Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: qs9HDytpXgTRX9he+DDlpXh/IGvqq1Mix/Zc+6/s8WY=
Subject key identifier: DC:7E:7D:4B:D1:F5:56:CC:1F:48:0B:B0:AF:18:D3:17:44:3D:36:62
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 0194BCA96DB854B45A99F2A36D0FBC7F47FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: sLXuQ9YkBjfKQRV8phIaaJ6Tn0YQmxOeEpNe6oLHm80=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:b8:54:b4:5a:99:f2:a3:6d:0f:bc:7f:47:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=dc7e7d4bd1f556cc1f480bb0af18d317443d3662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:57:60:b0:89:b4:c3:52:bd:9f:50:d1:f0:
b9:3a:47:bf:e6:0c:d5:f0:0c:24:63:6b:0e:cf:68:
d5:d1:19:83:f3:84:e7:df:88:a8:6e:91:25:b1:ae:
5a:ba:50:1b:7e:b7:a8:8d:0e:73:f8:8f:a0:18:1c:
95:21:98:57:7e:8a:6f:e3:c1:0b:09:92:45:e2:60:
3a:92:14:a3:c5:37:1c:ae:3a:dc:03:c2:a7:d8:9e:
c8:00:4e:33:2b:30:31:7a:f9:02:3d:d3:04:a4:b7:
0e:02:8b:92:e2:0a:6a:a9:1c:3b:40:36:f9:79:52:
fa:79:7e:d0:76:ce:cb:a9:1b:63:40:fa:f8:24:5f:
30:73:de:0c:87:20:19:0b:98:8a:62:5c:bf:d9:d2:
01:50:f0:5c:0e:83:27:44:0f:79:ad:32:04:56:9d:
0d:a0:1b:04:25:95:5f:0a:c9:c0:21:d8:46:bb:ed:
d0:43:c8:4e:46:a0:db:a0:54:44:71:a5:61:3c:b8:
4d:bd:68:27:26:68:8c:ad:b6:fe:75:ba:9d:5b:60:
d5:f3:5b:18:ae:b4:42:2d:cc:70:56:1d:5f:37:86:
fc:d2:2c:98:a5:3d:cf:f0:f9:ae:33:4e:5d:87:1a:
42:0c:3c:d9:4d:75:e8:f0:0d:83:52:30:1a:fd:9e:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:7D:4B:D1:F5:56:CC:1F:48:0B:B0:AF:18:D3:17:44:3D:36:62
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:44:3f:1e:f6:33:ab:f2:55:16:fd:8d:c0:b1:8c:16:b8:8a:
d9:fe:bd:95:76:b0:6a:a1:82:98:80:a9:8b:85:d0:80:80:ba:
0e:58:3c:fd:67:a5:bd:d7:f7:a5:8a:b4:8b:6b:ad:b0:e9:c8:
c6:9d:b9:87:64:cc:be:28:6e:f0:05:06:ab:47:a9:e9:b0:60:
99:05:ea:af:70:40:a9:98:c5:29:9f:35:f5:42:cb:98:d1:bf:
0a:8d:1e:8d:88:de:1e:1c:ed:b7:88:c7:bb:9d:54:11:66:5a:
9f:0b:55:1e:4b:1c:23:58:70:d0:40:fe:da:d2:6e:72:a7:b6:
77:fe:6c:ff:1e:7e:61:24:5b:83:46:b5:90:e2:a4:6c:3f:f2:
8b:5a:7d:81:e2:58:61:cd:bc:7b:00:45:6d:e4:a8:19:22:bb:
93:65:e7:8e:da:70:28:b1:44:c2:7a:41:4f:9e:1a:96:68:6e:
ba:77:b3:3d:e7:6d:48:06:78:d8:73:79:31:a8:06:49:d8:03:
12:fa:a8:e5:4a:61:a2:b1:2b:0a:67:8b:30:ca:7d:b8:98:23:
ef:55:e5:e4:4f:76:c7:a0:6c:5e:e9:8d:38:4f:cc:70:9b:c1:
b5:0b:da:3d:f2:e1:19:4d:5f:7f:a3:f1:36:de:12:7f:6f:46:
0d:43:64:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qW24VLRamfKjbQ+8f0f8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjczNjc2ZmFiYWYxMjA1NmVkYmI5Yzc5ZDcxNTRmZWRl
MDFmMmMwHhcNMjUwMTMxMTQwMDA3WhcNMjUwMjAxMTQwMDA3WjAzMTEwLwYDVQQD
EyhkYzdlN2Q0YmQxZjU1NmNjMWY0ODBiYjBhZjE4ZDMxNzQ0M2QzNjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41XYLCJtMNSvZ9Q0fC5Oke/5gzV
8AwkY2sOz2jV0RmD84Tn34iobpElsa5aulAbfreojQ5z+I+gGByVIZhXfopv48EL
CZJF4mA6khSjxTccrjrcA8Kn2J7IAE4zKzAxevkCPdMEpLcOAouS4gpqqRw7QDb5
eVL6eX7Qds7LqRtjQPr4JF8wc94MhyAZC5iKYly/2dIBUPBcDoMnRA95rTIEVp0N
oBsEJZVfCsnAIdhGu+3QQ8hORqDboFREcaVhPLhNvWgnJmiMrbb+dbqdW2DV81sY
rrRCLcxwVh1fN4b80iyYpT3P8PmuM05dhxpCDDzZTXXo8A2DUjAa/Z727wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNx+fUvR9VbMH0gLsK8Y0xdEPTZiMB8GA1UdIwQY
MBaAFLq3Nnb6uvEgVu27nHnXFU/t4B8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85M2Y4ZmItZDQyNC00ZGFiLTlhMGUt
MGY1YmUyMjRmODIwLzEvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85M2Y4ZmItZDQyNC00ZGFiLTlhMGUtMGY1YmUyMjRmODIw
LzEvdXJjMmR2cTY4U0JXN2J1Y2VkY1ZULTNnSHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0Q/HvYz
q/JVFv2NwLGMFriK2f69lXawaqGCmICpi4XQgIC6Dlg8/Welvdf3pYq0i2utsOnI
xp25h2TMvihu8AUGq0ep6bBgmQXqr3BAqZjFKZ819ULLmNG/Co0ejYjeHhztt4jH
u51UEWZanwtVHkscI1hw0ED+2tJucqe2d/5s/x5+YSRbg0a1kOKkbD/yi1p9geJY
Yc28ewBFbeSoGSK7k2XnjtpwKLFEwnpBT54almhuunezPedtSAZ42HN5MagGSdgD
Evqo5UphorErCmeLMMp9uJgj71Xl5E92x6BsXumNOE/McJvBtQvaPfLhGU1ff6Px
Nt4Sf29GDUNk1w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:43 2025 by rpki-client