Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
File: bGuWjFE0NX35wri10EVd0C2jIEk.mft (raw, json)
Hash identifier: 4MAf0iAXgU6IN59+/RurZlpxn0yV/Y5UmSYV0C8hZ1o=
Subject key identifier: 5A:DB:16:6E:3B:EE:08:75:DA:87:FA:55:15:43:3F:0D:7C:94:5A:18
Authority key identifier: 6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
Certificate issuer: /CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Certificate serial: 0194BD1747D8487A445FCF8EC08A8D361017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
Manifest number: 04FE
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: bGuWjFE0NX35wri10EVd0C2jIEk.crl (hash: thfmlExR/ZXdRbrATFD4qn/KjhPMYM0X4YNbb5TEuEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:47:d8:48:7a:44:5f:cf:8e:c0:8a:8d:36:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6b968c5134357df9c2b8b5d0455dd02da32049
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=5adb166e3bee0875da87fa5515433f0d7c945a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:12:c8:06:31:1a:c4:51:54:9e:0a:b5:fa:
13:63:b8:f0:f7:d0:3f:92:bc:e2:0a:09:7d:8b:37:
9b:49:64:e8:42:86:37:7e:0f:3e:74:dd:d2:14:59:
95:7f:f6:af:da:45:c8:1d:0c:fa:03:91:75:7a:dd:
64:b5:96:d5:7d:d5:fc:e3:b3:80:f3:11:36:96:a6:
61:57:66:7e:58:d6:d7:fc:88:90:7b:79:27:4d:d6:
41:8a:97:e6:ca:ce:b3:b1:e4:b8:69:39:74:ed:c7:
54:fd:87:77:dd:09:c4:76:88:d5:a7:3b:73:a8:25:
02:25:40:ea:31:0b:ec:23:a5:65:5e:6e:10:cf:fe:
ca:a9:f3:15:50:4b:9e:a8:27:24:c8:91:40:15:2d:
74:fa:b7:95:97:81:97:5f:5d:0e:58:a3:eb:dd:d6:
59:1d:14:3b:b2:02:2f:0e:66:aa:b9:32:bb:b1:ce:
bd:1a:34:7f:ec:9e:4e:30:06:26:bc:64:50:a6:9e:
e7:00:80:e4:a4:d2:7b:b6:50:87:3d:ab:d6:d6:ca:
a9:c7:fb:1d:6d:24:68:39:9d:09:72:84:8e:2f:b5:
1b:66:f2:80:54:4b:bf:a1:75:22:f8:8e:92:c1:e1:
c0:e8:ca:87:62:a6:72:8e:7d:fa:5c:22:ba:31:77:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DB:16:6E:3B:EE:08:75:DA:87:FA:55:15:43:3F:0D:7C:94:5A:18
X509v3 Authority Key Identifier:
keyid:6C:6B:96:8C:51:34:35:7D:F9:C2:B8:B5:D0:45:5D:D0:2D:A3:20:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGuWjFE0NX35wri10EVd0C2jIEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20f5b0-25e9-4150-82f4-d421044382d1/1/bGuWjFE0NX35wri10EVd0C2jIEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:db:e3:d6:20:90:e2:ac:b7:df:09:ad:63:ae:d8:cd:df:db:
56:4b:0f:dd:04:91:82:20:41:61:3e:99:38:d4:47:ff:0b:7c:
74:21:37:6d:fc:18:58:2f:96:ba:44:3a:f4:2d:62:5b:6e:91:
68:b6:92:bf:2c:f7:86:54:03:a6:45:34:a4:60:7f:9f:3e:1b:
1d:e2:13:be:ef:13:f6:b0:ff:19:33:68:59:fb:b2:13:a1:61:
22:dc:6a:04:b7:21:76:2d:8c:5b:08:f7:45:58:aa:09:a7:57:
29:18:84:d0:a5:d9:4b:45:8c:ff:69:1f:b4:56:86:77:8c:42:
99:ff:f7:4a:93:bb:b6:03:f0:21:d2:8a:77:8f:8a:49:68:80:
3b:0c:99:c3:e7:07:1b:88:6c:46:cd:ff:8f:23:58:df:bd:0f:
ea:70:7e:4b:79:48:47:b1:9f:4f:38:9d:47:58:8b:d2:bb:1b:
a5:0b:5e:f3:a0:fa:18:6f:71:57:7d:e3:ee:d8:8a:d6:63:67:
70:b4:82:ee:94:85:80:d5:95:7e:de:ed:96:cf:69:5d:28:d5:
ad:ad:8a:57:8d:62:6c:61:12:57:9f:15:86:64:14:2d:d5:d4:
49:52:a7:3b:43:a8:95:58:e4:1a:b3:79:80:42:b3:f8:08:6e:
16:21:8e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0fYSHpEX8+OwIqNNhAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNmI5NjhjNTEzNDM1N2RmOWMyYjhiNWQwNDU1ZGQwMmRh
MzIwNDkwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
Eyg1YWRiMTY2ZTNiZWUwODc1ZGE4N2ZhNTUxNTQzM2YwZDdjOTQ1YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsSyAYxGsRRVJ4KtfoTY7jw99A/
krziCgl9izebSWToQoY3fg8+dN3SFFmVf/av2kXIHQz6A5F1et1ktZbVfdX847OA
8xE2lqZhV2Z+WNbX/IiQe3knTdZBipfmys6zseS4aTl07cdU/Yd33QnEdojVpztz
qCUCJUDqMQvsI6VlXm4Qz/7KqfMVUEueqCckyJFAFS10+reVl4GXX10OWKPr3dZZ
HRQ7sgIvDmaquTK7sc69GjR/7J5OMAYmvGRQpp7nAIDkpNJ7tlCHPavW1sqpx/sd
bSRoOZ0JcoSOL7UbZvKAVEu/oXUi+I6SweHA6MqHYqZyjn36XCK6MXekwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrbFm477gh12of6VRVDPw18lFoYMB8GA1UdIwQY
MBaAFGxrloxRNDV9+cK4tdBFXdAtoyBJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkd1V2pGRTBOWDM1d3JpMTBFVmQwQzJqSUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMGY1YjAtMjVlOS00MTUwLTgyZjQt
ZDQyMTA0NDM4MmQxLzEvYkd1V2pGRTBOWDM1d3JpMTBFVmQwQzJqSUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMGY1YjAtMjVlOS00MTUwLTgyZjQtZDQyMTA0NDM4MmQx
LzEvYkd1V2pGRTBOWDM1d3JpMTBFVmQwQzJqSUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttvj1iCQ
4qy33wmtY67Yzd/bVksP3QSRgiBBYT6ZONRH/wt8dCE3bfwYWC+WukQ69C1iW26R
aLaSvyz3hlQDpkU0pGB/nz4bHeITvu8T9rD/GTNoWfuyE6FhItxqBLchdi2MWwj3
RViqCadXKRiE0KXZS0WM/2kftFaGd4xCmf/3SpO7tgPwIdKKd4+KSWiAOwyZw+cH
G4hsRs3/jyNY370P6nB+S3lIR7GfTzidR1iL0rsbpQte86D6GG9xV33j7tiK1mNn
cLSC7pSFgNWVft7tls9pXSjVra2KV41ibGESV58VhmQULdXUSVKnO0OolVjkGrN5
gEKz+AhuFiGOig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:39 2025 by rpki-client