Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: 4bwJF/0+lfzr9H9ocTzKs41xSGmD1fSr0WhH4FfAkE4=
Subject key identifier: A6:C5:E7:0A:07:0E:24:E0:06:4A:A0:E2:7D:7F:65:AC:6F:EC:53:B9
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 0194BC72FBDA0036A09E01F4E1854817F21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: K0elnSjthwyDpqUrzqz0WWkS5i4.roa (hash: gy/lZpvudI4NuVtj5Cr7txBBixWEIa8xyvy8FV7O+jc=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: O3Vqh73KUxJIIF2NNYMP7yt7n1BuMcQlzIYlivmWUqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:da:00:36:a0:9e:01:f4:e1:85:48:17:f2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=a6c5e70a070e24e0064aa0e27d7f65ac6fec53b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:97:b6:07:4d:47:0a:2b:56:d2:7c:d1:69:
30:e7:4a:46:7d:26:1b:79:d7:1a:f3:c4:29:43:c7:
18:8e:8e:06:75:99:73:9f:55:ca:9d:7f:53:69:f6:
cb:04:4d:3b:5b:25:fa:02:a2:e2:a9:d6:b5:e5:80:
98:8a:5e:94:43:ab:57:43:12:24:db:72:91:cc:52:
81:3d:3a:4d:30:1a:35:5d:a9:2f:cf:88:97:51:4f:
67:3e:63:36:b2:1a:f3:ac:d4:e3:5b:24:56:36:c3:
50:92:03:8b:48:e9:f1:c5:5e:1d:dc:c9:57:9d:e3:
9d:b5:8c:f3:c5:98:50:a7:84:c4:55:99:52:a7:64:
10:47:1c:6e:b4:44:a8:c7:09:b6:27:84:dd:44:51:
93:06:0b:5d:31:3f:35:aa:d7:00:b6:25:32:b8:14:
0b:e8:d6:8f:d3:55:85:a2:5e:17:6d:38:af:61:1c:
52:67:e1:75:3f:b1:a8:26:e2:a3:f1:76:d0:45:00:
b0:b9:44:bb:2d:43:65:19:4b:61:bd:1e:26:bb:6d:
5b:d0:60:d6:7c:35:13:02:f6:c6:49:e3:5d:d6:56:
ba:22:f8:13:57:67:cb:37:be:f0:f7:e2:2f:2c:87:
32:ea:37:a0:fe:51:11:19:cd:e0:b2:67:54:b7:96:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:E7:0A:07:0E:24:E0:06:4A:A0:E2:7D:7F:65:AC:6F:EC:53:B9
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:43:57:75:7f:e7:2e:89:6c:49:75:fc:e0:2c:38:62:93:
53:e0:a6:85:30:1d:cb:8e:e1:4d:22:bd:c8:fd:59:3c:8e:08:
74:a7:98:ab:c7:87:d6:e8:b2:5d:6d:d2:da:e4:10:c2:44:27:
54:b9:6d:d0:68:95:6b:f0:aa:51:22:6d:fc:b0:5b:39:b0:da:
19:32:c7:35:fa:ca:78:23:5f:91:48:63:2e:e1:f3:70:cb:b8:
45:ee:32:0d:b7:e4:7e:ed:a3:fe:2e:d6:9a:92:a7:e0:ba:79:
cd:49:80:95:41:ef:34:7a:08:64:69:88:51:71:2d:74:95:92:
40:b9:66:f2:b1:c2:ce:c7:49:21:d9:c2:be:1b:4a:81:9a:ee:
bb:8c:19:67:d2:8b:e7:73:bb:2c:0b:c9:0d:80:6e:03:36:f5:
34:34:e7:09:ce:dc:80:89:94:8d:cf:35:f9:42:d3:32:c4:f7:
aa:dd:ee:a0:c9:8d:a9:72:54:42:6b:0e:e9:84:dd:e1:a8:c4:
e7:91:94:82:6f:76:30:be:7d:45:79:d8:32:f4:f2:95:3e:42:
be:2f:08:4a:0e:43:19:b6:c5:1c:3c:d2:60:bb:12:0a:4b:4f:
ad:ee:34:13:b9:08:be:98:66:07:be:53:14:9a:24:08:7f:ec:
69:10:0c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvvaADagngH04YVIF/IeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMxMDY2ZWE4ZmUyMGIwNjdhMTM2MDA2YjdhZjkwNjYz
Mzg0M2IwHhcNMjUwMTMxMTMwMDM5WhcNMjUwMjAxMTMwMDM5WjAzMTEwLwYDVQQD
EyhhNmM1ZTcwYTA3MGUyNGUwMDY0YWEwZTI3ZDdmNjVhYzZmZWM1M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1COXtgdNRworVtJ80Wkw50pGfSYb
edca88QpQ8cYjo4GdZlzn1XKnX9TafbLBE07WyX6AqLiqda15YCYil6UQ6tXQxIk
23KRzFKBPTpNMBo1Xakvz4iXUU9nPmM2shrzrNTjWyRWNsNQkgOLSOnxxV4d3MlX
neOdtYzzxZhQp4TEVZlSp2QQRxxutESoxwm2J4TdRFGTBgtdMT81qtcAtiUyuBQL
6NaP01WFol4XbTivYRxSZ+F1P7GoJuKj8XbQRQCwuUS7LUNlGUthvR4mu21b0GDW
fDUTAvbGSeNd1la6IvgTV2fLN77w9+IvLIcy6jeg/lERGc3gsmdUt5bFAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbF5woHDiTgBkqg4n1/Zaxv7FO5MB8GA1UdIwQY
MBaAFG6DEGbqj+ILBnoTYAa3r5BmM4Q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYt
MmE0ZGQyM2EyZjlhLzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iZDE5ZmQtZjM2OS00MmJmLTkyNmYtMmE0ZGQyM2EyZjlh
LzEvYm9NUVp1cVA0Z3NHZWhOZ0JyZXZrR1l6aERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0NDV3V/
5y6JbEl1/OAsOGKTU+CmhTAdy47hTSK9yP1ZPI4IdKeYq8eH1uiyXW3S2uQQwkQn
VLlt0GiVa/CqUSJt/LBbObDaGTLHNfrKeCNfkUhjLuHzcMu4Re4yDbfkfu2j/i7W
mpKn4Lp5zUmAlUHvNHoIZGmIUXEtdJWSQLlm8rHCzsdJIdnCvhtKgZruu4wZZ9KL
53O7LAvJDYBuAzb1NDTnCc7cgImUjc81+ULTMsT3qt3uoMmNqXJUQmsO6YTd4ajE
55GUgm92ML59RXnYMvTylT5Cvi8ISg5DGbbFHDzSYLsSCktPre40E7kIvphmB75T
FJokCH/saRAM7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:42 2025 by rpki-client