Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
File: BuSteIiwjKRTVje2CLt9whSmYk8.mft (raw, json)
Hash identifier: mhZNf93pQlEL0tL+bRxhIJQBbF7Oyesv6ZoxPJhN3Nw=
Subject key identifier: 8A:88:A4:14:D9:96:A0:0D:B5:AF:CB:7F:DB:39:19:12:1D:C9:2B:C9
Authority key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Certificate issuer: /CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Certificate serial: 0194BC3C6825B0CF7930FCCF2B18FBB9EDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
Manifest number: 0CC7
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: BuSteIiwjKRTVje2CLt9whSmYk8.crl (hash: AldOU/zM9qCmji56xbOmPUanw+sPCPNG1XY1tb09ExM=)
2: VeL5y4HMpx5YD59QdPaTm74Prfk.roa (hash: taJ8G/3jFfT5cHTT2DaciKHSFKOOu8+sE2xtCaVUK1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:25:b0:cf:79:30:fc:cf:2b:18:fb:b9:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=8a88a414d996a00db5afcb7fdb3919121dc92bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:eb:90:a8:01:81:f3:28:45:c8:c4:0b:34:
b1:b0:c3:1b:70:17:46:1c:a1:7a:59:38:18:b4:99:
4d:2e:48:a6:18:89:3a:be:4e:84:a4:27:da:63:19:
b2:19:b0:d7:2d:00:01:1c:eb:0c:bb:9b:45:9e:b0:
8d:d8:d8:e1:b0:16:ec:29:2d:e8:d8:71:29:c4:0a:
c6:8b:ea:0c:0f:26:de:c1:cb:0e:da:50:ec:63:bf:
3c:0f:5c:e6:1c:5b:2f:b1:ba:4e:af:48:79:0f:62:
b4:d1:e3:e7:e2:20:97:11:fc:85:e6:6e:a0:73:20:
2c:a2:06:34:68:e9:0e:78:27:6a:be:71:f9:cd:a1:
58:6e:b8:87:a3:d5:e5:dc:1b:f7:00:75:40:5b:e2:
59:08:16:41:3e:55:30:d6:00:d4:de:26:eb:3f:35:
71:8f:e1:3c:be:80:a1:6b:5e:0d:2c:be:6b:85:8f:
98:93:ae:15:ed:32:00:7f:6c:98:cd:f9:d0:bd:e5:
e6:d0:68:a8:09:30:8a:49:48:11:8e:0d:13:fe:28:
eb:67:3e:94:11:4a:88:f4:33:7f:d3:1e:5d:01:63:
75:c6:7b:37:71:d0:03:f0:f2:1d:67:04:03:9d:e3:
ab:7a:6a:59:11:00:cc:1f:70:f7:98:e7:d7:98:7c:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:A4:14:D9:96:A0:0D:B5:AF:CB:7F:DB:39:19:12:1D:C9:2B:C9
X509v3 Authority Key Identifier:
keyid:06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:21:c4:87:48:27:d7:2c:d3:8e:78:1a:ff:e2:8b:fd:cb:aa:
0b:65:91:3b:74:db:b1:16:77:df:ee:b9:a0:b9:14:bb:38:01:
b6:8e:65:72:14:b8:d2:c0:90:7b:2c:ef:f9:de:d5:94:e1:0f:
8c:d8:6f:cf:2e:a8:2b:8e:4c:f4:66:d8:4c:44:e1:12:1f:95:
d8:a9:93:23:45:21:98:b0:f1:d2:bb:47:38:cc:46:47:87:e7:
3f:45:e7:1a:1d:16:ed:60:7b:9a:0d:62:45:7c:ff:30:98:e5:
64:c8:9b:b6:43:c5:dd:a8:50:38:80:7f:d9:b5:ef:59:53:80:
b8:41:cb:54:d4:1c:39:24:82:47:55:27:9b:40:bf:46:9a:cf:
f8:8d:28:fb:06:ef:1b:20:4a:31:0d:15:13:d1:01:d8:4b:2b:
75:6b:5b:db:02:7d:a7:9c:d6:3c:40:ff:b5:36:83:28:b3:c8:
e4:12:47:90:d4:a8:d7:8a:2f:f5:3d:ff:28:b5:95:b3:10:2a:
65:1c:1e:0d:ba:40:80:17:3e:2d:4b:b7:0e:d7:42:3b:99:09:
e7:e8:fb:da:6c:2d:ec:d3:3f:39:1b:10:08:ee:fa:5f:32:2d:
c2:78:83:a6:1d:17:dc:65:c0:83:12:56:3c:f8:2b:c6:1d:20:
ba:40:2a:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGglsM95MPzPKxj7ue3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRhZDc4ODhiMDhjYTQ1MzU2MzdiNjA4YmI3ZGMyMTRh
NjYyNGYwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
Eyg4YTg4YTQxNGQ5OTZhMDBkYjVhZmNiN2ZkYjM5MTkxMjFkYzkyYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBrrkKgBgfMoRcjECzSxsMMbcBdG
HKF6WTgYtJlNLkimGIk6vk6EpCfaYxmyGbDXLQABHOsMu5tFnrCN2NjhsBbsKS3o
2HEpxArGi+oMDybewcsO2lDsY788D1zmHFsvsbpOr0h5D2K00ePn4iCXEfyF5m6g
cyAsogY0aOkOeCdqvnH5zaFYbriHo9Xl3Bv3AHVAW+JZCBZBPlUw1gDU3ibrPzVx
j+E8voCha14NLL5rhY+Yk64V7TIAf2yYzfnQveXm0GioCTCKSUgRjg0T/ijrZz6U
EUqI9DN/0x5dAWN1xns3cdAD8PIdZwQDneOrempZEQDMH3D3mOfXmHwuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqIpBTZlqANta/Lf9s5GRIdySvJMB8GA1UdIwQY
MBaAFAbkrXiIsIykU1Y3tgi7fcIUpmJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNTE3ZTQtYjQyZS00NDA5LWIxZmYt
MDkyZTI2MzM0MDI2LzEvQnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9mNTE3ZTQtYjQyZS00NDA5LWIxZmYtMDkyZTI2MzM0MDI2
LzEvQnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyHEh0gn
1yzTjnga/+KL/cuqC2WRO3TbsRZ33+65oLkUuzgBto5lchS40sCQeyzv+d7VlOEP
jNhvzy6oK45M9GbYTEThEh+V2KmTI0UhmLDx0rtHOMxGR4fnP0XnGh0W7WB7mg1i
RXz/MJjlZMibtkPF3ahQOIB/2bXvWVOAuEHLVNQcOSSCR1Unm0C/RprP+I0o+wbv
GyBKMQ0VE9EB2EsrdWtb2wJ9p5zWPED/tTaDKLPI5BJHkNSo14ov9T3/KLWVsxAq
ZRweDbpAgBc+LUu3DtdCO5kJ5+j72mwt7NM/ORsQCO76XzItwniDph0X3GXAgxJW
PPgrxh0gukAqwg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:33 2025 by rpki-client