Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: k683hseRkd2ssz27DTnjr+HfOp1609pi0iim2kQAVCk=
Subject key identifier: CF:64:B0:6D:1E:0E:BC:7E:4C:2F:1E:C7:DA:AA:D4:BF:39:C1:F9:31
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 0194BC04A93F8F756A908F96A9470DCE69B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 018A
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: x3xHK6fXnZKTRlNaByY44ZwOfkkvN1/57+2GHNdjMOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a9:3f:8f:75:6a:90:8f:96:a9:47:0d:ce:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=cf64b06d1e0ebc7e4c2f1ec7daaad4bf39c1f931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:9a:6d:ab:c4:fb:5c:5f:09:38:79:89:59:
fe:c7:36:60:7f:9f:01:39:08:65:1b:3b:68:5c:69:
20:5c:3d:e8:0f:8d:c0:13:b1:82:10:c4:35:3a:9a:
b6:cc:6c:95:da:74:a2:d1:36:83:b3:d8:f3:d4:43:
de:66:95:5f:3a:02:2a:c1:ab:f6:f3:d7:37:8f:41:
ae:f1:4d:11:f0:ba:46:c7:98:29:3d:87:10:ab:cf:
5e:04:8f:b9:5e:e8:38:07:52:38:72:80:a2:47:86:
de:e1:00:07:4c:6e:ac:4f:b9:9a:03:f4:8d:e5:23:
e5:dd:2f:87:73:6d:5a:49:16:aa:67:7b:87:36:93:
3f:ad:24:a1:5b:38:1a:02:57:7f:97:ca:cd:f0:b9:
0c:bc:ea:8e:d0:0e:c1:60:99:23:da:5c:b7:4e:0e:
ad:5c:71:6c:de:62:bd:24:51:ce:dd:2a:84:b7:9d:
6b:9d:f2:89:49:c3:fe:5f:51:6b:9f:73:32:27:42:
98:31:0c:1a:f3:36:f2:a5:b7:67:ed:b2:62:ee:43:
e1:d8:f6:15:27:2c:4e:a2:c9:3b:dd:67:73:9a:b3:
57:28:06:5a:58:9e:02:69:ea:a0:4e:ca:21:b5:5a:
18:1d:64:30:78:23:94:f2:c2:b3:a7:36:33:7b:c6:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:B0:6D:1E:0E:BC:7E:4C:2F:1E:C7:DA:AA:D4:BF:39:C1:F9:31
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:bf:96:12:b4:72:d0:87:82:a2:dc:eb:7a:a3:be:44:6d:
dd:30:7c:b0:20:d1:ee:4f:d4:59:6f:c0:ce:b9:9d:97:22:41:
a4:cf:7d:aa:ac:17:f4:d0:a8:76:fb:36:2d:6f:c0:1b:bd:dc:
30:a3:1d:f4:33:cc:9b:4d:ed:0b:f1:de:08:0f:ae:d2:5d:6a:
e0:82:fa:a4:ae:77:14:ea:33:8d:d8:73:b5:2d:20:33:a6:79:
0a:de:b5:3f:e4:d2:42:aa:ed:a5:67:2d:02:2b:2c:43:19:5c:
13:ba:25:66:23:65:63:16:8a:ab:8b:0a:df:68:58:ad:56:32:
ad:a4:43:3d:4f:7a:48:77:74:51:ae:65:d3:61:81:62:b3:af:
e6:d0:b3:8e:76:3d:89:03:e1:5a:e3:bd:2b:55:3f:23:a6:9c:
58:11:8d:50:a2:41:81:79:78:98:92:da:8b:60:27:78:09:0e:
39:25:2d:50:fb:6e:55:62:69:2f:6f:13:66:1b:1d:41:0a:b7:
43:05:c4:65:17:27:31:a3:e3:6d:f1:4a:a8:ab:d4:69:57:40:
da:5a:c1:4b:28:37:41:2d:e2:8b:14:b0:25:86:17:73:03:8c:
0f:f7:63:0b:a2:8b:fd:2e:f6:01:b4:b3:6c:e7:3f:45:f5:83:
24:f6:c1:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKk/j3VqkI+WqUcNzmm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOGQ4NTQ3MzQyZTJmYzllY2ZhZGZjZWYwMGNmMjczZWY5
ZDZlOTAwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
EyhjZjY0YjA2ZDFlMGViYzdlNGMyZjFlYzdkYWFhZDRiZjM5YzFmOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAaabavE+1xfCTh5iVn+xzZgf58B
OQhlGztoXGkgXD3oD43AE7GCEMQ1Opq2zGyV2nSi0TaDs9jz1EPeZpVfOgIqwav2
89c3j0Gu8U0R8LpGx5gpPYcQq89eBI+5Xug4B1I4coCiR4be4QAHTG6sT7maA/SN
5SPl3S+Hc21aSRaqZ3uHNpM/rSShWzgaAld/l8rN8LkMvOqO0A7BYJkj2ly3Tg6t
XHFs3mK9JFHO3SqEt51rnfKJScP+X1Frn3MyJ0KYMQwa8zbypbdn7bJi7kPh2PYV
JyxOosk73WdzmrNXKAZaWJ4CaeqgTsohtVoYHWQweCOU8sKzpzYze8ZQWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9ksG0eDrx+TC8ex9qq1L85wfkxMB8GA1UdIwQY
MBaAFL+NhUc0Li/J7PrfzvAM8nPvnW6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQt
MWU3MTkzMGZjYzBmLzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQtMWU3MTkzMGZjYzBm
LzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp6/lhK0
ctCHgqLc63qjvkRt3TB8sCDR7k/UWW/AzrmdlyJBpM99qqwX9NCodvs2LW/AG73c
MKMd9DPMm03tC/HeCA+u0l1q4IL6pK53FOozjdhztS0gM6Z5Ct61P+TSQqrtpWct
AissQxlcE7olZiNlYxaKq4sK32hYrVYyraRDPU96SHd0Ua5l02GBYrOv5tCzjnY9
iQPhWuO9K1U/I6acWBGNUKJBgXl4mJLai2AneAkOOSUtUPtuVWJpL28TZhsdQQq3
QwXEZRcnMaPjbfFKqKvUaVdA2lrBSyg3QS3iixSwJYYXcwOMD/djC6KL/S72AbSz
bOc/RfWDJPbBQw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client