Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: +nR8spTf7BnOFYqqO1eE668j5jF598FReSlg6lSEB44=
Subject key identifier: BE:42:C6:E6:6C:C4:DF:1A:6D:39:57:5A:10:F4:9C:14:1F:3E:35:06
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0194BCAA3F52A39C5DCAE65009306CCECD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: JlYkUPFTp9BHbEzi6T/zx7RE3U1LaDyqHsJBtTM/C8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:52:a3:9c:5d:ca:e6:50:09:30:6c:ce:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=be42c6e66cc4df1a6d39575a10f49c141f3e3506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:ec:cd:b6:06:5e:a6:58:50:4c:ef:40:b3:
8a:8c:fb:2d:c4:a5:63:26:4c:4b:5d:e1:8a:f1:28:
3e:b8:6e:2e:dc:c1:06:f6:d6:5d:14:a9:14:a8:f3:
1e:03:fb:3b:5f:06:bb:47:dc:fe:db:d4:e3:6e:30:
a0:8b:c0:f6:a7:a2:7d:d8:7d:a5:19:95:7e:f2:b4:
ca:3c:43:12:ae:13:e3:92:3d:3d:9b:08:24:6b:91:
3b:25:4c:9c:54:9a:40:94:f8:ee:a9:b6:94:96:b1:
99:dd:f3:2b:ef:37:24:8f:9c:bf:da:35:1c:ad:b6:
2c:c6:72:0b:9e:a5:3c:2e:b4:77:69:00:bd:37:f8:
22:9b:d3:9a:9e:e3:fe:d4:8c:3f:d0:14:78:78:14:
3d:a8:9f:93:cc:06:30:f8:d3:06:85:ae:e1:5b:5a:
ce:76:6f:85:5d:3d:18:2e:a2:20:66:a5:d1:2d:c8:
af:d2:e4:09:23:bd:e2:39:45:ef:a5:bc:ef:4f:a0:
74:ae:56:9e:5f:8a:56:d6:11:e4:eb:63:75:bf:c6:
27:69:c8:e1:15:ba:0f:a5:e5:f3:ed:70:7f:ec:e5:
d3:6a:75:d3:c1:0e:80:96:fa:5a:b7:eb:ff:95:6b:
88:a1:df:e8:55:51:80:30:e8:f6:fb:4c:34:85:dd:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:C6:E6:6C:C4:DF:1A:6D:39:57:5A:10:F4:9C:14:1F:3E:35:06
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:9f:51:35:70:37:16:d2:1c:a4:07:f6:96:f6:96:ba:52:
f2:9b:ea:ba:c3:f2:32:70:f5:2c:7e:78:1c:e3:37:3b:ae:ee:
e2:d0:3f:e1:ab:ce:5b:7f:cb:fe:61:10:4f:fd:be:52:e2:04:
e1:43:2d:79:b2:bd:12:0f:0f:44:9c:78:35:47:6f:8f:61:32:
93:f4:e2:45:dc:7b:5e:4b:e1:84:14:02:81:16:39:db:73:67:
99:60:ca:61:1d:73:d1:6a:d5:30:ef:ef:5f:54:a2:a2:69:17:
99:19:ba:bb:9b:9c:30:d6:45:8c:a6:02:cd:dd:96:0b:16:8c:
39:3b:e8:ba:27:e7:74:8e:3a:69:d8:f2:79:2e:5b:5f:65:da:
ff:bd:71:fd:c6:d3:ae:a5:66:d6:0d:0e:78:7d:f4:00:80:18:
83:86:2f:0d:da:35:57:e3:3c:0e:fa:83:6d:61:e0:a9:3a:3a:
4e:22:d2:4a:75:8d:9d:4b:68:2c:e5:8d:43:9f:8e:35:fc:46:
6b:f9:b8:9d:c0:86:75:31:98:ef:42:51:dc:d1:14:7a:32:a5:
75:ce:6b:95:1e:eb:6f:c0:0d:f3:10:73:c7:14:15:14:3c:9f:
35:90:2c:4a:e4:44:c4:f6:14:fa:45:18:7f:55:a5:57:15:44:
32:af:96:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj9So5xdyuZQCTBszs1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk
ODhmZTMwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
EyhiZTQyYzZlNjZjYzRkZjFhNmQzOTU3NWExMGY0OWMxNDFmM2UzNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttXszbYGXqZYUEzvQLOKjPstxKVj
JkxLXeGK8Sg+uG4u3MEG9tZdFKkUqPMeA/s7Xwa7R9z+29TjbjCgi8D2p6J92H2l
GZV+8rTKPEMSrhPjkj09mwgka5E7JUycVJpAlPjuqbaUlrGZ3fMr7zckj5y/2jUc
rbYsxnILnqU8LrR3aQC9N/gim9OanuP+1Iw/0BR4eBQ9qJ+TzAYw+NMGha7hW1rO
dm+FXT0YLqIgZqXRLciv0uQJI73iOUXvpbzvT6B0rlaeX4pW1hHk62N1v8Ynacjh
FboPpeXz7XB/7OXTanXTwQ6Alvpat+v/lWuIod/oVVGAMOj2+0w0hd0PKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5CxuZsxN8abTlXWhD0nBQfPjUGMB8GA1UdIwQY
MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt
NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj
LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR+fUTVw
NxbSHKQH9pb2lrpS8pvqusPyMnD1LH54HOM3O67u4tA/4avOW3/L/mEQT/2+UuIE
4UMtebK9Eg8PRJx4NUdvj2Eyk/TiRdx7XkvhhBQCgRY523NnmWDKYR1z0WrVMO/v
X1SiomkXmRm6u5ucMNZFjKYCzd2WCxaMOTvouifndI46adjyeS5bX2Xa/71x/cbT
rqVm1g0OeH30AIAYg4YvDdo1V+M8DvqDbWHgqTo6TiLSSnWNnUtoLOWNQ5+ONfxG
a/m4ncCGdTGY70JR3NEUejKldc5rlR7rb8AN8xBzxxQVFDyfNZAsSuRExPYU+kUY
f1WlVxVEMq+WsA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client