Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: le2qU0vjn/eb2fTMTXNREjX3nDUCIhx0JfURF5dbS20=
Subject key identifier: 59:9E:22:B0:4D:9E:9E:CD:1C:0D:13:86:67:ED:E2:FB:06:05:39:6B
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 0194BBCDE5E3C820ED0B9CB95D10EC47E398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: qAcr5CL+2cu3S7hxZlj99CrV/ov2T5QMVFyVKZwRLpg=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:e3:c8:20:ed:0b:9c:b9:5d:10:ec:47:e3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=599e22b04d9e9ecd1c0d138667ede2fb0605396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:45:61:9f:f1:c7:9b:62:71:7a:28:76:89:
16:46:9f:4e:4e:51:ca:77:d7:98:b9:f3:86:53:bd:
b2:49:fb:3e:e2:da:8c:90:c1:ac:a9:53:5f:b8:1d:
be:82:95:07:67:3e:42:f3:7d:84:d0:00:5f:87:6f:
01:b4:ea:d7:f6:6f:54:33:ed:5a:c5:b9:5e:23:28:
28:4c:41:c6:6b:02:42:79:63:87:59:1e:a4:51:ec:
36:cd:5a:d0:c1:62:34:90:46:f5:a1:02:96:bf:b7:
93:5f:c5:bd:db:8c:a0:5a:dd:15:ee:23:03:fd:6d:
b3:e7:a3:94:cd:17:f4:3c:d4:5d:dd:97:55:08:4f:
35:fe:85:4d:32:9f:ba:d3:1b:bd:83:90:55:ec:5d:
b1:fb:a3:2c:18:ba:71:d5:f0:f9:15:d0:a2:f4:d6:
e4:3d:86:fa:d6:3d:11:94:16:2e:cd:66:cb:61:46:
49:86:a6:4f:d4:62:05:fc:85:b2:4a:6c:78:5b:6a:
75:07:e9:5e:f9:93:f4:5b:a3:c8:24:fe:f4:26:68:
a3:7d:3b:41:02:8a:3e:52:25:04:35:de:e0:b4:e2:
33:1f:08:b4:e5:4e:ca:95:7f:5d:71:80:d8:b5:70:
82:4f:16:81:9a:58:87:0f:0a:dc:0c:01:da:e9:ec:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9E:22:B0:4D:9E:9E:CD:1C:0D:13:86:67:ED:E2:FB:06:05:39:6B
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:4b:bc:9d:f8:5b:d7:9b:ba:59:89:7f:91:42:13:1a:06:
d6:bf:1f:9a:bb:dd:2c:6b:0b:70:46:7d:31:88:dc:94:01:fd:
42:a9:81:1c:8a:15:0e:94:dc:2f:58:7e:af:d2:0a:70:af:98:
0d:42:01:7b:41:15:14:4b:3a:45:d3:4c:eb:dd:da:45:14:e2:
26:7a:1c:66:5c:b0:a5:53:d2:9e:94:2c:2a:a3:72:0c:f7:44:
80:a9:f7:21:d4:66:9c:86:92:7a:5f:1a:5e:25:98:3a:bb:17:
c5:b4:06:76:18:ae:d1:52:f2:ee:d9:98:2e:30:73:7f:14:30:
8c:f3:24:b5:fb:f8:80:68:a4:79:66:00:e5:e0:92:7a:f5:77:
1c:7a:d7:48:3d:b0:45:1c:c8:1b:76:7f:4b:1a:6e:0a:14:dd:
f6:d1:49:f7:99:63:25:5f:2d:c9:f0:46:45:b1:b3:33:75:d9:
3c:75:d7:26:43:2c:c5:e8:f4:2a:89:b2:8d:eb:68:e4:2d:72:
63:f4:ef:d6:12:6b:3c:ac:a5:1d:0a:42:03:cf:93:f2:8d:4c:
98:28:40:3c:35:eb:11:d5:fc:57:02:42:31:d2:d8:92:e8:f6:
0f:03:2b:1d:63:22:f2:3b:77:71:5e:c3:31:26:a2:fc:c9:71:
52:a8:bc:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeXjyCDtC5y5XRDsR+OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
Eyg1OTllMjJiMDRkOWU5ZWNkMWMwZDEzODY2N2VkZTJmYjA2MDUzOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1NFYZ/xx5ticXoodokWRp9OTlHK
d9eYufOGU72ySfs+4tqMkMGsqVNfuB2+gpUHZz5C832E0ABfh28BtOrX9m9UM+1a
xbleIygoTEHGawJCeWOHWR6kUew2zVrQwWI0kEb1oQKWv7eTX8W924ygWt0V7iMD
/W2z56OUzRf0PNRd3ZdVCE81/oVNMp+60xu9g5BV7F2x+6MsGLpx1fD5FdCi9Nbk
PYb61j0RlBYuzWbLYUZJhqZP1GIF/IWySmx4W2p1B+le+ZP0W6PIJP70JmijfTtB
Aoo+UiUENd7gtOIzHwi05U7KlX9dcYDYtXCCTxaBmliHDwrcDAHa6ex9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmeIrBNnp7NHA0Thmft4vsGBTlrMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8xLvJ34
W9ebulmJf5FCExoG1r8fmrvdLGsLcEZ9MYjclAH9QqmBHIoVDpTcL1h+r9IKcK+Y
DUIBe0EVFEs6RdNM693aRRTiJnocZlywpVPSnpQsKqNyDPdEgKn3IdRmnIaSel8a
XiWYOrsXxbQGdhiu0VLy7tmYLjBzfxQwjPMktfv4gGikeWYA5eCSevV3HHrXSD2w
RRzIG3Z/SxpuChTd9tFJ95ljJV8tyfBGRbGzM3XZPHXXJkMsxej0Komyjeto5C1y
Y/Tv1hJrPKylHQpCA8+T8o1MmChAPDXrEdX8VwJCMdLYkuj2DwMrHWMi8jt3cV7D
MSai/MlxUqi8Rg==
-----END CERTIFICATE-----
Generated at Fri May 9 13:39:40 2025 by rpki-client