Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: D2sWcyBMaDTlRYKT7jO9iDvZtosH0bP5konanjsdJSQ=
Subject key identifier: 6B:C0:87:C2:4F:26:5A:E8:26:C1:F2:2E:8A:AD:83:5F:66:CD:FE:9A
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 0194BBCEEEA7DE22E292A5AD6757EE5955A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0944
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 8F98rTSwPOpZS4Rzfg71Kw6oATI.roa (hash: QtxPboJkw4rOLdUx7QH5EP5ZvFcFd0VJLxIZUYnjoyU=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: OhxLf0uM0aGX/YrFrDIUSFNDxsyoehseYVK1SfiY3uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:a7:de:22:e2:92:a5:ad:67:57:ee:59:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=6bc087c24f265ae826c1f22e8aad835f66cdfe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:dd:1a:39:ca:84:bd:33:65:58:67:3a:9d:
ac:0a:0d:e1:0f:25:1a:59:90:06:c3:4a:a5:25:c3:
53:47:60:fb:9a:25:f1:33:99:ed:b7:6a:aa:58:13:
95:9d:e5:77:38:20:04:02:95:d1:70:e1:a9:cb:df:
45:a9:c9:81:ab:03:b8:70:e6:64:d2:0a:d1:f3:55:
66:47:21:f0:bf:d3:f4:fc:e0:22:5f:17:65:9b:71:
05:c5:e4:96:b3:db:09:3c:1d:aa:9d:e0:d6:7f:a9:
85:4a:38:6b:f4:27:ec:23:85:0c:05:e8:38:56:07:
c6:cb:91:4b:44:c1:70:c6:e5:80:d8:cc:f3:8b:8d:
6e:d6:b3:14:af:0a:b8:10:25:f8:7f:06:ac:07:7a:
12:a2:fb:60:69:3e:98:ea:3a:53:c4:e4:65:cc:c2:
cb:bc:0d:7b:d1:ef:b8:a5:e0:a2:7b:0b:ca:59:fb:
15:1b:03:5f:1f:7c:83:b9:aa:02:20:84:11:45:3a:
44:5d:4f:8b:cc:4d:15:f2:df:8d:f5:43:60:f3:c9:
38:af:f5:73:e5:2f:c6:74:c5:c6:82:98:26:e8:e2:
2a:2e:bf:d5:27:26:98:f9:a1:52:3e:90:db:e6:b4:
b6:fc:8d:cb:e1:cf:57:9a:81:a6:14:fb:bb:6b:c0:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:87:C2:4F:26:5A:E8:26:C1:F2:2E:8A:AD:83:5F:66:CD:FE:9A
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3d:eb:63:ca:e0:65:84:6b:dc:27:2d:d3:fc:7d:a8:f6:06:
f5:dc:c4:42:41:61:8d:04:9c:33:76:b7:79:74:e9:0f:9d:c3:
d0:96:f6:97:31:85:0d:59:d8:e3:e9:b5:4a:9a:65:cc:8d:31:
9f:34:49:11:0d:29:ff:b9:dd:2b:a4:4a:a4:01:72:21:1f:12:
26:79:35:2b:83:c3:1c:19:d6:b6:89:08:6a:1e:81:e6:a0:bc:
e8:da:43:f0:0b:79:03:f0:ae:c4:99:7a:97:25:30:9d:15:9f:
1c:3a:5f:e9:45:5f:41:81:50:f0:ec:de:41:f3:f3:66:97:1c:
b3:2f:96:e1:9d:53:93:e5:30:f7:5e:e5:ec:89:6b:d5:2b:b9:
69:87:af:15:71:b1:7f:9f:8b:e2:f9:67:dd:f9:e1:88:50:59:
33:d8:c1:05:2b:eb:98:6a:46:83:14:58:a6:ee:fd:10:99:1d:
13:4f:1b:76:46:4e:f5:90:09:7b:bf:2a:8c:35:72:de:7c:86:
c1:88:a6:9d:3e:96:9e:07:04:b7:bf:c5:75:e2:07:77:da:fc:
6d:ea:5d:09:b0:5a:30:40:a2:41:db:01:51:29:53:f3:04:61:
23:ad:a2:88:90:31:63:4b:22:83:8d:ec:b3:ac:01:08:4b:a2:
81:53:a3:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zu6n3iLikqWtZ1fuWVWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4
ZDVjYTUwHhcNMjUwMTMxMTAwMTI4WhcNMjUwMjAxMTAwMTI4WjAzMTEwLwYDVQQD
Eyg2YmMwODdjMjRmMjY1YWU4MjZjMWYyMmU4YWFkODM1ZjY2Y2RmZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsfdGjnKhL0zZVhnOp2sCg3hDyUa
WZAGw0qlJcNTR2D7miXxM5ntt2qqWBOVneV3OCAEApXRcOGpy99FqcmBqwO4cOZk
0grR81VmRyHwv9P0/OAiXxdlm3EFxeSWs9sJPB2qneDWf6mFSjhr9CfsI4UMBeg4
VgfGy5FLRMFwxuWA2Mzzi41u1rMUrwq4ECX4fwasB3oSovtgaT6Y6jpTxORlzMLL
vA170e+4peCiewvKWfsVGwNfH3yDuaoCIIQRRTpEXU+LzE0V8t+N9UNg88k4r/Vz
5S/GdMXGgpgm6OIqLr/VJyaY+aFSPpDb5rS2/I3L4c9XmoGmFPu7a8CEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvAh8JPJlroJsHyLoqtg19mzf6aMB8GA1UdIwQY
MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt
YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2
LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD3rY8rg
ZYRr3Cct0/x9qPYG9dzEQkFhjQScM3a3eXTpD53D0Jb2lzGFDVnY4+m1SpplzI0x
nzRJEQ0p/7ndK6RKpAFyIR8SJnk1K4PDHBnWtokIah6B5qC86NpD8At5A/CuxJl6
lyUwnRWfHDpf6UVfQYFQ8OzeQfPzZpccsy+W4Z1Tk+Uw917l7Ilr1Su5aYevFXGx
f5+L4vln3fnhiFBZM9jBBSvrmGpGgxRYpu79EJkdE08bdkZO9ZAJe78qjDVy3nyG
wYimnT6WngcEt7/FdeIHd9r8bepdCbBaMECiQdsBUSlT8wRhI62iiJAxY0sig43s
s6wBCEuigVOjtw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:20 2025 by rpki-client