Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: k2f4UsJjN5eQlIDFWpIUc+P4iuiCk7LX9c+11cl/kuY=
Subject key identifier: 16:E2:04:DC:8B:E5:40:E3:CD:17:6A:C8:3E:7B:DC:10:87:FF:A8:F0
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 0194BD4E962E44C4DDF96766E429B48DB4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0B67
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: diVXTRujMrkUltOzLjvL9JXiH2Osuai7cDjthHj3zV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:96:2e:44:c4:dd:f9:67:66:e4:29:b4:8d:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=16e204dc8be540e3cd176ac83e7bdc1087ffa8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:93:18:1e:74:b1:f9:6d:8d:d1:e2:b3:93:
9e:1f:94:8b:b8:2f:16:dc:51:2a:8b:b4:0b:31:f8:
c8:84:51:66:fb:6c:98:02:f5:31:58:c4:05:6d:5b:
99:00:15:b8:49:95:ca:9d:8f:d0:61:04:69:bc:b0:
a7:53:ab:33:75:e8:8e:5f:17:24:88:39:87:7b:c0:
08:2c:fd:29:6a:40:46:a5:08:0d:50:ec:62:8b:fc:
6b:af:af:c5:5f:4e:c7:d4:be:5b:ba:dd:9e:6b:1b:
30:02:c2:7e:b3:6c:06:af:7c:f3:56:f5:7c:ec:19:
b3:94:58:68:9b:8a:ce:d8:85:0e:88:4f:a9:6c:5e:
a9:a6:a2:68:8b:73:11:cc:a8:c2:b2:95:e2:2c:6e:
60:9f:b9:da:5a:14:97:ee:cf:c8:ef:e4:c1:86:85:
46:99:a4:91:bc:af:33:eb:88:35:73:71:23:e2:7a:
2b:a9:b6:bd:22:81:b7:a7:5f:0a:a0:9f:7d:d6:54:
f3:ed:0e:d8:9c:2a:83:08:67:f6:62:e0:25:af:af:
99:e9:fa:ba:67:7f:43:e7:ab:69:0a:9a:33:e3:66:
71:c0:f2:5d:6b:e6:65:1a:9d:ce:23:dd:6b:52:4c:
0a:27:c0:20:f9:65:42:2e:6e:c1:31:30:46:12:dc:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:04:DC:8B:E5:40:E3:CD:17:6A:C8:3E:7B:DC:10:87:FF:A8:F0
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:02:31:e1:08:da:78:c8:cb:3f:91:df:ac:a9:5c:31:33:29:
4a:a0:df:1e:2d:0c:09:16:60:1c:95:2c:32:cb:a9:e0:a7:43:
25:71:aa:ea:01:e8:96:59:23:bb:d6:9d:9f:1f:51:e5:5d:df:
5b:79:dc:8d:1a:4e:80:fc:55:02:f7:a0:85:e0:f9:2f:4e:10:
d7:58:ca:07:3f:3f:d9:52:ed:50:09:92:7c:f3:20:26:8c:06:
e4:6e:9d:17:a4:8a:08:c9:ff:32:44:3b:f0:d0:43:19:63:2c:
71:0d:61:82:98:20:de:61:ed:00:df:94:2f:4c:c8:c2:99:cc:
58:30:45:a9:60:1f:9b:62:38:2d:17:69:e6:34:26:50:b8:27:
fd:e2:44:1f:33:c1:6f:81:2a:1c:92:ad:c1:ed:b9:4e:01:90:
7c:1b:6b:4a:a8:7d:f3:4c:ff:7a:ef:21:4e:da:b7:3e:49:a9:
c9:ef:f8:52:56:0b:32:43:78:df:e5:82:4b:b8:e3:eb:11:32:
58:2a:31:d9:6c:40:52:d0:15:0b:f8:2c:7a:16:cd:c3:49:9c:
61:98:e8:4e:f1:43:25:dd:29:59:0f:4e:d6:b0:b0:97:d0:22:
50:f8:c1:10:cd:09:3d:97:e8:6c:36:22:95:ce:ae:06:78:85:
bf:eb:65:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpYuRMTd+Wdm5Cm0jbTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2VlMmI4NDAwMjA4YTdlZWE0NTA2MGY0YjdhODNjNDNl
OGRlN2MwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
EygxNmUyMDRkYzhiZTU0MGUzY2QxNzZhYzgzZTdiZGMxMDg3ZmZhOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgeTGB50sfltjdHis5OeH5SLuC8W
3FEqi7QLMfjIhFFm+2yYAvUxWMQFbVuZABW4SZXKnY/QYQRpvLCnU6szdeiOXxck
iDmHe8AILP0pakBGpQgNUOxii/xrr6/FX07H1L5but2eaxswAsJ+s2wGr3zzVvV8
7BmzlFhom4rO2IUOiE+pbF6ppqJoi3MRzKjCspXiLG5gn7naWhSX7s/I7+TBhoVG
maSRvK8z64g1c3Ej4norqba9IoG3p18KoJ991lTz7Q7YnCqDCGf2YuAlr6+Z6fq6
Z39D56tpCpoz42ZxwPJda+ZlGp3OI91rUkwKJ8Ag+WVCLm7BMTBGEtwJbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbiBNyL5UDjzRdqyD573BCH/6jwMB8GA1UdIwQY
MBaAFG4+4rhAAgin7qRQYPS3qDxD6N58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUt
NzMyN2RmNmJkZDEwLzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9lNGYyZGItNmY0Ni00NzYxLWFkZmUtNzMyN2RmNmJkZDEw
LzEvYmo3aXVFQUNDS2Z1cEZCZzlMZW9QRVBvM253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAIx4Qja
eMjLP5HfrKlcMTMpSqDfHi0MCRZgHJUsMsup4KdDJXGq6gHollkju9adnx9R5V3f
W3ncjRpOgPxVAvegheD5L04Q11jKBz8/2VLtUAmSfPMgJowG5G6dF6SKCMn/MkQ7
8NBDGWMscQ1hgpgg3mHtAN+UL0zIwpnMWDBFqWAfm2I4LRdp5jQmULgn/eJEHzPB
b4EqHJKtwe25TgGQfBtrSqh980z/eu8hTtq3Pkmpye/4UlYLMkN43+WCS7jj6xEy
WCox2WxAUtAVC/gsehbNw0mcYZjoTvFDJd0pWQ9O1rCwl9AiUPjBEM0JPZfobDYi
lc6uBniFv+tlKQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:52 2025 by rpki-client