Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: XOYVN/VuwHL4OASF8Ts282bFFLB9f9Ggw0OCy53PTm8=
Subject key identifier: 2D:8B:B5:53:E3:9F:19:D6:2E:B2:A1:06:9A:18:F7:D7:77:97:E4:36
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 0194BCA976D0139EA6EF70129DF5316499B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0783
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: UkFR8PsfJHtKzqIweFMDiKNep8K4B/cH/jlJmt1YIs0=)
2: wnX8Ya1rxnPViUevxG2zASimD4s.roa (hash: 5yf/GiJRJl+zzQb5QiL4xkgJStGYufgJG3+rwqnEksA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:d0:13:9e:a6:ef:70:12:9d:f5:31:64:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=2d8bb553e39f19d62eb2a1069a18f7d77797e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:4c:9f:2f:d9:c3:69:51:6a:6d:1f:53:18:
d1:53:33:6e:b0:54:9b:c7:c5:6f:35:a9:b0:c9:9d:
7e:d4:2b:c6:3c:80:ee:70:82:dc:50:f0:a1:74:b1:
3c:2e:70:3c:36:53:0c:e2:a9:aa:a6:67:00:4d:26:
68:e3:35:9b:13:eb:aa:2a:20:cb:62:84:0a:ed:b4:
e2:72:26:8f:25:5c:b4:69:e4:e5:cf:2e:45:95:34:
bc:05:ef:ad:f9:9e:ba:53:f5:3d:9f:64:c8:8d:df:
d7:fc:fe:1a:04:e6:3a:ed:49:5d:52:12:0f:42:5b:
57:2c:49:ae:1b:8a:a2:66:9c:c1:e8:84:4f:bd:48:
44:04:9b:34:58:5b:34:a0:11:43:06:a1:f9:75:7f:
ae:ff:1f:a2:1f:2a:a3:f9:06:f8:1f:54:a2:8e:65:
30:60:84:7b:a2:41:7a:a7:6a:46:09:1a:e6:cc:ec:
d9:85:e6:aa:4c:be:df:e6:15:d2:41:4e:4b:b2:93:
ad:09:fb:aa:07:1f:5b:61:6b:ad:e6:ac:f6:16:04:
15:37:0b:ec:aa:92:f3:62:3e:fb:56:9f:08:dd:33:
82:21:1d:00:94:24:63:2c:44:89:b2:84:c9:26:03:
7b:7d:72:4a:8b:26:b2:bd:e0:0f:04:d3:47:11:3b:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:B5:53:E3:9F:19:D6:2E:B2:A1:06:9A:18:F7:D7:77:97:E4:36
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:8b:b3:c6:d1:cf:26:f8:93:e1:8a:9c:b7:08:40:9e:c7:
9a:cf:a2:ae:b8:5b:44:99:91:f1:1b:7a:e3:df:a0:20:fc:c6:
00:6d:4f:6c:d6:3f:23:b4:12:15:87:f4:b4:04:b6:21:b1:25:
87:c7:e8:5a:8f:5d:23:80:9c:cc:a9:09:00:40:b9:12:c8:a9:
ed:9b:e4:eb:a6:be:0a:2f:2e:7e:3d:df:1e:9b:9e:63:fd:85:
e4:55:d1:1b:28:77:42:44:85:4b:84:f7:97:2c:d3:a5:74:c4:
1f:49:ac:39:eb:02:2f:28:8a:4f:27:d5:71:65:0b:15:dd:d1:
cc:60:ab:08:c4:98:04:82:f3:9a:eb:37:c7:a1:0f:1e:df:f4:
19:12:2d:43:39:c7:ed:a3:b6:56:f4:ab:5e:88:2c:34:31:c4:
70:c3:ff:cf:21:14:7f:24:a8:07:4f:87:ba:d9:1f:03:3f:e6:
e8:28:51:ad:ae:a0:36:8c:62:9d:b3:d1:74:ce:4f:d7:d9:cd:
c8:b9:78:6b:bc:0f:e7:b4:1c:90:21:39:b5:fb:09:49:88:0e:
cd:fa:ab:09:9c:94:27:ab:a8:f2:f0:0e:b6:e5:71:e0:c8:5d:
e9:2d:ae:bd:9c:db:61:9b:73:48:27:72:1a:5c:73:73:eb:46:
43:d0:ba:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXbQE56m73ASnfUxZJm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTU1ZTZjMTRiOTRkNzU2ZDkzYTgzYTUwMmM3ZjE1Nzdm
OWFmNDkwHhcNMjUwMTMxMTQwMDEwWhcNMjUwMjAxMTQwMDEwWjAzMTEwLwYDVQQD
EygyZDhiYjU1M2UzOWYxOWQ2MmViMmExMDY5YTE4ZjdkNzc3OTdlNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIpMny/Zw2lRam0fUxjRUzNusFSb
x8VvNamwyZ1+1CvGPIDucILcUPChdLE8LnA8NlMM4qmqpmcATSZo4zWbE+uqKiDL
YoQK7bTiciaPJVy0aeTlzy5FlTS8Be+t+Z66U/U9n2TIjd/X/P4aBOY67UldUhIP
QltXLEmuG4qiZpzB6IRPvUhEBJs0WFs0oBFDBqH5dX+u/x+iHyqj+Qb4H1SijmUw
YIR7okF6p2pGCRrmzOzZheaqTL7f5hXSQU5LspOtCfuqBx9bYWut5qz2FgQVNwvs
qpLzYj77Vp8I3TOCIR0AlCRjLESJsoTJJgN7fXJKiyayveAPBNNHETtdlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2LtVPjnxnWLrKhBpoY99d3l+Q2MB8GA1UdIwQY
MBaAFG1VXmwUuU11bZOoOlAsfxV3+a9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAt
OTdlYWY5YWE3ODZmLzEvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAtOTdlYWY5YWE3ODZm
LzEvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7GLs8bR
zyb4k+GKnLcIQJ7Hms+irrhbRJmR8Rt649+gIPzGAG1PbNY/I7QSFYf0tAS2IbEl
h8foWo9dI4CczKkJAEC5Esip7Zvk66a+Ci8ufj3fHpueY/2F5FXRGyh3QkSFS4T3
lyzTpXTEH0msOesCLyiKTyfVcWULFd3RzGCrCMSYBILzmus3x6EPHt/0GRItQznH
7aO2VvSrXogsNDHEcMP/zyEUfySoB0+HutkfAz/m6ChRra6gNoxinbPRdM5P19nN
yLl4a7wP57QckCE5tfsJSYgOzfqrCZyUJ6uo8vAOtuVx4Mhd6S2uvZzbYZtzSCdy
Glxzc+tGQ9C6VA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client