Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File: BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier: wIh4vehCY1UPIlVcaZRkjzXodK0v1haXrePYNRmo+Qg=
Subject key identifier: AC:9B:CC:9F:FC:79:FF:1D:23:FF:0C:C6:97:A1:71:FD:70:A4:81:FD
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer: /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial: 0194BBCE35CB7ADA8EEA9CB600FA37C2E6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number: 11A0
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: LrnvfaF/Fa2zLWUHZONGpu37R4HJqNLDkFjTsLbN3Ww=)
2: P9IjOiRib_oTzk3RFCj75_fHPso.roa (hash: zczeX9mp/ovcEZlHCQx76naAHy+fi7XPa1xXLFJeJgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:cb:7a:da:8e:ea:9c:b6:00:fa:37:c2:e6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=ac9bcc9ffc79ff1d23ff0cc697a171fd70a481fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:5a:f0:a3:69:b8:76:97:5d:47:88:9e:a1:
7f:2a:73:5f:78:c6:9d:6d:f4:1c:89:eb:7e:b8:11:
f8:47:aa:2b:b0:a7:47:03:7b:50:56:2e:9e:07:fb:
c8:ec:64:45:50:f9:33:0a:74:d3:ad:9f:d4:07:45:
7b:76:99:ea:c1:30:2f:56:83:b6:df:2f:95:ba:2c:
41:df:34:c9:74:ff:5b:58:2a:af:94:a4:c7:43:34:
7c:ad:25:78:15:c9:86:64:10:02:12:d8:44:3c:dc:
00:b6:2e:24:8c:1a:44:95:24:b4:ed:fd:eb:d2:69:
52:54:6b:9a:30:7d:c2:e3:30:aa:ae:2e:83:37:df:
d8:08:38:73:6d:17:62:50:3f:6c:31:86:1b:d5:f2:
d5:b0:1e:42:4e:31:b6:8a:f8:8b:0e:0e:cb:bd:07:
73:81:21:1e:6d:95:77:cc:24:53:3b:aa:7e:d7:6f:
13:de:58:7a:cd:06:aa:ad:7f:19:a3:70:44:24:93:
16:2e:42:a1:a5:8e:10:e3:eb:20:fa:3d:db:3a:ca:
b7:b7:a1:a7:40:31:21:0a:e3:e1:8c:de:a4:20:7e:
bd:9a:e9:3f:b7:2c:88:0c:6f:b2:61:79:e6:d2:b5:
80:cf:c9:ae:8c:34:e0:4b:6c:17:de:4a:53:31:b5:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:CC:9F:FC:79:FF:1D:23:FF:0C:C6:97:A1:71:FD:70:A4:81:FD
X509v3 Authority Key Identifier:
keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:ce:d7:62:d2:a5:0c:35:6b:b7:04:05:b8:f9:94:cb:0b:
7c:3f:f9:d6:7b:b6:d1:47:d9:96:36:18:eb:07:b4:25:9a:35:
88:48:65:45:b4:94:0c:a5:68:36:85:cf:62:4d:dc:25:b7:49:
d3:33:71:9b:a2:d0:b3:6b:67:74:e0:14:ab:05:88:59:45:f0:
c2:dd:df:36:45:a3:6b:ca:d5:cb:39:41:ff:d4:5b:58:56:47:
6a:39:f1:46:71:b4:a1:36:fa:6e:5c:c2:ce:08:08:67:4e:52:
2e:c0:ce:2d:ed:e7:b6:a0:73:51:ca:c3:63:4a:76:ca:4c:b6:
cf:6c:a7:b0:7c:0b:05:6a:a7:d7:a7:ca:d0:30:f6:96:04:ec:
5a:85:22:2e:a5:6d:fe:bc:41:64:d6:8c:08:f8:a9:cb:6d:3a:
6b:a9:d2:ce:56:c5:fd:ab:f5:c7:91:ca:ea:15:88:bc:5f:bc:
7a:d2:b4:e3:79:67:16:5c:13:11:d6:c6:d2:b3:5d:af:a4:a1:
c6:43:01:ff:ac:be:8c:37:b2:18:b3:91:26:6c:52:17:04:9e:
d6:1b:3f:c0:a0:aa:30:c0:f8:8d:6a:2f:59:24:a6:85:3a:e3:
b0:a1:22:c6:06:45:99:7d:40:fb:21:b8:ee:e9:b3:18:15:4d:
16:18:f0:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjXLetqO6py2APo3wubBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0
M2FkM2MwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
EyhhYzliY2M5ZmZjNzlmZjFkMjNmZjBjYzY5N2ExNzFmZDcwYTQ4MWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gVa8KNpuHaXXUeInqF/KnNfeMad
bfQciet+uBH4R6orsKdHA3tQVi6eB/vI7GRFUPkzCnTTrZ/UB0V7dpnqwTAvVoO2
3y+VuixB3zTJdP9bWCqvlKTHQzR8rSV4FcmGZBACEthEPNwAti4kjBpElSS07f3r
0mlSVGuaMH3C4zCqri6DN9/YCDhzbRdiUD9sMYYb1fLVsB5CTjG2iviLDg7LvQdz
gSEebZV3zCRTO6p+128T3lh6zQaqrX8Zo3BEJJMWLkKhpY4Q4+sg+j3bOsq3t6Gn
QDEhCuPhjN6kIH69muk/tyyIDG+yYXnm0rWAz8mujDTgS2wX3kpTMbWUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKybzJ/8ef8dI/8Mxpehcf1wpIH9MB8GA1UdIwQY
MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It
MmEyODQxNmQ0NWIyLzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2ItMmEyODQxNmQ0NWIy
LzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA97O12LS
pQw1a7cEBbj5lMsLfD/51nu20UfZljYY6we0JZo1iEhlRbSUDKVoNoXPYk3cJbdJ
0zNxm6LQs2tndOAUqwWIWUXwwt3fNkWja8rVyzlB/9RbWFZHajnxRnG0oTb6blzC
zggIZ05SLsDOLe3ntqBzUcrDY0p2yky2z2ynsHwLBWqn16fK0DD2lgTsWoUiLqVt
/rxBZNaMCPipy206a6nSzlbF/av1x5HK6hWIvF+8etK043lnFlwTEdbG0rNdr6Sh
xkMB/6y+jDeyGLORJmxSFwSe1hs/wKCqMMD4jWovWSSmhTrjsKEixgZFmX1A+yG4
7umzGBVNFhjwuQ==
-----END CERTIFICATE-----
Generated at Fri May 2 21:13:45 2025 by rpki-client