Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File: bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier: lCCwPiZQMeWVowvyCaITRqtOlfNjZDWnvhU5DLLiq24=
Subject key identifier: 60:F8:28:22:68:6D:41:18:5A:CC:26:83:64:A6:92:1B:4D:78:A3:61
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 0194BBCE0DEF179D8D63E69B06599C6F05A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (hash: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=)
2: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: W/UHBS7EWaxghBizcID4tCG9cNO76Dra8zfJcDVyayI=)
3: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (hash: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:ef:17:9d:8d:63:e6:9b:06:59:9c:6f:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=60f82822686d41185acc268364a6921b4d78a361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:3d:5a:83:71:fb:c4:bb:4c:0e:af:a2:4e:
78:e9:21:a8:27:87:c7:77:6b:be:66:2a:fb:69:86:
86:8c:cf:6a:10:e5:8e:7a:13:20:da:10:3d:cd:39:
e3:9f:21:bb:13:8b:5c:e4:e8:cc:b3:ec:de:82:75:
f8:37:61:e3:49:bd:39:75:3f:b3:55:63:03:ec:54:
db:c1:99:27:05:95:97:f7:43:65:7d:0e:56:1e:d8:
cd:cb:c6:b3:1c:c1:db:e5:ce:20:fc:e5:fa:e9:7a:
ac:51:c9:07:ea:4b:6b:82:c6:c2:11:ae:25:86:02:
11:f2:a3:41:d6:cc:5b:2d:6a:d8:83:f5:e4:dc:c1:
58:7c:89:c1:5e:e8:0b:f0:d2:d3:8d:c4:c4:67:37:
a6:89:80:ec:41:60:6d:9c:71:d6:74:bc:d2:7c:c4:
d1:e5:b6:df:d2:a9:2d:8e:74:03:0e:2c:de:53:a1:
e7:4a:e7:08:a4:db:c8:f3:37:c2:21:18:1d:b5:88:
7f:1f:b5:61:4d:47:9f:86:35:ab:ce:47:8e:0b:c7:
58:02:13:39:2f:36:1f:c8:5a:0b:62:62:0a:fb:6a:
30:01:6c:cb:87:6d:5d:82:f1:ae:b7:f1:5d:be:bf:
03:f5:fd:ea:5d:80:8c:e6:f1:26:e1:5e:3d:e9:60:
15:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:28:22:68:6D:41:18:5A:CC:26:83:64:A6:92:1B:4D:78:A3:61
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c4:66:8f:2d:5c:c2:ce:8f:0b:79:e8:a8:b0:a2:e1:5f:4e:
02:78:8d:bf:3e:7b:fa:25:1f:e1:46:d1:25:f8:31:21:0f:ee:
77:26:8e:c2:b0:46:d3:d7:07:83:c1:18:11:74:5b:92:a1:16:
92:62:0d:65:36:eb:bb:1b:76:0b:25:d2:22:e8:24:5c:8e:96:
d1:45:87:23:34:74:4a:b7:2e:7d:29:3a:c8:af:30:8f:85:e5:
be:1a:7e:3c:fc:22:c2:76:36:10:87:14:45:6a:72:8c:fc:83:
c7:33:80:cc:57:7f:32:e6:ea:f8:01:1d:de:16:05:a2:30:78:
dd:00:ee:09:dd:c3:4e:e6:fd:a7:a9:e2:14:06:5e:e6:59:83:
2a:da:7a:55:c0:a4:c0:d4:49:95:c0:3f:2d:6f:aa:51:12:ba:
fc:13:9d:0e:44:ec:b8:67:0a:99:f4:f9:35:59:0f:a2:be:14:
67:29:e0:29:74:66:04:65:f5:60:39:8c:be:06:f0:b9:fb:a3:
21:db:1c:cd:41:19:b4:c5:c7:03:af:b8:6e:11:25:d6:a6:11:
48:2f:4f:3a:ed:6d:98:39:90:7a:2f:9e:43:84:a9:fc:74:fa:
01:79:21:16:25:ca:be:ff:f3:7a:6b:63:69:66:7d:12:ff:70:
97:da:f7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg3vF52NY+abBlmcbwWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWRmNDE1OGFkZTk4ZjE0NTdjZWM4NTg5NTU2MjZmMTYx
ZDJhZWYwHhcNMjUwMTMxMTAwMDMwWhcNMjUwMjAxMTAwMDMwWjAzMTEwLwYDVQQD
Eyg2MGY4MjgyMjY4NmQ0MTE4NWFjYzI2ODM2NGE2OTIxYjRkNzhhMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurQ9WoNx+8S7TA6vok546SGoJ4fH
d2u+Zir7aYaGjM9qEOWOehMg2hA9zTnjnyG7E4tc5OjMs+zegnX4N2HjSb05dT+z
VWMD7FTbwZknBZWX90NlfQ5WHtjNy8azHMHb5c4g/OX66XqsUckH6ktrgsbCEa4l
hgIR8qNB1sxbLWrYg/Xk3MFYfInBXugL8NLTjcTEZzemiYDsQWBtnHHWdLzSfMTR
5bbf0qktjnQDDizeU6HnSucIpNvI8zfCIRgdtYh/H7VhTUefhjWrzkeOC8dYAhM5
LzYfyFoLYmIK+2owAWzLh21dgvGut/Fdvr8D9f3qXYCM5vEm4V496WAVawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD4KCJobUEYWswmg2SmkhtNeKNhMB8GA1UdIwQY
MBaAFGzt9BWK3pjxRXzshYlVYm8WHSrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNDIxM2QtMGRlMC00ZGI0LWE1MDgt
ODIyZDlmODU1OTg0LzEvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNDIxM2QtMGRlMC00ZGI0LWE1MDgtODIyZDlmODU1OTg0
LzEvYk8zMEZZcmVtUEZGZk95RmlWVmlieFlkS3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMRmjy1c
ws6PC3noqLCi4V9OAniNvz57+iUf4UbRJfgxIQ/udyaOwrBG09cHg8EYEXRbkqEW
kmINZTbruxt2CyXSIugkXI6W0UWHIzR0SrcufSk6yK8wj4Xlvhp+PPwiwnY2EIcU
RWpyjPyDxzOAzFd/Mubq+AEd3hYFojB43QDuCd3DTub9p6niFAZe5lmDKtp6VcCk
wNRJlcA/LW+qURK6/BOdDkTsuGcKmfT5NVkPor4UZyngKXRmBGX1YDmMvgbwufuj
IdsczUEZtMXHA6+4bhEl1qYRSC9POu1tmDmQei+eQ4Sp/HT6AXkhFiXKvv/zemtj
aWZ9Ev9wl9r3DA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:25 2025 by rpki-client