Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: kLE433e7IDFF36nGTl+R3tuiFCtD77juFf4EKuxGFf0=
Subject key identifier: 86:B5:A9:16:1F:52:FF:CC:CD:D5:71:F8:08:B4:D1:D9:21:90:65:17
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 0194BCE0676C329E6A125F38D7FC26880627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 084A
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: QVdIE6OJ7YJQ5jSGHBG1/VVKH1dPtwU4RiWGbWqXVCI=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:6c:32:9e:6a:12:5f:38:d7:fc:26:88:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=86b5a9161f52ffcccdd571f808b4d1d921906517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:e2:47:40:fc:78:10:dd:22:4e:bf:c5:af:
f2:76:9d:0c:d6:3e:17:6f:17:bd:a4:ee:90:b3:79:
21:c6:b9:f5:e2:1c:9a:06:f1:3f:7e:15:20:79:39:
20:b7:c9:03:c7:5f:7f:39:ba:db:67:02:69:ac:01:
f4:41:52:b7:2d:b2:b5:1d:8d:c6:39:a5:e6:c5:fb:
75:ad:e2:43:d7:46:ad:4b:18:e0:f2:84:cc:c5:4d:
36:b4:68:d3:f1:af:15:5c:5f:37:c0:91:ab:58:9b:
e3:32:e2:45:91:21:df:6a:cf:44:bc:8c:87:0c:55:
db:5d:a7:eb:9e:e3:5f:51:99:7b:71:e8:8e:1a:36:
41:62:c2:32:0f:cc:2f:a0:3d:59:31:7d:02:67:46:
9c:95:56:e4:53:af:5a:26:7b:83:a6:b4:6a:b5:b9:
5a:3a:81:4a:53:38:a8:66:51:d6:5e:ee:9a:7a:86:
f8:84:7e:c2:56:f6:cd:b0:9b:82:e8:b0:e5:e4:ab:
14:25:d4:81:98:b1:d0:03:6b:f9:c1:b8:30:b0:d3:
88:78:39:a6:8f:4c:59:c8:d9:d6:5f:c7:87:f8:de:
37:4a:15:3e:45:3b:18:f7:66:ff:b6:2c:64:0e:20:
6d:a0:1a:7d:2f:fd:9b:e3:74:ae:c4:a3:19:36:29:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:A9:16:1F:52:FF:CC:CD:D5:71:F8:08:B4:D1:D9:21:90:65:17
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:66:57:6d:0a:90:e5:72:cf:66:77:16:cd:17:37:19:2b:77:
74:f2:15:32:19:55:2e:4f:a6:9e:b1:ea:33:d6:69:6c:f3:91:
28:19:b5:ef:cc:ad:11:8d:7f:43:49:04:ae:ed:e8:b2:0b:81:
af:34:59:bf:2c:51:50:ad:03:ac:42:bf:10:cc:15:d4:f2:62:
24:7d:e4:e5:a4:db:fe:7b:73:35:75:b6:79:6d:2c:b9:64:50:
05:6c:2c:3e:fa:ef:55:f7:83:d7:66:6c:a4:fc:2c:bc:bb:1e:
c6:69:8c:2e:9d:24:87:bd:47:7a:d6:d2:e2:e2:18:34:c4:18:
67:03:68:4c:ac:9f:cf:2e:00:0e:da:97:10:a3:77:5b:3c:b6:
b1:bd:3c:d2:3c:6a:27:fe:e0:f5:35:17:40:12:a1:f5:b6:d8:
2a:89:df:34:76:b3:ad:e1:7b:db:8d:53:c4:e9:4b:d3:65:f1:
ca:30:d2:63:02:7b:0d:6a:c6:32:9a:92:1c:b8:d7:0e:a8:95:
69:9b:e5:b7:3e:dc:9b:4a:94:46:89:12:7b:8b:a6:f7:87:6c:
45:87:21:39:e7:d2:78:d5:c6:d1:c3:ac:52:dc:28:11:3d:4d:
8a:a3:8f:fe:2f:4a:74:90:61:2a:45:ca:07:64:e6:bc:ba:4f:
21:b9:99:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GdsMp5qEl841/wmiAYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzhiNTQwODMxYzljZDVkZjQ4MDg1MWE3MjgwNjY3ZWQ3
Y2Q2NDcwHhcNMjUwMTMxMTUwMDEwWhcNMjUwMjAxMTUwMDEwWjAzMTEwLwYDVQQD
Eyg4NmI1YTkxNjFmNTJmZmNjY2RkNTcxZjgwOGI0ZDFkOTIxOTA2NTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/7iR0D8eBDdIk6/xa/ydp0M1j4X
bxe9pO6Qs3khxrn14hyaBvE/fhUgeTkgt8kDx19/ObrbZwJprAH0QVK3LbK1HY3G
OaXmxft1reJD10atSxjg8oTMxU02tGjT8a8VXF83wJGrWJvjMuJFkSHfas9EvIyH
DFXbXafrnuNfUZl7ceiOGjZBYsIyD8wvoD1ZMX0CZ0aclVbkU69aJnuDprRqtbla
OoFKUzioZlHWXu6aeob4hH7CVvbNsJuC6LDl5KsUJdSBmLHQA2v5wbgwsNOIeDmm
j0xZyNnWX8eH+N43ShU+RTsY92b/tixkDiBtoBp9L/2b43SuxKMZNimn1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa1qRYfUv/MzdVx+Ai00dkhkGUXMB8GA1UdIwQY
MBaAFG04tUCDHJzV30gIUacoBmftfNZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAt
MzYzMDU0M2I1MjFiLzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mNzMwOGEtNDEwOC00YWNjLWI2MDAtMzYzMDU0M2I1MjFi
LzEvYlRpMVFJTWNuTlhmU0FoUnB5Z0daLTE4MWtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmZXbQqQ
5XLPZncWzRc3GSt3dPIVMhlVLk+mnrHqM9ZpbPORKBm178ytEY1/Q0kEru3osguB
rzRZvyxRUK0DrEK/EMwV1PJiJH3k5aTb/ntzNXW2eW0suWRQBWwsPvrvVfeD12Zs
pPwsvLsexmmMLp0kh71HetbS4uIYNMQYZwNoTKyfzy4ADtqXEKN3Wzy2sb080jxq
J/7g9TUXQBKh9bbYKonfNHazreF7241TxOlL02XxyjDSYwJ7DWrGMpqSHLjXDqiV
aZvltz7cm0qURokSe4um94dsRYchOefSeNXG0cOsUtwoET1NiqOP/i9KdJBhKkXK
B2TmvLpPIbmZQg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:24 2025 by rpki-client