Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File: B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier: zB5Bj+7Jm4fIIpM6YQkOXDtCAutaQJnDGqfHCGxOkQM=
Subject key identifier: DD:62:C0:B2:DA:FA:AE:3A:86:68:DC:47:8A:9A:6D:7F:0C:23:08:EC
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 0194BC3C6600183C56FDAB75F9D5ACA9B618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: ODKKascS6d77RicvtYN0bm4AusA8deDI0w7F2SQOknw=)
3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:00:18:3c:56:fd:ab:75:f9:d5:ac:a9:b6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=dd62c0b2dafaae3a8668dc478a9a6d7f0c2308ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:ca:b3:88:14:c2:1e:2e:f2:d5:99:77:62:
ce:ad:ce:78:bb:5e:13:d7:56:ff:1c:71:2d:3f:b0:
9b:8d:f7:05:0d:bb:71:3e:d1:e4:7a:82:37:43:3b:
98:c1:2d:92:c3:8c:01:14:1d:3c:33:fa:4d:28:09:
33:ce:dc:6e:9f:9b:19:11:3a:5b:f2:0b:50:97:ba:
6c:5b:1d:a5:aa:4d:a4:53:0e:9d:fb:87:18:bb:52:
a1:33:ca:bc:f3:f9:c7:ba:04:65:f9:1b:6a:bd:e7:
a7:5c:54:e9:0f:58:97:ce:21:24:17:bf:a9:de:c7:
e4:73:e6:a5:7d:37:21:e0:6e:72:b2:86:1e:b0:f6:
e2:52:d5:10:2b:4d:92:f4:a4:74:c4:e8:04:bd:d6:
85:4e:2f:7b:d2:61:29:f6:82:2c:28:f1:0d:d4:9a:
15:3d:c8:95:8b:85:8e:83:c8:2e:9e:46:a5:b3:05:
58:ba:54:f6:26:e9:3f:b9:2f:ad:ce:ed:e4:20:ab:
65:cb:c6:cf:52:3d:5f:72:ee:aa:c4:80:bb:8e:a3:
8a:ac:a1:a5:a3:00:60:a2:b1:8c:d7:ae:f6:2a:c9:
31:ae:07:07:55:1d:54:61:54:d9:39:f4:f6:9c:16:
35:2a:ca:4b:c7:9a:cd:66:66:e6:e0:8e:b7:c2:c0:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:C0:B2:DA:FA:AE:3A:86:68:DC:47:8A:9A:6D:7F:0C:23:08:EC
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:78:b0:6e:6f:ed:76:c9:23:7c:3c:10:4c:e4:31:99:8a:99:
e2:03:64:7f:87:aa:23:ed:20:95:b7:41:f3:01:0e:95:c4:0a:
43:d9:99:df:fc:17:3b:f1:9a:5c:60:fd:ad:e1:b2:c3:ad:2f:
99:46:93:93:a3:5a:ec:77:15:9d:98:b4:c6:81:c9:41:9c:56:
69:5e:3c:ab:52:d0:d3:e9:66:65:59:ee:3e:72:93:95:14:de:
06:d7:c0:90:29:68:ed:35:4e:b7:d4:7e:d8:99:ac:77:1c:41:
f5:f8:11:60:25:04:79:1c:79:27:c6:aa:ba:8f:08:8c:80:6c:
c7:7d:39:9f:bb:0a:45:11:76:c9:70:3a:0e:8f:41:ae:48:6e:
c8:f7:ca:9a:9f:24:3f:99:f9:80:c2:ba:71:86:5b:27:c9:d2:
5b:04:b5:a1:f0:af:75:ee:d3:b8:7c:9d:e7:7c:79:70:0d:36:
f4:94:4e:31:ed:47:07:92:9c:ed:10:b0:f1:a3:2e:1b:1a:b1:
ae:e8:2b:25:e4:14:93:39:7f:ee:94:02:0f:36:31:3a:40:e3:
5d:6f:5e:99:89:b2:87:64:fd:dc:e7:79:ed:02:db:b6:56:9b:
4a:11:1a:8f:f8:3b:9e:07:89:e4:3d:fd:1d:3e:16:94:6f:0b:
aa:d4:96:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGYAGDxW/at1+dWsqbYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk
NzQ0MDEwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
EyhkZDYyYzBiMmRhZmFhZTNhODY2OGRjNDc4YTlhNmQ3ZjBjMjMwOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQLKs4gUwh4u8tWZd2LOrc54u14T
11b/HHEtP7CbjfcFDbtxPtHkeoI3QzuYwS2Sw4wBFB08M/pNKAkzztxun5sZETpb
8gtQl7psWx2lqk2kUw6d+4cYu1KhM8q88/nHugRl+RtqveenXFTpD1iXziEkF7+p
3sfkc+alfTch4G5ysoYesPbiUtUQK02S9KR0xOgEvdaFTi970mEp9oIsKPEN1JoV
PciVi4WOg8gunkalswVYulT2Juk/uS+tzu3kIKtly8bPUj1fcu6qxIC7jqOKrKGl
owBgorGM1672KskxrgcHVR1UYVTZOfT2nBY1KspLx5rNZmbm4I63wsBYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1iwLLa+q46hmjcR4qabX8MIwjsMB8GA1UdIwQY
MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt
YWFiYWRkMDcxOWJhLzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh
LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARniwbm/t
dskjfDwQTOQxmYqZ4gNkf4eqI+0glbdB8wEOlcQKQ9mZ3/wXO/GaXGD9reGyw60v
mUaTk6Na7HcVnZi0xoHJQZxWaV48q1LQ0+lmZVnuPnKTlRTeBtfAkClo7TVOt9R+
2JmsdxxB9fgRYCUEeRx5J8aquo8IjIBsx305n7sKRRF2yXA6Do9BrkhuyPfKmp8k
P5n5gMK6cYZbJ8nSWwS1ofCvde7TuHyd53x5cA029JROMe1HB5Kc7RCw8aMuGxqx
rugrJeQUkzl/7pQCDzYxOkDjXW9emYmyh2T93Od57QLbtlabShEaj/g7ngeJ5D39
HT4WlG8LqtSWzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:20 2025 by rpki-client