Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
File: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft (raw, json)
Hash identifier: UyBxn3dAms5GtXOGFvw3jcZCxvv27hyC7XK3rfC/8Kg=
Subject key identifier: BC:40:2A:F5:27:C2:CB:E1:B5:36:9F:46:20:AB:EE:71:82:AB:CC:CF
Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Certificate serial: 0194BD854DEC09640F6A3B834F7DAFE1E6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
Manifest number: 01EB
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl (hash: OCvI7ZYxyLImYUUj1WLgZR0IYugfFP68/Qi7u4TVKoE=)
2: fjcBIwD0UXboDtm9hQQuC4nZKFg.roa (hash: a7+yo1MMdqmC3Rdod1c+o5dbpKenkQKnUI7GqCwwDY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4d:ec:09:64:0f:6a:3b:83:4f:7d:af:e1:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=bc402af527c2cbe1b5369f4620abee7182abcccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:5f:a2:cb:b0:6b:2e:32:96:69:1c:df:a1:
42:7f:7b:40:f2:cc:5a:b7:8e:89:68:43:62:77:6a:
cd:fc:b2:d2:ef:43:bb:00:56:76:47:f6:45:52:64:
1e:8d:cf:7e:27:07:82:f5:98:cd:b2:72:37:b0:c0:
98:3a:d5:cc:6f:f9:d3:28:61:dd:83:0e:7d:59:0f:
25:84:a3:21:5a:f0:9e:27:14:e5:a0:31:ab:24:95:
b1:0e:9d:0f:32:51:8a:59:ed:7b:75:1f:de:93:27:
23:36:73:79:10:74:2e:d7:0c:c8:7f:5f:c6:dc:10:
a1:05:58:b3:d5:70:0d:03:d7:e2:36:a5:4d:2c:d0:
f0:48:64:5f:48:31:78:8d:5f:94:4b:74:87:21:19:
86:5e:97:31:97:19:bd:1c:e4:6f:c8:31:3f:b9:91:
73:f3:8d:89:8f:c3:69:82:44:fb:00:08:56:b3:58:
e6:a9:68:f6:85:53:57:7a:32:14:27:e5:15:26:ec:
f6:7b:75:ba:5d:d0:d0:9b:86:5e:2a:c4:f7:d9:fa:
c2:88:e5:9e:1d:e7:49:00:61:70:16:8a:6b:d0:4d:
4b:4a:68:5d:b6:8e:ed:86:b8:db:ed:58:db:4a:94:
9e:cc:84:e5:67:68:04:61:56:e4:fc:86:94:91:d0:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:2A:F5:27:C2:CB:E1:B5:36:9F:46:20:AB:EE:71:82:AB:CC:CF
X509v3 Authority Key Identifier:
keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:e8:dc:6a:34:79:be:7c:33:75:b2:f8:ea:cf:44:46:76:
09:69:fe:b4:1e:68:8d:58:50:51:eb:24:6a:2b:be:92:62:7d:
50:72:d6:90:43:b0:11:00:9f:41:eb:5c:5b:d0:f8:da:f9:ff:
49:64:b4:93:5d:81:3d:6d:33:28:dd:62:66:92:68:f8:8e:e6:
2b:9c:fd:fe:24:63:27:8a:08:aa:83:f1:63:81:4c:da:a5:21:
d1:5d:1e:67:a9:25:36:c8:62:60:ed:dc:10:e4:87:f3:5c:9a:
11:27:c3:4d:f1:5a:8c:a3:ae:66:19:56:7f:e2:c6:85:62:2c:
ea:68:e1:df:e2:90:46:cf:ed:81:d3:db:0d:02:50:4a:30:80:
dc:75:bd:27:dd:5f:f7:ca:d8:b2:89:de:2c:39:e4:a8:cd:3b:
bf:05:ff:41:30:45:ce:d2:a4:21:ea:ae:78:b5:6f:ca:fa:98:
78:96:41:d8:e7:ea:4d:ca:14:19:3d:56:12:79:8f:16:3d:cf:
d4:41:e0:5a:02:dc:4a:11:96:c8:b7:b8:ad:a1:cc:57:e8:5a:
55:49:68:2a:bf:2d:4e:27:ad:d1:b4:0c:f4:bc:17:d5:14:ea:
5e:bf:4a:39:a1:e7:c9:f0:fa:8d:a0:79:5e:b3:2e:09:ba:9a:
08:55:e9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hU3sCWQPajuDT32v4eb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj
MjVhNjYwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EyhiYzQwMmFmNTI3YzJjYmUxYjUzNjlmNDYyMGFiZWU3MTgyYWJjY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvlfosuway4ylmkc36FCf3tA8sxa
t46JaENid2rN/LLS70O7AFZ2R/ZFUmQejc9+JweC9ZjNsnI3sMCYOtXMb/nTKGHd
gw59WQ8lhKMhWvCeJxTloDGrJJWxDp0PMlGKWe17dR/ekycjNnN5EHQu1wzIf1/G
3BChBViz1XANA9fiNqVNLNDwSGRfSDF4jV+US3SHIRmGXpcxlxm9HORvyDE/uZFz
842Jj8NpgkT7AAhWs1jmqWj2hVNXejIUJ+UVJuz2e3W6XdDQm4ZeKsT32frCiOWe
HedJAGFwFopr0E1LSmhdto7thrjb7VjbSpSezITlZ2gEYVbk/IaUkdCRrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxAKvUnwsvhtTafRiCr7nGCq8zPMB8GA1UdIwQY
MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt
NTBkZDNhNTgxNTRiLzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi
LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJLo3Go0
eb58M3Wy+OrPREZ2CWn+tB5ojVhQUeskaiu+kmJ9UHLWkEOwEQCfQetcW9D42vn/
SWS0k12BPW0zKN1iZpJo+I7mK5z9/iRjJ4oIqoPxY4FM2qUh0V0eZ6klNshiYO3c
EOSH81yaESfDTfFajKOuZhlWf+LGhWIs6mjh3+KQRs/tgdPbDQJQSjCA3HW9J91f
98rYsoneLDnkqM07vwX/QTBFztKkIequeLVvyvqYeJZB2OfqTcoUGT1WEnmPFj3P
1EHgWgLcShGWyLe4raHMV+haVUloKr8tTiet0bQM9LwX1RTqXr9KOaHnyfD6jaB5
XrMuCbqaCFXpxA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:58 2025 by rpki-client