Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json)
Hash identifier: qy0vxeD3z4ql4MWyUeIvjR8Eu7j+0fbkbm1qOw3GvbQ=
Subject key identifier: 86:39:13:5D:19:46:85:C2:B7:B9:4A:80:E9:6B:EE:D6:95:42:EE:08
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0194BCAA0DBC132C01CBE9C394B11FDF9100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
Manifest number: 14B4
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa (hash: 6Mdiww8rup10ctjHqTpOD/Pwd3nyKO+layuU1TvTAHQ=)
2: 2oRdoUK9GK8mawBu6_rEnXW2PpU.roa (hash: 8KF1r3nJb84n4UjY6JtL5gphBhQBLKVTdmdNqZHiv9U=)
3: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=)
4: AEYI5GXnOCZSQRl7iJM68FezRrY.roa (hash: jtYBPy2LfggSo3nP2Uk2oyBCmGFL6Mcjz2kn85j21qc=)
5: CN0B7UGnZsUghzd1Sf6tTtb-EPA.roa (hash: xt5eJQTJ6dnXsnWbwbawB1WgbDb54xlrkvObZoI70gQ=)
6: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=)
7: Iot6quDpej5Fft4dnAq5g2Dfr7U.roa (hash: 4wp+Nr9HRhgltOy88nTHWn5nX3bmN67l6wHXl99uqwo=)
8: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=)
9: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (hash: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=)
10: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=)
11: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (hash: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=)
12: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: BEUSf1+o+lL8kS8yOlmBP2GP0h4hiVZXRPpkD5W1bAU=)
13: fFywTXucRieRgQK-rFlig22-7Uo.roa (hash: ggPixnLyMlBPlGzjyhzPVyODIw6dgwSYLKKsyn5aAkE=)
14: gwp5niXb2n6kZ0Mq0bpku5SIvP8.roa (hash: /emCX8fFJ82IKSnaJ3WhnFd0eFSX5hHN32PEtlHldBE=)
15: ieQTx6CP3a7pTIIHIMrrAAmEFz0.roa (hash: QqFs1HPccubP6WhcXS31Mxveg00kkTXlQBLQNg73HiQ=)
16: qqAWUHoLAk_vsyL2Er1OBeRgPDg.roa (hash: aQVfFUAR5nktoMvGRzuDLJIaffEsPJN3cf/1slGBVc4=)
17: stSrirvZLoDxIAPnmlfB0EhK5PA.roa (hash: Motxp5oyhMRpNDQnD5sOGrej0tXq+NZwlWTTnbPBjg0=)
18: yB1U4T5fmpdtNry2qKZ6Eu6uIrA.roa (hash: 5oy0QUw7CwkpqTWNf0k0r8HO1zYo7N6JS6SJwrtX3/k=)
19: ywD6PCjjDWy4fZpsDdft6FRxmM0.roa (hash: hAeJd1EZUyPDm9EDT7SaqzqysJ0ol1clqjKlzp128LE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:bc:13:2c:01:cb:e9:c3:94:b1:1f:df:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=8639135d194685c2b7b94a80e96beed69542ee08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:3e:9f:a5:ad:c7:08:87:8b:02:22:f3:d2:
ec:bd:6b:2f:a0:03:af:98:ef:8a:82:a5:d3:95:25:
75:2b:ba:87:80:d0:0a:5d:78:9a:49:df:92:81:2b:
50:37:27:32:50:95:8f:49:98:dd:19:cb:8f:46:20:
c9:26:fa:76:aa:1e:c3:ff:66:81:d2:50:4a:cc:f7:
58:b7:60:62:6f:af:d5:5c:09:84:3b:c1:c8:67:83:
4e:15:66:96:64:d8:74:c2:1f:83:63:d4:6c:c1:ec:
30:a6:66:40:34:d8:35:29:a7:ef:f7:36:71:29:5c:
7b:7b:3c:b5:ad:bf:a8:1f:ad:b3:91:1b:c5:cf:0f:
3d:44:a4:67:24:8b:53:1c:cc:c1:61:84:37:fc:15:
7f:9e:f9:3e:8b:c7:62:21:80:15:56:de:62:3a:b4:
a0:eb:95:e6:f6:d9:79:a2:0a:94:18:fb:ca:85:27:
20:8f:48:f2:58:40:f7:f1:95:68:6b:e5:cb:35:f7:
e8:f3:a6:99:30:9a:74:9d:11:e6:d3:5a:fe:69:55:
4c:0c:6a:d1:bf:65:00:22:31:1b:c5:6e:29:8d:bb:
12:99:8b:56:93:41:17:24:db:a3:e0:bf:42:bc:74:
f5:3e:0a:77:94:bc:05:c7:ab:1f:29:54:04:9d:46:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:13:5D:19:46:85:C2:B7:B9:4A:80:E9:6B:EE:D6:95:42:EE:08
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:04:9c:64:4a:3c:57:87:06:59:dc:b7:f4:25:90:5b:bf:39:
4c:cc:02:d0:6d:bf:d8:25:65:cd:ce:02:8b:17:83:02:13:6f:
28:cb:ce:e0:4a:10:21:fa:b1:02:6f:f3:c4:e4:24:1d:80:0a:
ad:62:ca:ba:55:bd:14:93:21:8c:3a:4e:c8:a7:07:f2:7a:34:
f1:c9:ba:63:b5:22:49:12:eb:5e:9e:d4:2d:fb:21:aa:55:1a:
36:dd:f5:0d:8f:26:5c:12:4a:d7:cb:73:c5:c4:0c:26:60:59:
ea:ce:52:b7:4f:48:49:27:be:cd:5b:37:c2:14:85:be:e4:5f:
de:57:1b:b7:9a:4a:ab:e7:af:f5:e9:67:f6:e5:78:0b:08:e4:
32:a4:d7:55:c7:8f:7d:1e:38:31:1c:7d:6f:a9:40:b0:5d:0e:
f8:32:67:6f:9d:ec:7b:c3:47:33:cf:19:a9:8b:c9:ec:97:84:
03:9c:20:49:ee:00:7f:ea:5d:76:6d:3d:ad:cd:53:8e:86:36:
a2:15:8a:78:51:16:90:8e:e8:31:44:c0:7a:e8:01:3b:27:b1:
87:c8:f5:be:5f:7b:66:25:67:f2:18:09:36:cb:55:fe:43:ca:
e9:3c:8d:41:f9:b8:bc:8d:7e:2f:ab:2b:88:9b:95:7b:9d:07:
bf:4b:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:16 2025 by rpki-client