Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: S1zwVAgDndvMdiUiNWlFSnLo+Z8S675Wa8mwtR0WIMk=
Subject key identifier: 20:9D:0F:A5:03:88:A6:AE:C1:34:D8:05:FF:0C:34:63:2E:63:CE:81
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 0194BD4E5DDC7F2CDD6B04B99A1FFF66E43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 3Cf0RXkylWqXZOdH4ZmGRxRiMLP9sbizApjflt+P71M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:dc:7f:2c:dd:6b:04:b9:9a:1f:ff:66:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=209d0fa50388a6aec134d805ff0c34632e63ce81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:b7:03:ee:c6:f8:bb:0a:59:12:23:1a:1e:
c1:35:9e:28:dc:92:1a:bb:25:63:0e:08:b8:d8:ee:
4c:9b:3f:b1:e6:9a:9e:76:9b:61:ba:94:13:e9:b5:
08:6b:c7:e7:5e:fa:98:cd:a4:ce:c5:49:54:78:73:
69:4f:3e:d7:71:29:22:86:b1:ec:21:e4:01:d8:7a:
34:8c:7b:c3:41:2e:9c:8f:35:7c:1e:47:8c:09:b5:
9f:30:84:6e:ec:5a:c5:b0:ae:17:62:59:bf:8d:89:
47:cb:05:dc:10:35:10:0c:ac:bc:57:49:34:11:c5:
31:11:27:b8:55:50:f5:bb:37:87:1f:db:57:85:c8:
86:5e:f1:a5:57:48:85:67:e2:bc:d7:d5:81:ed:7b:
6b:28:26:fc:d0:89:55:82:cc:3e:9b:06:ea:3f:d1:
11:8e:80:b7:d8:b4:2e:28:54:0f:4e:61:82:de:76:
41:30:14:e6:01:4d:a9:90:9d:e4:8e:89:fc:f8:f3:
da:66:4c:d9:9e:2d:5f:8e:7f:56:75:37:0a:f0:0e:
f4:fa:7c:2f:26:9a:c8:83:c9:5a:4f:72:00:65:4e:
17:56:c9:25:2d:5b:cd:cb:8c:0b:37:39:cc:7d:f2:
d1:fb:7f:48:41:20:16:3c:17:12:da:09:2a:2d:bf:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9D:0F:A5:03:88:A6:AE:C1:34:D8:05:FF:0C:34:63:2E:63:CE:81
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:c8:af:51:8f:05:fb:eb:59:10:6e:09:5c:e7:b3:e6:81:
e6:59:04:dd:72:ea:7a:e3:24:f3:96:0b:c5:97:ef:26:87:67:
a6:80:f4:ee:77:d5:63:d3:d9:58:02:1b:d1:40:00:27:f3:c5:
22:1f:e9:42:4b:f7:13:c5:08:bb:f1:27:09:64:f2:0a:1e:99:
de:4b:83:d6:14:00:60:f9:2a:ba:cd:ae:68:e9:00:3a:00:ce:
b0:b8:17:48:c8:33:23:cf:2a:6f:1f:de:8a:60:fd:d8:6a:e5:
25:f8:48:cf:fc:68:56:bb:be:7b:e0:3b:e5:a6:73:e7:e9:b6:
28:b3:9a:f8:84:74:ce:66:a5:ba:57:7b:6d:96:7a:78:8d:d5:
20:39:a4:8d:6a:e8:6f:08:a9:a0:de:12:2b:50:b3:93:2a:55:
a5:cb:95:4e:54:48:08:26:96:69:d5:e9:ac:88:f0:1d:89:76:
bc:75:cb:92:ff:96:ec:02:17:b1:f3:ec:6a:72:d3:1a:d9:7b:
de:f2:b0:11:8e:f5:6a:99:a2:9f:6b:48:f7:d0:03:5c:e8:15:
f0:76:d0:01:a4:a9:0f:1b:e1:86:2b:c1:fa:ec:76:d5:b2:5d:
3a:ff:73:47:c5:be:b9:83:e0:0d:59:14:b5:3a:d3:b8:bc:18:
9a:06:83:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tl3cfyzdawS5mh//ZuQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw
MmFlODIwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
EygyMDlkMGZhNTAzODhhNmFlYzEzNGQ4MDVmZjBjMzQ2MzJlNjNjZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsm3A+7G+LsKWRIjGh7BNZ4o3JIa
uyVjDgi42O5Mmz+x5pqedpthupQT6bUIa8fnXvqYzaTOxUlUeHNpTz7XcSkihrHs
IeQB2Ho0jHvDQS6cjzV8HkeMCbWfMIRu7FrFsK4XYlm/jYlHywXcEDUQDKy8V0k0
EcUxESe4VVD1uzeHH9tXhciGXvGlV0iFZ+K819WB7XtrKCb80IlVgsw+mwbqP9ER
joC32LQuKFQPTmGC3nZBMBTmAU2pkJ3kjon8+PPaZkzZni1fjn9WdTcK8A70+nwv
JprIg8laT3IAZU4XVsklLVvNy4wLNznMffLR+39IQSAWPBcS2gkqLb8aHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCdD6UDiKauwTTYBf8MNGMuY86BMB8GA1UdIwQY
MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt
ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5
LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+PIr1GP
BfvrWRBuCVzns+aB5lkE3XLqeuMk85YLxZfvJodnpoD07nfVY9PZWAIb0UAAJ/PF
Ih/pQkv3E8UIu/EnCWTyCh6Z3kuD1hQAYPkqus2uaOkAOgDOsLgXSMgzI88qbx/e
imD92GrlJfhIz/xoVru+e+A75aZz5+m2KLOa+IR0zmaluld7bZZ6eI3VIDmkjWro
bwipoN4SK1CzkypVpcuVTlRICCaWadXprIjwHYl2vHXLkv+W7AIXsfPsanLTGtl7
3vKwEY71apmin2tI99ADXOgV8HbQAaSpDxvhhivB+ux21bJdOv9zR8W+uYPgDVkU
tTrTuLwYmgaDMw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:30 2025 by rpki-client