Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: z3WqcXd/oPFPYARhtkgzv/TiXMV1EHWpbmNuUoxWyrM=
Subject key identifier: 51:37:D5:79:BC:82:92:88:0B:3C:95:D8:84:6D:15:27:FA:52:FD:DF
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0194BD4EA07AC2A32107564C1BC066411E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
2: B-4VLXdFGhHWIAVi7AqhWhqRsxQ.roa (hash: GobkPshTUFOdOTBvCC1n6vzJuUSn1cqU1T8oZBI7YUg=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: KC3uLk7dWvh/XofxvtWkcwew9yG2dB+LZU9dKFo24po=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:7a:c2:a3:21:07:56:4c:1b:c0:66:41:1e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=5137d579bc8292880b3c95d8846d1527fa52fddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:26:af:c3:e4:19:0d:35:c7:bc:66:c4:f3:
5e:39:47:ae:0f:43:d0:a8:49:13:75:cf:62:01:c1:
ae:b9:e0:df:fe:6b:96:95:cf:b3:fd:c7:6c:b1:f5:
fe:dd:d3:00:17:4f:22:0f:bd:ed:13:69:57:ab:20:
49:9f:93:ae:dc:2f:f8:c4:6d:a3:ec:68:e0:c6:b7:
ad:7c:60:1b:a8:da:26:31:b5:f4:c8:ba:7f:74:84:
49:78:e4:30:60:11:c3:06:d5:2e:a8:2a:f8:d1:91:
7d:0f:c0:fe:da:92:77:73:a7:2f:c6:90:08:a4:df:
15:8f:ef:14:91:d4:7f:62:98:80:f0:37:bb:5c:db:
02:5b:c4:ac:4a:cb:1b:f0:34:3f:c1:2b:e8:a6:83:
6a:98:60:b1:c2:8d:3a:f4:37:46:d2:70:3b:c6:fe:
cf:20:8b:12:00:e4:e8:19:f4:12:66:4d:bb:b6:0b:
12:a9:a4:14:25:74:a4:2f:87:89:ed:a9:de:19:de:
82:c0:a7:4f:1b:23:0a:de:ff:e7:2a:70:e3:16:9c:
db:d3:9b:13:b2:2a:ea:f4:fb:ac:4c:7f:ca:b5:ef:
a3:f5:9f:6c:3b:32:63:15:9a:1e:05:54:b7:38:0f:
36:26:de:63:26:4e:6a:d4:9d:ef:a8:c5:dd:fb:61:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:37:D5:79:BC:82:92:88:0B:3C:95:D8:84:6D:15:27:FA:52:FD:DF
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:57:37:28:87:2e:00:bf:f8:e1:6d:49:63:22:6c:d2:a3:
e4:b5:66:85:34:63:df:f6:85:63:a3:21:5e:5f:69:61:44:30:
03:a4:66:6c:ff:17:54:4f:45:fc:58:e3:de:52:f9:5c:b8:1d:
72:d8:f4:ca:de:0d:5e:dc:bc:b2:c6:f8:f8:05:a8:7d:88:97:
6d:d2:f1:c1:95:5f:42:61:e9:26:bc:7e:d4:97:03:65:07:00:
a7:a7:6a:bb:c3:ff:29:c6:7b:50:0d:37:09:e7:12:1f:c7:e8:
c7:49:37:61:52:c8:0e:1c:fb:93:5a:e8:83:4d:7f:af:54:e9:
c8:a0:ac:f5:10:e3:da:4b:2e:5e:b7:b0:27:94:e5:e0:68:a6:
59:d4:3f:0e:9c:d0:42:57:05:d7:55:79:63:c2:5b:2e:a4:33:
ea:b8:cb:ef:da:fa:7c:8a:13:f9:e4:27:de:70:c3:06:de:af:
0d:51:bd:03:dc:d1:56:b7:a0:83:66:ac:ce:a9:ab:65:0e:77:
68:1d:13:00:9a:0c:00:ab:77:9d:79:e0:ce:80:7f:77:bb:cf:
2d:c4:7d:52:24:0d:0b:0f:54:80:f0:c4:37:c1:61:ea:3b:4e:
1e:cf:24:e9:b1:25:71:dc:d7:bf:51:af:89:d9:03:e5:2c:3f:
59:1c:2d:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqB6wqMhB1ZMG8BmQR4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWM1NzEyZmJiY2Q4MzI0MTlkNGM1ODg0YWUzYmMzYzRh
MTZlN2IwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
Eyg1MTM3ZDU3OWJjODI5Mjg4MGIzYzk1ZDg4NDZkMTUyN2ZhNTJmZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Amr8PkGQ01x7xmxPNeOUeuD0PQ
qEkTdc9iAcGuueDf/muWlc+z/cdssfX+3dMAF08iD73tE2lXqyBJn5Ou3C/4xG2j
7GjgxretfGAbqNomMbX0yLp/dIRJeOQwYBHDBtUuqCr40ZF9D8D+2pJ3c6cvxpAI
pN8Vj+8UkdR/YpiA8De7XNsCW8SsSssb8DQ/wSvopoNqmGCxwo069DdG0nA7xv7P
IIsSAOToGfQSZk27tgsSqaQUJXSkL4eJ7aneGd6CwKdPGyMK3v/nKnDjFpzb05sT
sirq9PusTH/Kte+j9Z9sOzJjFZoeBVS3OA82Jt5jJk5q1J3vqMXd+2FzxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFE31Xm8gpKICzyV2IRtFSf6Uv3fMB8GA1UdIwQY
MBaAFG9cVxL7vNgyQZ1MWISuO8PEoW57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEt
NzU1MDUyOWQ4NDdhLzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNDAzY2MtNGU2Yy00ZmU5LTgzYTEtNzU1MDUyOWQ4NDdh
LzEvYjF4WEV2dTgyREpCblV4WWhLNDd3OFNoYm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMtXNyiH
LgC/+OFtSWMibNKj5LVmhTRj3/aFY6MhXl9pYUQwA6RmbP8XVE9F/Fjj3lL5XLgd
ctj0yt4NXty8ssb4+AWofYiXbdLxwZVfQmHpJrx+1JcDZQcAp6dqu8P/KcZ7UA03
CecSH8fox0k3YVLIDhz7k1rog01/r1TpyKCs9RDj2ksuXrewJ5Tl4GimWdQ/DpzQ
QlcF11V5Y8JbLqQz6rjL79r6fIoT+eQn3nDDBt6vDVG9A9zRVregg2aszqmrZQ53
aB0TAJoMAKt3nXngzoB/d7vPLcR9UiQNCw9UgPDEN8Fh6jtOHs8k6bElcdzXv1Gv
idkD5Sw/WRwtxA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:23 2025 by rpki-client