Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: 3dms4bkewGnRmbWrpquJjBdQNDoiP/aBKVuriGKjfM4=
Subject key identifier: 52:F3:68:9B:0B:5C:E6:37:70:C2:67:44:D4:26:5D:58:CB:B7:7D:B5
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 0194BCE0AC8DBACA3E057B25053CEE467AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 05D6
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: UNcSU3JjY74xziIgnHsiyM3RUCnGupBR/OoiwfblCKQ=)
2: dCB4YZJSisBMGI9Gka6oZ1pddoY.roa (hash: xw6pibbp+5PMAJyrwS7VeHcyM1PCsmWnDTSaDLnPh9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ac:8d:ba:ca:3e:05:7b:25:05:3c:ee:46:7a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=52f3689b0b5ce63770c26744d4265d58cbb77db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:4f:f7:10:b8:f5:49:c9:5b:1f:4c:ff:bc:
41:71:99:22:6f:43:de:62:0e:fc:66:d9:6f:3d:8f:
c3:5f:ec:9a:fd:0a:83:31:8b:ea:46:fe:47:23:6d:
36:00:cb:d4:f0:40:c8:84:38:ed:73:5e:6c:48:a0:
3b:4a:f8:bb:d8:31:e9:56:d9:7f:5a:c0:0a:b2:15:
c5:e0:ed:99:ea:1c:ff:1b:9c:0c:52:de:c1:fd:1f:
13:8f:36:2b:5c:77:c9:b8:ee:1c:98:99:83:2c:50:
43:1c:75:5b:6e:80:2b:df:ab:93:f6:cb:73:7f:26:
b8:96:c6:11:d0:a3:6e:f4:9d:13:a1:1e:81:c3:39:
a3:69:86:6c:f1:c1:64:cd:c8:9c:fe:bc:31:35:7d:
14:31:9f:7a:64:b4:2d:c4:b1:05:a2:d4:f1:33:e5:
b5:d2:bf:9f:05:43:08:20:1d:32:af:ea:cd:0e:25:
2a:94:c1:a8:fc:fa:56:24:c5:c7:86:11:0e:0b:32:
43:60:9f:14:3d:8c:31:b7:fd:a8:08:47:3b:16:c7:
b0:e3:d5:09:1a:1a:a4:17:d0:3e:be:28:46:2e:33:
ed:49:07:18:fa:c7:33:76:0c:e2:00:d5:ca:3a:fa:
cd:7d:eb:37:77:41:7e:3d:3d:6f:d8:f7:fc:91:58:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:68:9B:0B:5C:E6:37:70:C2:67:44:D4:26:5D:58:CB:B7:7D:B5
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:46:b2:33:11:82:6a:c1:a5:77:55:fa:89:52:f3:cf:01:
92:40:f6:4d:00:96:f4:ea:e4:ab:79:f4:d9:62:e9:3e:08:37:
04:a4:b6:bf:61:23:7b:1e:f8:96:63:6d:f1:44:82:9c:a1:8c:
92:3a:c0:97:1c:8b:58:22:87:42:7c:16:98:ee:02:de:87:b3:
ea:e8:99:f0:c7:01:e4:26:9f:ec:c5:f5:8e:12:2e:30:0b:fe:
be:64:dc:8c:75:44:7f:56:82:f8:d8:4a:48:35:64:91:3b:af:
9b:58:2e:4d:3b:d9:11:2d:1f:9b:05:b1:c1:f0:ab:34:42:25:
95:16:bb:49:a0:80:64:9a:dd:a9:11:60:67:4c:86:8a:46:12:
55:50:3d:02:c3:56:d2:3d:d9:79:f8:4a:fe:a4:15:6a:4f:c4:
bf:c9:1a:a1:d8:04:fb:50:b4:eb:88:81:51:d2:c3:9b:d1:46:
81:1d:b0:ee:aa:fe:14:db:03:6e:7e:10:92:d1:e1:e8:32:41:
b7:b9:37:6f:72:c9:ac:4c:46:8c:58:6a:e5:8d:76:9f:f2:f0:
bb:5e:03:3b:99:d7:7f:4c:fb:c5:1e:8b:11:65:8b:70:00:b1:
86:f1:c3:92:c1:ac:7c:84:85:28:66:47:e2:5f:a9:c3:ee:e6:
ca:60:5a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KyNuso+BXslBTzuRnq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMzdhMTBhNGEwMjczZjQxZmFjZjc0NDBkNTlmMzlhZDVl
YWY2NGIwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
Eyg1MmYzNjg5YjBiNWNlNjM3NzBjMjY3NDRkNDI2NWQ1OGNiYjc3ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqxP9xC49UnJWx9M/7xBcZkib0Pe
Yg78ZtlvPY/DX+ya/QqDMYvqRv5HI202AMvU8EDIhDjtc15sSKA7Svi72DHpVtl/
WsAKshXF4O2Z6hz/G5wMUt7B/R8TjzYrXHfJuO4cmJmDLFBDHHVbboAr36uT9stz
fya4lsYR0KNu9J0ToR6BwzmjaYZs8cFkzcic/rwxNX0UMZ96ZLQtxLEFotTxM+W1
0r+fBUMIIB0yr+rNDiUqlMGo/PpWJMXHhhEOCzJDYJ8UPYwxt/2oCEc7Fsew49UJ
GhqkF9A+vihGLjPtSQcY+sczdgziANXKOvrNfes3d0F+PT1v2Pf8kVg9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLzaJsLXOY3cMJnRNQmXVjLt321MB8GA1UdIwQY
MBaAFG43oQpKAnP0H6z3RA1Z85rV6vZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMt
MThiN2ViOTIzYTk5LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMGFlZjMtMjYzZC00ZjQxLTg4NTMtMThiN2ViOTIzYTk5
LzEvYmplaENrb0NjX1FmclBkRURWbnptdFhxOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActFGsjMR
gmrBpXdV+olS888BkkD2TQCW9Orkq3n02WLpPgg3BKS2v2Ejex74lmNt8USCnKGM
kjrAlxyLWCKHQnwWmO4C3oez6uiZ8McB5Caf7MX1jhIuMAv+vmTcjHVEf1aC+NhK
SDVkkTuvm1guTTvZES0fmwWxwfCrNEIllRa7SaCAZJrdqRFgZ0yGikYSVVA9AsNW
0j3ZefhK/qQVak/Ev8kaodgE+1C064iBUdLDm9FGgR2w7qr+FNsDbn4QktHh6DJB
t7k3b3LJrExGjFhq5Y12n/Lwu14DO5nXf0z7xR6LEWWLcACxhvHDksGsfISFKGZH
4l+pw+7mymBavg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:35 2025 by rpki-client