Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: 8UD742fN8XWeb1OT9gqgNFOqaMPfKBgGmdv5jQggeAQ=
Subject key identifier: CB:78:30:C5:9E:01:BC:50:B5:C8:43:E0:98:EB:B9:8A:73:CD:E3:FF
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0194BCA9DBAD646A77C5B4969813FBBF0B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 120F
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: pZ2fOq5BdZpylxdG95Y/JqEeLlX7b4t/n458ZbWIxls=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:db:ad:64:6a:77:c5:b4:96:98:13:fb:bf:0b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=cb7830c59e01bc50b5c843e098ebb98a73cde3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:e8:e2:1b:46:5a:9e:58:d2:25:7e:f9:47:
de:18:6b:28:b0:1a:9f:a1:e7:c8:71:b4:70:fb:e9:
57:a1:3e:f6:50:a6:55:fe:74:34:53:35:12:b9:e2:
9d:76:22:a5:b7:76:5b:1d:56:d0:6a:e9:8e:04:e8:
ff:fc:69:80:43:47:40:9a:06:2a:2a:e7:d9:dd:ad:
11:ff:99:50:fa:63:60:56:6d:d3:20:29:30:8e:98:
1c:26:66:be:61:cf:5d:c4:f6:a4:9f:d9:42:44:b1:
65:3f:7e:d3:06:34:6b:db:e3:3e:81:71:7b:9c:ef:
eb:83:2e:64:ce:29:3b:85:6d:27:b6:49:9d:e3:a2:
fd:a7:6a:1c:f9:3b:37:ff:2d:13:52:2d:17:20:c2:
a8:c2:4f:e2:7a:d4:0a:6f:a7:69:b6:e3:77:69:78:
6b:1d:24:e5:af:59:30:c4:47:73:c9:09:fb:f7:52:
b7:63:e6:9e:e3:bc:92:6a:6f:f9:76:cd:19:35:3e:
97:c1:41:77:34:05:97:26:da:e4:43:64:49:04:df:
56:a8:c2:9f:1a:a0:7e:77:08:fe:51:64:47:ee:52:
8b:98:4c:7a:a5:96:92:0c:84:27:d6:6b:bf:d5:fa:
e0:8e:69:b0:f8:32:ee:3e:a3:ba:af:6d:2a:80:6e:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:30:C5:9E:01:BC:50:B5:C8:43:E0:98:EB:B9:8A:73:CD:E3:FF
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9f:29:88:68:02:da:86:72:d3:a7:2f:c2:4c:b8:40:78:89:
97:e0:80:88:f2:6d:cb:6c:6a:0a:be:dc:43:6e:1a:db:06:99:
a0:4b:df:0f:40:17:92:f7:c3:0a:e9:9c:6d:7b:ed:48:16:82:
38:98:43:74:87:c7:01:c9:08:2a:22:83:da:88:06:35:d3:4c:
3e:37:ab:5d:64:b3:80:a0:3a:50:24:fa:c1:d8:94:4f:73:66:
dd:cf:2b:84:33:ef:12:ee:f9:34:b6:e8:c4:a7:26:e0:90:76:
59:58:a3:89:7c:92:a8:7c:2b:20:a5:2b:f8:21:13:e1:0e:61:
e2:70:b4:01:36:5c:59:3a:d3:af:9a:aa:f5:68:e2:9e:ab:ca:
81:1e:8d:ef:5c:06:49:ab:90:b3:e1:35:d8:63:1a:f1:a6:8e:
0d:d6:3e:6c:2d:d1:fc:f7:21:09:81:66:fc:2f:54:03:a0:91:
bc:0a:f9:c3:66:a7:db:9a:ca:13:ce:81:7b:42:28:5a:f0:f0:
83:3c:69:6f:bf:8a:d6:46:74:e5:bc:c3:ff:f4:60:b9:ed:1c:
9a:d2:b1:ad:65:42:44:a1:d3:8e:07:9e:db:0d:24:d3:31:c2:
59:6b:ab:f9:ff:67:44:e9:f5:bc:a8:63:ec:8f:da:fd:90:a7:
05:f3:e8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdutZGp3xbSWmBP7vwt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw
OWY0OTkwHhcNMjUwMTMxMTQwMDM1WhcNMjUwMjAxMTQwMDM1WjAzMTEwLwYDVQQD
EyhjYjc4MzBjNTllMDFiYzUwYjVjODQzZTA5OGViYjk4YTczY2RlM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn37o4htGWp5Y0iV++UfeGGsosBqf
oefIcbRw++lXoT72UKZV/nQ0UzUSueKddiKlt3ZbHVbQaumOBOj//GmAQ0dAmgYq
KufZ3a0R/5lQ+mNgVm3TICkwjpgcJma+Yc9dxPakn9lCRLFlP37TBjRr2+M+gXF7
nO/rgy5kzik7hW0ntkmd46L9p2oc+Ts3/y0TUi0XIMKowk/ietQKb6dptuN3aXhr
HSTlr1kwxEdzyQn791K3Y+ae47ySam/5ds0ZNT6XwUF3NAWXJtrkQ2RJBN9WqMKf
GqB+dwj+UWRH7lKLmEx6pZaSDIQn1mu/1frgjmmw+DLuPqO6r20qgG5JoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt4MMWeAbxQtchD4JjruYpzzeP/MB8GA1UdIwQY
MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt
NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw
LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJ8piGgC
2oZy06cvwky4QHiJl+CAiPJty2xqCr7cQ24a2waZoEvfD0AXkvfDCumcbXvtSBaC
OJhDdIfHAckIKiKD2ogGNdNMPjerXWSzgKA6UCT6wdiUT3Nm3c8rhDPvEu75NLbo
xKcm4JB2WVijiXySqHwrIKUr+CET4Q5h4nC0ATZcWTrTr5qq9WjinqvKgR6N71wG
SauQs+E12GMa8aaODdY+bC3R/PchCYFm/C9UA6CRvAr5w2an25rKE86Be0IoWvDw
gzxpb7+K1kZ05bzD//Rgue0cmtKxrWVCRKHTjgee2w0k0zHCWWur+f9nROn1vKhj
7I/a/ZCnBfPoNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:58 2025 by rpki-client