Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: LYt14ED6Jau21hkUW2nKe4M7YKKI0v/ocI0jo+VrmYU=
Subject key identifier: D5:9C:E9:A7:E4:2C:20:94:76:6E:B5:A6:69:AB:4E:89:36:FD:14:4E
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 0194BC04C629B048C1ED728CBDC4659591E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: Vmf8hbehOyRVCLCUoT2OPJSNkvvcpgWg3681D0nVn/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:29:b0:48:c1:ed:72:8c:bd:c4:65:95:91:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=d59ce9a7e42c2094766eb5a669ab4e8936fd144e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:67:22:18:d0:ab:66:02:2d:da:06:c1:fb:
6b:e7:4a:f7:8d:d6:36:c4:0a:99:d3:88:10:54:46:
43:35:15:78:c6:51:b2:ec:ab:25:c6:1d:73:9e:0a:
2f:b1:60:4a:84:bf:20:a0:f5:18:0e:99:17:cf:74:
3c:44:32:57:38:c9:94:e2:33:9b:7e:e2:b0:42:39:
bb:63:b6:ae:b4:14:fc:2d:ae:a3:3f:4f:7c:7d:42:
40:22:08:7f:0b:bf:ee:d7:5e:79:a7:44:f3:8e:7a:
ff:01:84:a6:ec:1e:c1:b7:be:15:16:13:f2:14:e9:
45:0d:d5:c8:3d:82:3a:07:7d:21:38:43:39:ce:a7:
66:91:4a:1a:ab:24:85:7e:6e:36:79:36:8d:f5:b6:
91:0a:3c:7f:d1:89:60:f3:8f:1c:db:82:ac:92:d8:
52:a5:59:80:98:95:47:c2:42:94:9b:fe:09:08:30:
02:77:17:77:40:0e:9d:18:92:38:79:5c:d4:39:ee:
9e:c3:ad:ba:7a:9b:2f:8c:af:bc:d3:65:2a:56:cc:
0e:45:0a:b9:6a:36:52:92:ff:ef:65:53:e9:75:25:
8e:56:f3:c3:32:1c:cb:f7:e3:c8:8d:7e:0e:78:2c:
7a:c4:a4:71:02:6e:3b:da:56:31:56:d6:1d:e4:47:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:E9:A7:E4:2C:20:94:76:6E:B5:A6:69:AB:4E:89:36:FD:14:4E
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:24:0e:25:d6:a9:0a:cf:74:3d:80:da:40:62:3a:8c:3a:
f4:b3:71:d8:0d:da:d9:33:0a:93:aa:71:9d:6d:ce:d2:87:85:
f8:0f:10:1a:38:43:11:ef:65:c9:a2:91:05:19:6a:74:80:98:
38:ec:dc:6c:b0:0d:db:24:3f:60:61:da:d4:71:31:9d:c2:02:
d2:60:cf:43:2d:0c:b6:e9:4e:47:3a:ea:3a:1c:70:2d:4b:f4:
08:f7:5f:11:46:ee:f5:ae:0d:6c:f1:e9:7e:b8:bf:eb:4b:71:
cd:77:23:48:c8:2b:60:06:9e:70:9a:f7:af:81:74:85:3f:3a:
74:cc:65:e9:fb:55:68:49:c9:66:33:36:53:d0:ad:8f:17:a2:
27:76:eb:5a:0d:60:96:db:ae:68:4b:c4:e2:8b:0e:0d:b0:33:
a6:28:d4:9e:ac:39:ce:11:b6:27:b6:f6:b6:03:95:80:59:43:
8f:1a:3b:33:b6:65:53:34:75:e6:b1:a4:c3:9e:aa:7b:03:6e:
1e:77:d7:6b:3e:0e:0a:7c:bf:ed:f8:05:3c:39:28:f9:a1:0e:
32:09:22:ce:48:57:b0:b3:2b:c9:2f:1a:1a:df:0f:4e:00:f2:
2a:86:4d:6d:c0:58:c4:8f:57:4d:9d:4a:13:e3:23:d8:b9:76:
fd:1b:5d:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMYpsEjB7XKMvcRllZHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNjZkNWNiMmY5Y2FkM2Y0ODQzZjcxNGE0ZGM2MmQ3MjEz
ZGViZTgwHhcNMjUwMTMxMTEwMDE2WhcNMjUwMjAxMTEwMDE2WjAzMTEwLwYDVQQD
EyhkNTljZTlhN2U0MmMyMDk0NzY2ZWI1YTY2OWFiNGU4OTM2ZmQxNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JlnIhjQq2YCLdoGwftr50r3jdY2
xAqZ04gQVEZDNRV4xlGy7Kslxh1zngovsWBKhL8goPUYDpkXz3Q8RDJXOMmU4jOb
fuKwQjm7Y7autBT8La6jP098fUJAIgh/C7/u1155p0Tzjnr/AYSm7B7Bt74VFhPy
FOlFDdXIPYI6B30hOEM5zqdmkUoaqySFfm42eTaN9baRCjx/0Ylg848c24KskthS
pVmAmJVHwkKUm/4JCDACdxd3QA6dGJI4eVzUOe6ew626epsvjK+802UqVswORQq5
ajZSkv/vZVPpdSWOVvPDMhzL9+PIjX4OeCx6xKRxAm472lYxVtYd5EcbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWc6afkLCCUdm61pmmrTok2/RROMB8GA1UdIwQY
MBaAFGxm1csvnK0/SEP3FKTcYtchPevoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEt
NmNmMTMxYzFjYWFjLzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lZGVjYjctYmQ1OS00ZWJlLWIyMDEtNmNmMTMxYzFjYWFj
LzEvYkdiVnl5LWNyVDlJUV9jVXBOeGkxeUU5Ni1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKUkDiXW
qQrPdD2A2kBiOow69LNx2A3a2TMKk6pxnW3O0oeF+A8QGjhDEe9lyaKRBRlqdICY
OOzcbLAN2yQ/YGHa1HExncIC0mDPQy0MtulORzrqOhxwLUv0CPdfEUbu9a4NbPHp
fri/60txzXcjSMgrYAaecJr3r4F0hT86dMxl6ftVaEnJZjM2U9CtjxeiJ3brWg1g
ltuuaEvE4osODbAzpijUnqw5zhG2J7b2tgOVgFlDjxo7M7ZlUzR15rGkw56qewNu
HnfXaz4OCny/7fgFPDko+aEOMgkizkhXsLMryS8aGt8PTgDyKoZNbcBYxI9XTZ1K
E+Mj2Ll2/RtdJw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:26 2025 by rpki-client