Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: he0OVyHr5UFoty1l3grU/JXryUg9UPUqzLUM/gma9qI=
Subject key identifier: 64:FF:21:80:BC:76:41:B4:08:9C:E1:55:77:B3:1D:9B:6D:92:73:50
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 0194BD8575D10D71F5B0BFC4B444E83B49F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: xBk0hVovWuRZmRv+m9qNuwWQ62Td9n4UudPpU8hn6Mg=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:d1:0d:71:f5:b0:bf:c4:b4:44:e8:3b:49:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=64ff2180bc7641b4089ce15577b31d9b6d927350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:39:0c:df:db:06:bf:72:51:e6:99:b3:4e:
00:c1:65:27:b7:13:36:0c:4e:3f:f8:7c:79:c3:73:
8a:e1:f1:02:a0:a5:b6:46:0d:46:a7:a8:58:2c:e3:
22:6f:92:39:33:fd:38:67:db:e0:b6:13:71:2a:23:
e1:94:10:3f:7b:f5:ff:94:43:02:d0:88:b3:06:61:
5f:7a:8b:20:f8:15:2e:e9:73:7a:05:fa:70:fb:a0:
32:b1:b7:06:03:c0:39:f1:92:db:ba:8c:64:ac:1d:
5b:a9:3a:93:dc:e1:eb:e3:33:e7:0c:fc:83:47:5d:
92:e3:06:fc:34:8d:7c:df:bb:7c:84:2a:8e:48:6e:
b0:49:6e:b0:55:a2:8c:5c:98:d3:af:91:f8:c1:37:
f1:d0:51:4a:aa:de:f8:14:bb:89:ce:d4:3b:83:55:
92:ff:5c:43:aa:2d:b7:d8:d4:d1:6d:3f:d7:04:5e:
5d:dd:21:dd:29:af:b6:b8:63:eb:c5:7b:ce:f4:de:
ec:09:cd:84:48:fb:63:cd:7c:00:b2:71:1c:a4:5c:
63:a2:ce:89:7a:ce:de:8e:78:d4:45:26:a8:21:13:
ec:34:e6:59:ea:dc:32:8a:b4:d9:67:bc:42:56:dd:
49:ae:e3:3f:6b:ac:90:55:16:80:13:4f:78:58:e5:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:21:80:BC:76:41:B4:08:9C:E1:55:77:B3:1D:9B:6D:92:73:50
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f4:0a:09:41:7f:66:9c:cf:e5:db:6a:ac:7a:2e:c5:5c:e2:
6e:22:a6:b7:25:d9:d3:98:16:35:a9:17:7f:c5:3b:16:b4:a3:
92:b5:d3:4b:42:30:6a:86:36:bc:fc:46:49:c8:6d:81:4b:32:
d0:be:50:37:36:24:eb:5d:32:87:32:9c:02:28:4c:3b:a9:f6:
12:2f:a2:e3:43:c4:bc:61:ca:eb:6b:34:19:5c:88:90:0b:41:
5f:fb:87:43:3e:34:6f:4f:91:0e:06:6a:f2:60:56:d6:97:ce:
33:3d:78:5a:a8:c3:be:13:62:27:59:c9:03:85:a6:c8:40:f9:
2c:1c:90:62:ca:fe:02:e0:9f:42:6b:0c:4d:57:52:79:a9:ce:
73:67:da:79:00:f1:ad:b3:56:d9:37:ba:f5:51:49:86:16:32:
a1:88:af:fc:17:e9:63:7f:20:38:04:c0:9b:4e:e9:1e:89:5a:
f4:01:0d:75:42:d9:da:2c:55:b3:83:aa:f2:52:61:02:7a:64:
be:33:9d:6c:d7:2c:44:22:bd:ef:bb:9d:94:2d:11:9f:4c:13:
96:9f:12:da:cc:a9:8d:0d:e9:8c:97:0b:eb:35:a2:db:c8:43:
e3:0c:8d:5a:c2:01:b9:b1:e4:19:e2:b8:aa:11:ef:15:cf:2c:
04:fa:bd:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXXRDXH1sL/EtEToO0n5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmE1OTAxM2EzYWYwM2Y3Yzk2YzI0ZTY4ZDk1ZTE4MWEw
MzA1YTgwHhcNMjUwMTMxMTgwMDI3WhcNMjUwMjAxMTgwMDI3WjAzMTEwLwYDVQQD
Eyg2NGZmMjE4MGJjNzY0MWI0MDg5Y2UxNTU3N2IzMWQ5YjZkOTI3MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7E5DN/bBr9yUeaZs04AwWUntxM2
DE4/+Hx5w3OK4fECoKW2Rg1Gp6hYLOMib5I5M/04Z9vgthNxKiPhlBA/e/X/lEMC
0IizBmFfeosg+BUu6XN6Bfpw+6AysbcGA8A58ZLbuoxkrB1bqTqT3OHr4zPnDPyD
R12S4wb8NI1837t8hCqOSG6wSW6wVaKMXJjTr5H4wTfx0FFKqt74FLuJztQ7g1WS
/1xDqi232NTRbT/XBF5d3SHdKa+2uGPrxXvO9N7sCc2ESPtjzXwAsnEcpFxjos6J
es7ejnjURSaoIRPsNOZZ6twyirTZZ7xCVt1JruM/a6yQVRaAE094WOWwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGT/IYC8dkG0CJzhVXezHZttknNQMB8GA1UdIwQY
MBaAFG/6WQE6OvA/fJbCTmjZXhgaAwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYt
ZDgyMjk3ZTk0NWFjLzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYtZDgyMjk3ZTk0NWFj
LzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPQKCUF/
ZpzP5dtqrHouxVzibiKmtyXZ05gWNakXf8U7FrSjkrXTS0IwaoY2vPxGSchtgUsy
0L5QNzYk610yhzKcAihMO6n2Ei+i40PEvGHK62s0GVyIkAtBX/uHQz40b0+RDgZq
8mBW1pfOMz14WqjDvhNiJ1nJA4WmyED5LByQYsr+AuCfQmsMTVdSeanOc2faeQDx
rbNW2Te69VFJhhYyoYiv/BfpY38gOATAm07pHola9AENdULZ2ixVs4Oq8lJhAnpk
vjOdbNcsRCK977udlC0Rn0wTlp8S2sypjQ3pjJcL6zWi28hD4wyNWsIBubHkGeK4
qhHvFc8sBPq9WA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:00 2025 by rpki-client