Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: 6fLGBFd5qBnnacBQwEtBacUld4u4KuwwO1cukK8wBKk=
Subject key identifier: 80:EE:98:7D:AA:8E:49:C2:81:F2:11:80:7A:67:18:A1:E9:5E:94:95
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 0194BCE0CF4A1092E65D9C4D0FD00F9140B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 012A
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: MO3WylsqjDoEfBwYOLzHszIkx0anZ7soVcP2L64Xr4Y=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:4a:10:92:e6:5d:9c:4d:0f:d0:0f:91:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=80ee987daa8e49c281f211807a6718a1e95e9495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:4a:be:8f:14:20:a0:6e:6f:2d:29:2f:56:
b9:26:3b:80:97:1e:4f:3b:59:ec:00:12:a6:af:de:
30:60:ed:52:e4:50:24:40:2c:87:d1:87:f0:8b:ac:
e6:ae:7d:60:55:7b:0d:cc:f6:e7:87:88:15:94:a3:
2a:75:89:3f:b1:5b:7c:a9:b6:7b:b2:95:1d:7b:3a:
17:6b:df:2c:d1:28:74:8c:01:bd:20:23:39:a8:f3:
7a:99:1c:62:2c:60:02:3f:ef:c2:25:b7:39:b0:ce:
47:af:0a:d5:42:0f:5b:51:bc:f1:81:98:30:c0:f6:
34:b9:76:5e:40:0f:ef:55:a2:b4:af:7c:20:c2:10:
81:7b:07:28:6a:0d:1c:d6:b1:3b:41:b3:3b:78:ba:
fc:66:63:5d:a2:99:58:fa:2f:3a:e8:d7:ca:05:19:
78:17:a6:19:7f:be:53:c6:cf:f3:fc:1d:9d:c6:be:
3c:b0:a1:88:34:2b:57:7e:90:51:26:00:20:45:40:
f7:5e:ce:68:c8:88:aa:89:5d:08:b1:b9:72:79:de:
d5:1e:ec:02:23:ec:9a:d9:4f:1a:97:18:f5:e5:86:
49:1d:f8:5b:31:9e:6c:d8:a3:d0:8a:e7:ca:55:2b:
2c:3e:e5:17:3e:59:c8:de:85:ed:09:66:df:9c:40:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:98:7D:AA:8E:49:C2:81:F2:11:80:7A:67:18:A1:E9:5E:94:95
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:de:1c:73:2b:a7:11:43:bc:37:56:54:09:d8:7c:7e:a3:
9d:0c:ef:9d:cb:6e:2b:67:b4:44:a3:bd:82:3c:fe:12:89:0b:
54:4d:6b:18:91:92:0d:71:25:11:97:f1:11:04:ee:36:e8:4f:
48:d1:c3:2a:4a:1b:62:ef:9e:b9:d7:3a:15:d5:0f:bb:26:99:
50:8e:ba:3c:d8:45:db:27:20:86:d9:15:58:45:46:62:09:93:
f7:f0:1a:19:55:b8:83:65:d4:3d:f1:f5:fc:8d:6e:38:6a:c1:
40:e1:11:3c:a5:c1:83:57:f7:b1:18:84:61:36:26:d4:46:8a:
2e:be:a1:fa:a7:30:d1:48:4a:2e:e2:c4:a7:c8:60:4c:f1:47:
6f:a5:89:84:c6:2c:ad:09:0d:c7:e8:39:50:07:98:6d:ec:80:
b4:8f:b4:51:7f:86:d2:b3:ec:97:0b:96:94:cf:78:83:af:a4:
02:df:e2:3a:71:50:16:4c:4e:14:5e:7a:63:c9:4e:11:b1:6b:
b1:d6:ea:bb:3f:0f:b4:06:6a:a3:db:28:a2:f7:af:8d:62:f5:
be:25:cb:26:24:38:59:fe:9e:d1:f9:dc:97:c2:bb:0a:6b:36:
47:83:26:ce:f3:fb:9d:64:bf:af:4c:53:dd:9a:73:a6:b0:b7:
6c:f5:9b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M9KEJLmXZxND9APkUCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YmEzMjAyNGUyY2I2MTQyMjk1MTEyZmU2MWY2YjFiYzM0
NTdiY2IwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
Eyg4MGVlOTg3ZGFhOGU0OWMyODFmMjExODA3YTY3MThhMWU5NWU5NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6hKvo8UIKBuby0pL1a5JjuAlx5P
O1nsABKmr94wYO1S5FAkQCyH0Yfwi6zmrn1gVXsNzPbnh4gVlKMqdYk/sVt8qbZ7
spUdezoXa98s0Sh0jAG9ICM5qPN6mRxiLGACP+/CJbc5sM5HrwrVQg9bUbzxgZgw
wPY0uXZeQA/vVaK0r3wgwhCBewcoag0c1rE7QbM7eLr8ZmNdoplY+i866NfKBRl4
F6YZf75Txs/z/B2dxr48sKGINCtXfpBRJgAgRUD3Xs5oyIiqiV0Isblyed7VHuwC
I+ya2U8alxj15YZJHfhbMZ5s2KPQiufKVSssPuUXPlnI3oXtCWbfnEBHEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDumH2qjknCgfIRgHpnGKHpXpSVMB8GA1UdIwQY
MBaAFNm6MgJOLLYUIpURL+YfaxvDRXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYt
N2RmOWU0YTIzOGNjLzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mNjMzMDMtMTc2ZC00MTc2LWFiYmYtN2RmOWU0YTIzOGNj
LzEvMmJveUFrNHN0aFFpbFJFdjVoOXJHOE5GZThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6XeHHMr
pxFDvDdWVAnYfH6jnQzvnctuK2e0RKO9gjz+EokLVE1rGJGSDXElEZfxEQTuNuhP
SNHDKkobYu+eudc6FdUPuyaZUI66PNhF2ycghtkVWEVGYgmT9/AaGVW4g2XUPfH1
/I1uOGrBQOERPKXBg1f3sRiEYTYm1EaKLr6h+qcw0UhKLuLEp8hgTPFHb6WJhMYs
rQkNx+g5UAeYbeyAtI+0UX+G0rPslwuWlM94g6+kAt/iOnFQFkxOFF56Y8lOEbFr
sdbquz8PtAZqo9soovevjWL1viXLJiQ4Wf6e0fncl8K7Cms2R4MmzvP7nWS/r0xT
3ZpzprC3bPWbxg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:18 2025 by rpki-client