Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
File: _BfLzO42sk7L1GP30QKrxP5A4U0.mft (raw, json)
Hash identifier: hzQs93PgDve5XEaqfba1spwS4USV7TnKrJAy9+3RLmE=
Subject key identifier: D1:0C:58:9B:5A:3E:23:6F:D8:CB:71:AF:6E:84:5D:BD:69:96:97:5A
Authority key identifier: FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
Certificate issuer: /CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Certificate serial: 0194BBCDFB881098034714A9517F9F7DA1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
Manifest number: 112D
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: _BfLzO42sk7L1GP30QKrxP5A4U0.crl (hash: vNdGuGuuMgFQv4VbV6ur3qNAJB74f+les5BW+mHWZbA=)
2: tJwISkQYqLHEilM1B5xtrHKBtrs.roa (hash: QQm9O9ciyqlGIn1eEAWaXdioEbF5c6krD1izvlymivs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:88:10:98:03:47:14:a9:51:7f:9f:7d:a1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc17cbccee36b24ecbd463f7d102abc4fe40e14d
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=d10c589b5a3e236fd8cb71af6e845dbd6996975a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6d:26:18:8a:49:1d:a7:6e:b9:24:15:ea:49:
46:17:0f:ed:64:c2:70:e8:56:fa:87:31:01:4b:ad:
8b:4a:e7:ad:3d:17:0a:cd:fc:98:db:99:7d:2e:cc:
b6:6d:51:f9:8a:33:b0:7b:d0:60:5a:fc:03:4a:ed:
cc:63:20:25:de:d9:30:36:86:b0:9f:25:38:ff:79:
d9:96:4d:ff:b1:7a:ee:07:ec:f6:af:20:5f:b8:40:
c8:79:43:77:95:19:27:37:e6:df:5f:4e:23:3d:69:
d4:1b:32:94:e5:f4:f6:0d:2c:18:7f:31:c4:da:bb:
ce:e4:9a:59:bc:8b:7f:03:a2:6d:db:53:ac:f2:c4:
da:f6:83:e0:0e:19:cb:9f:77:7d:37:3f:09:d0:24:
ee:36:de:33:ec:7d:66:e1:9a:e6:89:dd:7b:e0:7e:
95:39:6b:b2:81:04:05:d5:79:90:c2:82:e5:4e:00:
65:20:20:10:5a:a5:93:34:58:8a:85:6e:08:cb:49:
1d:b7:c0:d2:8a:f3:e1:b0:36:32:6d:05:5c:48:62:
4c:c0:1a:9a:7e:3c:d7:7a:d9:7c:a0:d3:91:fb:5f:
01:42:8c:3f:a8:65:ad:96:ca:17:f1:79:5c:50:1f:
70:97:1a:be:bb:c0:f9:47:78:b6:b6:e9:c5:2c:88:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:58:9B:5A:3E:23:6F:D8:CB:71:AF:6E:84:5D:BD:69:96:97:5A
X509v3 Authority Key Identifier:
keyid:FC:17:CB:CC:EE:36:B2:4E:CB:D4:63:F7:D1:02:AB:C4:FE:40:E1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BfLzO42sk7L1GP30QKrxP5A4U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7fd12f-b054-4dd2-9d87-1365875c7e85/1/_BfLzO42sk7L1GP30QKrxP5A4U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:9a:aa:f0:1b:8b:45:94:98:ba:16:0c:6b:9d:8e:24:9d:
9e:67:a9:2c:f4:38:3a:96:41:1d:72:c5:97:41:fc:cf:db:ef:
34:50:bd:87:33:cb:8c:a5:92:b3:37:d7:33:9c:88:c0:7e:45:
42:74:1a:ae:79:a6:9f:f2:e4:ba:9a:28:60:04:b3:b6:71:79:
ea:79:61:93:99:d0:6f:32:16:60:f7:13:50:11:42:1a:90:e0:
be:83:58:54:56:1a:36:41:5e:d9:ed:bb:c6:c1:a8:64:4a:b4:
bd:57:88:f0:78:f4:b0:5b:fb:43:99:8f:29:95:9f:b6:27:dd:
74:43:aa:07:bd:8f:b3:6f:f6:37:8d:c2:6d:16:5b:0a:20:4e:
4d:9a:ef:7d:ac:05:5e:9d:c4:2a:cd:9b:9e:ac:97:9a:08:11:
54:f1:87:dc:9e:03:7e:ec:27:79:b7:01:91:0c:36:2c:34:c9:
a1:2c:78:77:8a:78:bb:1c:ad:d5:c0:40:b5:4b:5d:35:4b:d5:
ee:bc:d0:51:91:b4:01:bf:69:ff:d0:6f:37:a0:3a:12:d3:c8:
51:63:98:ad:12:55:53:d2:43:b4:b6:23:b0:a2:53:f4:fa:70:
81:5f:66:9b:2c:7b:90:21:26:ff:bf:01:99:dc:77:a0:46:09:
58:a6:dc:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfuIEJgDRxSpUX+ffaHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTdjYmNjZWUzNmIyNGVjYmQ0NjNmN2QxMDJhYmM0ZmU0
MGUxNGQwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EyhkMTBjNTg5YjVhM2UyMzZmZDhjYjcxYWY2ZTg0NWRiZDY5OTY5NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW0mGIpJHaduuSQV6klGFw/tZMJw
6Fb6hzEBS62LSuetPRcKzfyY25l9Lsy2bVH5ijOwe9BgWvwDSu3MYyAl3tkwNoaw
nyU4/3nZlk3/sXruB+z2ryBfuEDIeUN3lRknN+bfX04jPWnUGzKU5fT2DSwYfzHE
2rvO5JpZvIt/A6Jt21Os8sTa9oPgDhnLn3d9Nz8J0CTuNt4z7H1m4Zrmid174H6V
OWuygQQF1XmQwoLlTgBlICAQWqWTNFiKhW4Iy0kdt8DSivPhsDYybQVcSGJMwBqa
fjzXetl8oNOR+18BQow/qGWtlsoX8XlcUB9wlxq+u8D5R3i2tunFLIgSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEMWJtaPiNv2Mtxr26EXb1plpdaMB8GA1UdIwQY
MBaAFPwXy8zuNrJOy9Rj99ECq8T+QOFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODct
MTM2NTg3NWM3ZTg1LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83ZmQxMmYtYjA1NC00ZGQyLTlkODctMTM2NTg3NWM3ZTg1
LzEvX0JmTHpPNDJzazdMMUdQMzBRS3J4UDVBNFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKm2aqvAb
i0WUmLoWDGudjiSdnmepLPQ4OpZBHXLFl0H8z9vvNFC9hzPLjKWSszfXM5yIwH5F
QnQarnmmn/LkupooYASztnF56nlhk5nQbzIWYPcTUBFCGpDgvoNYVFYaNkFe2e27
xsGoZEq0vVeI8Hj0sFv7Q5mPKZWftifddEOqB72Ps2/2N43CbRZbCiBOTZrvfawF
Xp3EKs2bnqyXmggRVPGH3J4DfuwnebcBkQw2LDTJoSx4d4p4uxyt1cBAtUtdNUvV
7rzQUZG0Ab9p/9BvN6A6EtPIUWOYrRJVU9JDtLYjsKJT9PpwgV9mmyx7kCEm/78B
mdx3oEYJWKbcDw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:56 2025 by rpki-client