Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File: bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier: d3A2ssoTlGaEk49b05hYZjrq/PFmtJucGV0z8HhkbpU=
Subject key identifier: CC:84:DD:AC:FA:BE:98:68:83:79:E4:BD:4B:D3:85:BF:ED:F5:1A:C3
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer: /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial: 0194BCE091E8FC4ED954982B350431E3DDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=)
2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: eUXVKkT0aziObIaVSqDVDSzIXCsfgz4vRpVlqu7lh9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:e8:fc:4e:d9:54:98:2b:35:04:31:e3:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=cc84ddacfabe98688379e4bd4bd385bfedf51ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:a6:75:4b:18:2d:86:4e:75:2e:73:6b:ce:
ad:72:a1:93:d1:c2:22:b2:b6:ac:c9:88:9b:90:aa:
bd:bf:48:72:ec:05:4a:7d:d9:10:a2:c6:a4:74:0d:
ad:8b:c6:7e:95:42:d4:fa:57:55:ee:bd:d0:56:01:
e5:68:81:70:23:84:33:44:70:94:db:44:a7:fa:37:
d0:37:a3:3d:1b:78:12:d5:8e:ac:6c:d5:5d:52:1d:
c7:bb:f7:d8:71:c6:03:40:50:e0:01:11:5a:f4:3b:
87:59:78:63:63:dd:4b:a7:bc:25:e8:3c:c7:85:d5:
86:b7:c4:6f:f7:7e:0a:b9:02:b9:88:b4:f5:98:33:
e5:9e:87:d8:05:54:94:62:4d:51:e0:ab:d5:6f:41:
0a:d4:8c:d9:e0:fe:07:b6:04:36:f3:60:fa:72:4d:
93:c6:cf:6a:14:5c:4d:58:ff:53:42:68:77:c3:d1:
b9:b5:9c:68:2e:b0:12:4b:89:c2:b0:b9:89:e7:a6:
de:c4:0f:60:66:fd:d3:b9:fe:70:35:3e:22:bf:0e:
6f:0b:09:ca:00:49:c0:93:1a:ad:10:15:b6:d4:40:
fb:e5:87:0e:93:5d:df:d7:98:26:7b:a7:b0:37:33:
e8:52:01:a3:36:51:55:ba:5a:cf:59:40:00:6c:09:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:DD:AC:FA:BE:98:68:83:79:E4:BD:4B:D3:85:BF:ED:F5:1A:C3
X509v3 Authority Key Identifier:
keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:32:08:a7:4f:99:c1:45:9f:40:f9:53:3c:3e:81:85:2b:35:
ef:5d:07:66:f8:fb:25:31:63:1b:db:94:51:65:bf:68:d9:56:
94:53:07:8c:33:45:26:51:14:77:2a:60:02:fd:fd:cd:bc:4d:
37:c6:8f:d1:dd:76:d3:af:b8:f7:7a:e5:2f:04:11:55:db:cb:
42:7c:24:20:bd:5e:4c:b1:d7:c5:24:7d:80:11:a8:03:c5:4b:
e1:af:55:d5:04:05:3b:39:51:f1:f3:cc:5f:56:38:9a:6b:f9:
bc:c4:cb:9f:85:03:7e:ca:05:77:c9:c3:34:3a:4d:6c:0e:80:
a0:0b:4f:12:1f:9f:82:9c:a5:2a:de:9b:5c:83:10:49:e6:1c:
33:d8:9a:f5:5a:a0:66:f6:a5:a5:b8:9d:0e:2e:02:58:9f:da:
49:5b:5c:e4:11:c2:b2:28:bb:ff:42:47:1a:23:01:2b:74:51:
01:ea:57:70:e4:3b:96:cd:f5:f7:75:09:82:68:1b:14:3c:76:
dd:8c:90:05:6b:b8:24:b1:9b:79:1d:b6:72:e0:b6:58:46:50:
ea:84:10:b3:e2:73:79:db:bf:82:93:51:e0:87:25:41:39:53:
2a:2e:88:74:bb:a3:28:9b:73:70:b0:bd:6a:be:5a:c5:a6:e2:
d1:eb:76:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JHo/E7ZVJgrNQQx4921MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOWZmNGE1M2EzZGIwZjQzMjgyMGNkNzM3ZDU0M2Y4Njdh
OTcyZDgwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
EyhjYzg0ZGRhY2ZhYmU5ODY4ODM3OWU0YmQ0YmQzODViZmVkZjUxYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopymdUsYLYZOdS5za86tcqGT0cIi
srasyYibkKq9v0hy7AVKfdkQosakdA2ti8Z+lULU+ldV7r3QVgHlaIFwI4QzRHCU
20Sn+jfQN6M9G3gS1Y6sbNVdUh3Hu/fYccYDQFDgARFa9DuHWXhjY91Lp7wl6DzH
hdWGt8Rv934KuQK5iLT1mDPlnofYBVSUYk1R4KvVb0EK1IzZ4P4HtgQ282D6ck2T
xs9qFFxNWP9TQmh3w9G5tZxoLrASS4nCsLmJ56bexA9gZv3Tuf5wNT4ivw5vCwnK
AEnAkxqtEBW21ED75YcOk13f15gme6ewNzPoUgGjNlFVulrPWUAAbAk1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyE3az6vphog3nkvUvThb/t9RrDMB8GA1UdIwQY
MBaAFG2f9KU6PbD0MoIM1zfVQ/hnqXLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3Zjct
ZTE2OGRiMmM1NGI0LzEvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82MTk3OWEtZWE4My00ZWU3LWI3ZjctZTE2OGRiMmM1NGI0
LzEvYlpfMHBUbzlzUFF5Z2d6WE45VkQtR2VwY3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITIIp0+Z
wUWfQPlTPD6BhSs1710HZvj7JTFjG9uUUWW/aNlWlFMHjDNFJlEUdypgAv39zbxN
N8aP0d1206+493rlLwQRVdvLQnwkIL1eTLHXxSR9gBGoA8VL4a9V1QQFOzlR8fPM
X1Y4mmv5vMTLn4UDfsoFd8nDNDpNbA6AoAtPEh+fgpylKt6bXIMQSeYcM9ia9Vqg
ZvalpbidDi4CWJ/aSVtc5BHCsii7/0JHGiMBK3RRAepXcOQ7ls3193UJgmgbFDx2
3YyQBWu4JLGbeR22cuC2WEZQ6oQQs+Jzedu/gpNR4IclQTlTKi6IdLujKJtzcLC9
ar5axabi0et2Aw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:11 2025 by rpki-client