Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: y5of77w1cXTjMiBjk7cQsdaZLL24O3kQZIwHLOCtf7A=
Subject key identifier: 3C:C3:2F:76:44:AA:4F:AA:69:4F:53:70:22:04:B6:44:C5:CB:65:CD
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0194BD4E6028CA0044D89734EB4478ED1323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: GxAd5i9RByya2DyDjs2LhoaX4EpasAAu15nbPjxoUVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:60:28:ca:00:44:d8:97:34:eb:44:78:ed:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=3cc32f7644aa4faa694f53702204b644c5cb65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:47:c7:dd:5f:c6:fd:6b:ed:83:55:e5:91:
fe:6c:41:30:1b:5b:27:66:79:a5:58:e4:cd:f7:1c:
65:4a:8c:1d:ba:e2:2d:3e:75:7d:59:63:9c:da:9e:
d6:15:3e:41:82:19:d3:7c:ba:aa:d1:e5:79:07:e7:
1c:d3:17:55:4d:f8:93:75:69:a2:99:cd:47:c4:8b:
6b:78:86:a1:6a:71:61:62:d6:0f:e9:c4:78:6f:5f:
40:21:84:7b:3e:3e:7b:ea:07:14:4a:e3:de:3f:ac:
a6:9f:3c:9e:d2:b6:be:ba:c9:15:aa:4e:c5:1c:a5:
26:a0:e2:d3:f3:92:fe:d7:5c:34:a8:e1:a6:e1:31:
6d:40:85:f0:10:99:09:ef:e0:42:27:be:0e:11:bb:
77:d4:30:a4:a7:da:68:96:c3:16:05:5c:ae:ee:26:
95:90:42:a4:a2:03:81:08:b4:7b:26:88:9f:2d:c8:
ab:ac:71:46:0e:39:cb:6f:22:12:17:31:63:38:0c:
4a:fd:58:2f:5a:b4:d3:c6:05:7e:65:fe:ca:43:7a:
5b:79:db:1e:1b:1b:5a:a7:8f:fa:1e:4c:3f:fb:74:
52:d2:94:76:b1:32:e8:e6:86:71:fa:be:52:bd:24:
f2:62:c3:da:b1:86:2f:32:11:92:ac:2e:64:54:a2:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:2F:76:44:AA:4F:AA:69:4F:53:70:22:04:B6:44:C5:CB:65:CD
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:ec:b5:14:bd:66:27:99:1d:ab:77:76:62:e1:7c:0e:06:
0f:80:9b:fc:9f:9f:90:cd:c6:e8:3c:61:85:e5:3a:ec:e4:23:
ab:67:d6:c4:0c:76:56:f1:fb:99:f9:e2:c0:6a:c6:69:20:fb:
56:cc:9f:76:7b:71:03:fb:50:db:79:14:90:25:87:10:81:9f:
6d:62:43:0a:0c:0f:67:05:38:2d:dc:cd:74:02:79:24:d4:7a:
b8:24:8c:91:99:c1:a3:fe:c4:91:4c:26:25:31:ee:b1:92:8d:
04:5f:83:db:94:d3:9f:7c:b6:7a:bb:c0:d1:5c:5e:dd:70:c5:
69:20:b8:04:46:08:c3:2e:69:fb:df:9a:2d:55:95:b9:1e:c4:
a2:c9:2b:34:c1:db:dc:2d:66:30:75:d7:b5:7e:f8:3f:f5:c7:
53:fc:55:8a:af:78:aa:33:08:21:28:e6:6f:91:13:13:2e:e7:
e8:cd:b9:5e:cc:6d:9c:df:31:42:f3:6c:9d:d2:fe:cf:d3:d1:
4d:11:a7:b9:d8:26:a5:18:5b:4a:11:a8:05:72:f5:30:b9:7c:
0d:cd:a1:bb:1f:e0:a1:80:ef:31:cf:d8:77:13:c7:bd:43:b5:
ef:72:4c:6a:9a:27:a7:e3:b0:90:8e:7f:98:d2:01:6e:be:9a:
3d:10:9d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmAoygBE2Jc060R47RMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODEzNzg3NWRhZmZlMDE4ZmEzOGFkNDNjYzY4YTFmYWIz
MzVlZjgwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
EygzY2MzMmY3NjQ0YWE0ZmFhNjk0ZjUzNzAyMjA0YjY0NGM1Y2I2NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWJHx91fxv1r7YNV5ZH+bEEwG1sn
ZnmlWOTN9xxlSowduuItPnV9WWOc2p7WFT5BghnTfLqq0eV5B+cc0xdVTfiTdWmi
mc1HxItreIahanFhYtYP6cR4b19AIYR7Pj576gcUSuPeP6ymnzye0ra+uskVqk7F
HKUmoOLT85L+11w0qOGm4TFtQIXwEJkJ7+BCJ74OEbt31DCkp9polsMWBVyu7iaV
kEKkogOBCLR7JoifLcirrHFGDjnLbyISFzFjOAxK/VgvWrTTxgV+Zf7KQ3pbedse
Gxtap4/6Hkw/+3RS0pR2sTLo5oZx+r5SvSTyYsPasYYvMhGSrC5kVKLuLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzDL3ZEqk+qaU9TcCIEtkTFy2XNMB8GA1UdIwQY
MBaAFG+BN4ddr/4Bj6OK1DzGih+rM174MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjIt
ODg4OWVmMTMxZDg5LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZWJmNTUtZTdhNC00MDI2LTlhMjItODg4OWVmMTMxZDg5
LzEvYjRFM2gxMnZfZ0dQbzRyVVBNYUtINnN6WHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlurstRS9
ZieZHat3dmLhfA4GD4Cb/J+fkM3G6DxhheU67OQjq2fWxAx2VvH7mfniwGrGaSD7
VsyfdntxA/tQ23kUkCWHEIGfbWJDCgwPZwU4LdzNdAJ5JNR6uCSMkZnBo/7EkUwm
JTHusZKNBF+D25TTn3y2ervA0Vxe3XDFaSC4BEYIwy5p+9+aLVWVuR7EoskrNMHb
3C1mMHXXtX74P/XHU/xViq94qjMIISjmb5ETEy7n6M25XsxtnN8xQvNsndL+z9PR
TRGnudgmpRhbShGoBXL1MLl8Dc2hux/goYDvMc/YdxPHvUO173JMaponp+OwkI5/
mNIBbr6aPRCdvw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:39 2025 by rpki-client