Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: ZTIrG60T3TPWNIctAgdCGNeSEDZTTW/kgQYqDtHZTnY=
Subject key identifier: BA:94:EF:2A:08:D9:C1:DB:E2:70:71:B2:BF:2E:36:0B:F2:A8:63:47
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 0194BC3C3D75FDCEB51B14444E03A51D910F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 1301
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: mjsUNVwYwaTLrOjzz4M0/fi21SVRqYQ1S8VDIl2G/3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:75:fd:ce:b5:1b:14:44:4e:03:a5:1d:91:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=ba94ef2a08d9c1dbe27071b2bf2e360bf2a86347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:da:aa:81:a0:3e:3d:78:4d:14:7a:e2:33:
ca:57:f6:89:3d:b6:7a:77:8e:df:f7:b9:13:1d:1a:
aa:88:0c:1f:3d:0c:77:0c:83:67:ec:fa:a0:0e:16:
5a:cd:e5:d8:ad:41:62:55:33:21:be:c2:9d:11:f3:
9e:2c:cd:3a:b9:6b:f5:d9:10:04:28:c6:f2:ab:a1:
c6:6b:71:44:50:da:06:e3:26:49:08:36:40:30:25:
c5:96:1a:4f:8a:7d:2d:1d:2d:f5:f1:da:cb:5e:65:
64:b6:a0:4c:66:cb:93:fa:16:ec:e0:ad:86:e1:62:
91:50:af:e1:1d:24:ab:3b:15:54:5f:e7:19:6e:3a:
c0:2a:89:c1:6c:c3:53:e2:4c:fe:d1:8a:a9:42:7b:
91:9c:06:69:ff:43:6d:c3:90:70:54:5c:2e:15:d0:
65:c3:34:5d:9f:fc:05:21:9e:87:55:09:e2:31:86:
61:d5:1a:50:ff:9a:68:81:d8:b3:43:bd:47:25:3d:
aa:c7:f7:40:f0:dc:5d:2c:65:72:2c:82:cf:b5:6e:
63:11:a2:30:30:ba:3a:5d:61:00:44:65:d5:19:2f:
c0:64:76:9c:9f:89:d3:61:96:ed:e0:f7:b0:1a:79:
00:59:c0:a8:99:55:be:64:f3:de:f9:75:cf:3d:c9:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:EF:2A:08:D9:C1:DB:E2:70:71:B2:BF:2E:36:0B:F2:A8:63:47
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:98:7e:23:17:97:f8:f0:2b:2c:0e:af:28:81:0c:1c:ae:b3:
bb:09:87:f6:92:16:f4:a8:f0:04:b2:b0:78:64:80:7e:f2:73:
94:0d:8f:9d:92:ff:e1:f0:07:5b:af:80:80:00:1f:6d:49:24:
7f:b6:e1:8b:d4:50:72:0d:ac:15:ef:b1:2c:54:53:f7:0e:83:
5d:6a:92:15:cf:06:11:c9:41:67:8d:02:11:c7:2a:3a:85:2c:
c6:70:af:f3:01:cc:a5:6f:26:5d:f9:7e:7d:7e:0d:24:72:d6:
47:bc:cd:34:7a:88:21:ab:b8:e0:91:da:b9:87:b9:4e:e2:0e:
81:2f:78:4e:2f:0b:62:72:bd:80:3c:6b:d9:37:e0:0e:6b:ce:
37:6e:c6:39:78:dd:1e:91:2b:a4:da:54:9f:ce:87:6c:56:50:
3b:47:ff:7a:7e:b4:5d:93:fe:b4:24:c2:79:21:42:73:bc:d5:
c5:ee:ac:a8:9d:ed:07:e2:03:4b:ab:fb:5c:61:84:4d:a7:b7:
aa:10:2c:2c:ac:3d:21:4d:62:df:16:a7:2b:c2:33:ba:f0:b0:
95:52:69:6b:a8:a6:16:27:ac:ad:af:18:6f:ad:8a:9b:75:76:
e8:16:72:1e:e9:91:dd:86:f0:98:fc:69:86:55:22:46:90:3b:
af:07:33:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD11/c61GxRETgOlHZEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm
NjIyNGEwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EyhiYTk0ZWYyYTA4ZDljMWRiZTI3MDcxYjJiZjJlMzYwYmYyYTg2MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv33aqoGgPj14TRR64jPKV/aJPbZ6
d47f97kTHRqqiAwfPQx3DINn7PqgDhZazeXYrUFiVTMhvsKdEfOeLM06uWv12RAE
KMbyq6HGa3FEUNoG4yZJCDZAMCXFlhpPin0tHS318drLXmVktqBMZsuT+hbs4K2G
4WKRUK/hHSSrOxVUX+cZbjrAKonBbMNT4kz+0YqpQnuRnAZp/0Ntw5BwVFwuFdBl
wzRdn/wFIZ6HVQniMYZh1RpQ/5pogdizQ71HJT2qx/dA8NxdLGVyLILPtW5jEaIw
MLo6XWEARGXVGS/AZHacn4nTYZbt4PewGnkAWcComVW+ZPPe+XXPPclwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqU7yoI2cHb4nBxsr8uNgvyqGNHMB8GA1UdIwQY
MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt
YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1
LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZph+IxeX
+PArLA6vKIEMHK6zuwmH9pIW9KjwBLKweGSAfvJzlA2PnZL/4fAHW6+AgAAfbUkk
f7bhi9RQcg2sFe+xLFRT9w6DXWqSFc8GEclBZ40CEccqOoUsxnCv8wHMpW8mXfl+
fX4NJHLWR7zNNHqIIau44JHauYe5TuIOgS94Ti8LYnK9gDxr2TfgDmvON27GOXjd
HpErpNpUn86HbFZQO0f/en60XZP+tCTCeSFCc7zVxe6sqJ3tB+IDS6v7XGGETae3
qhAsLKw9IU1i3xanK8IzuvCwlVJpa6imFiesra8Yb62Km3V26BZyHumR3YbwmPxp
hlUiRpA7rwczqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:55 2025 by rpki-client