:da:ec:f0:04:b9:49:94:85:e1:3e:b0:0d:bf:
81:7f:a9:0c:ef:49:63:85:2b:c0:d7:04:b8:ba:80:
bd:39:a1:f5:47:80:0a:d9:e0:da:51:d7:bf:ba:f9:
3f:a5:54:ab:9d:24:8c:1d:47:38:a9:bf:2a:6a:84:
1d:10:a1:c7:52:30:b3:40:eb:a0:97:17:b0:fe:a6:
42:d5:a7:1c:45:a8:95:25:94:1c:e8:13:b6:ca:5b:
df:a6:ee:fa:b5:04:a6:fb:67:28:5c:35:0c:ce:21:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DC:59:CD:CF:90:98:97:0A:A2:15:AF:E8:05:C2:91:B8:02:EF:A8
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:09:0a:db:70:39:1d:fb:7a:3c:fc:04:3c:2e:f2:51:fb:
d7:93:dc:f0:74:28:fa:05:1d:34:4a:bc:17:39:bd:88:16:f4:
cc:de:4b:a7:79:92:e6:96:1b:75:b5:58:91:17:8f:3f:75:43:
31:b7:03:dd:65:26:a8:06:76:50:28:63:66:e9:f9:06:81:21:
bc:bf:22:36:e0:2a:33:3b:21:50:23:44:19:76:b7:8a:fe:cf:
a7:83:84:93:51:b7:2d:05:26:ff:6a:42:50:ac:1e:02:7b:f9:
cd:50:1a:87:dd:56:1e:ec:79:28:27:9c:6c:95:2c:b5:28:9e:
59:f9:3d:f6:14:20:67:1a:10:43:b5:d7:fd:48:74:75:fb:23:
82:5e:86:39:c1:a6:a7:04:72:f6:9f:08:0a:b8:58:3d:ad:02:
3c:88:cd:54:c7:20:73:c1:4f:49:35:92:73:0f:6d:f1:ef:c6:
f4:95:8d:e4:e2:e4:4c:dc:77:9e:d8:f4:e0:00:28:b4:83:03:
7b:95:e0:c6:87:85:de:5f:9d:a7:9b:4f:8f:90:f0:59:2e:5f:
76:b2:ae:51:87:13:0f:cc:7d:23:48:35:75:01:23:83:e6:0b:
73:d5:76:12:17:94:3f:e0:a1:80:5a:7f:1c:a5:dc:47:7f:6a:
9e:7f:99:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTK+YHUWQhJa04FT5N1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzFmYWMyNGUzMGQ5MjU4ZWIyZWY3MmYzMWVkOWJkNjA4
ZmUwZGUwHhcNMjUwMTMxMTgwMDEwWhcNMjUwMjAxMTgwMDEwWjAzMTEwLwYDVQQD
EyhmYWRjNTljZGNmOTA5ODk3MGFhMjE1YWZlODA1YzI5MWI4MDJlZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Usakh9BZ17fN6/WzlIuJI7NDQD
XmTA7S6BIHep8IoZ6gWFVyRRpRgsD3COEcJBftIuKoKTgH3j8hu2dhdFLPteu5M4
Ba9YdI0mDqUQeHDE4pITL8HKDWGCE6/n7ve+odV5Qdf8jLlU/A+oTEfvxy4dfJ45
+0fl5sgmCjtLryb314BIgyiLGLvXpWhSgrz0+vXulf5bSNrs8AS5SZSF4T6wDb+B
f6kM70ljhSvA1wS4uoC9OaH1R4AK2eDaUde/uvk/pVSrnSSMHUc4qb8qaoQdEKHH
UjCzQOuglxew/qZC1accRaiVJZQc6BO2ylvfpu76tQSm+2coXDUMziEpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrcWc3PkJiXCqIVr+gFwpG4Au+oMB8GA1UdIwQY
MBaAFAbB+sJOMNkljrLvcvMe2b1gj+DeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDIt
MzQ2YTNjY2U1ZjA5LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kZjBlNGItOGY2Ny00Mjk1LTllNDItMzQ2YTNjY2U1ZjA5
LzEvQnNINndrNHcyU1dPc3U5eTh4N1p2V0NQNE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaEJCttw
OR37ejz8BDwu8lH715Pc8HQo+gUdNEq8Fzm9iBb0zN5Lp3mS5pYbdbVYkRePP3VD
MbcD3WUmqAZ2UChjZun5BoEhvL8iNuAqMzshUCNEGXa3iv7Pp4OEk1G3LQUm/2pC
UKweAnv5zVAah91WHux5KCecbJUstSieWfk99hQgZxoQQ7XX/Uh0dfsjgl6GOcGm
pwRy9p8ICrhYPa0CPIjNVMcgc8FPSTWScw9t8e/G9JWN5OLkTNx3ntj04AAotIMD
e5XgxoeF3l+dp5tPj5DwWS5fdrKuUYcTD8x9I0g1dQEjg+YLc9V2EheUP+ChgFp/
HKXcR39qnn+ZHA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:15 2025 by rpki-client