Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json)
Hash identifier: IJCUZ03RAQsYDrKXDcjv/oYsBiSMNM8db5GOtx6n0sU=
Subject key identifier: 7D:C2:F8:B5:36:5B:88:DF:BC:0F:59:6B:7F:81:13:D6:E4:A7:B6:16
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 0194BCE09C8D34B9E3AE43BF5A368EB60073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=)
2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=)
3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=)
4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=)
5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=)
6: V9Tcb7av_dVNBRfc9o8N4UA1rso.roa (hash: grBhVeV/JDROWekOKeK0iGvKNav3Jg9ZyJda99GGyG4=)
7: Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa (hash: 0tBte5YJPRScKJDnL/xskQjq4j0+cjIuEo3Z5S4On/k=)
8: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=)
9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=)
10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: qYxWlVYgvOmTWs3yq6JKk9lNoIDtAKGVLO+XkM0C+oY=)
11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=)
12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=)
13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=)
14: s3CD24AurNDhU5l0KzX89OIgsIY.roa (hash: j74AELSwt2VeN/kZd/dKyAyFPFjNPOflv3KMrplCA7M=)
15: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=)
16: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=)
17: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=)
18: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9c:8d:34:b9:e3:ae:43:bf:5a:36:8e:b6:00:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=7dc2f8b5365b88dfbc0f596b7f8113d6e4a7b616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:4e:94:34:f5:cd:e0:29:eb:a9:f2:92:c7:
3c:fb:64:92:f3:ef:b1:1c:be:49:a5:3c:da:af:43:
52:2f:8c:35:e4:1d:35:4d:80:e4:13:02:a5:95:2d:
4e:2a:01:59:7d:8a:b6:a4:b0:9a:63:54:22:32:eb:
2f:f4:7a:ed:fd:97:02:8e:d1:72:78:30:00:39:29:
df:d3:88:5e:67:b6:f0:55:b2:8a:73:c2:2b:6c:8a:
0a:1b:ac:ef:e1:cf:62:c8:17:49:e5:62:5e:31:04:
57:06:4f:02:ca:df:50:99:ba:48:24:bb:a7:78:2d:
1d:78:e7:63:1d:64:85:09:2d:c4:33:b9:0c:49:52:
0d:7d:80:d8:f9:a1:2f:98:34:ba:75:47:a0:5c:63:
57:2e:88:7e:b3:2e:ee:6b:11:03:ca:c7:96:32:de:
b6:75:79:3c:26:68:8e:ac:a6:97:99:24:7a:02:0c:
02:82:f5:91:d9:c8:8e:32:bd:96:c2:67:e8:68:83:
49:bc:31:5c:9f:a5:61:d1:87:92:80:71:26:8d:ea:
d2:f8:b6:4a:5e:f0:ae:a5:3a:7c:4e:f1:d1:65:6f:
60:03:fe:02:13:b9:f0:5c:65:a5:32:f5:68:23:db:
8a:b8:a3:c3:d5:e6:c6:42:26:1e:22:0f:63:13:a1:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:F8:B5:36:5B:88:DF:BC:0F:59:6B:7F:81:13:D6:E4:A7:B6:16
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:76:a5:96:2b:46:92:3c:22:03:04:23:63:5b:8a:c8:77:
8d:ef:3f:eb:d1:89:0e:b2:73:10:8c:0e:3b:ca:2d:93:75:0a:
6d:6d:c4:7d:2d:a3:9b:9d:60:8a:a1:92:8e:07:9c:56:78:ed:
cc:fe:39:c2:66:70:c3:8e:d8:bc:bd:1f:6e:ae:26:2b:dd:ad:
a6:bf:d2:27:52:cc:ee:d8:3e:23:68:ee:9c:17:a2:27:ff:3a:
aa:9e:fa:79:33:20:14:10:c8:60:60:a2:e0:d0:d0:39:7c:1e:
9e:3d:80:64:b6:ec:8f:36:0b:1b:85:cc:fa:d8:42:83:31:d8:
c7:e7:a6:bd:6c:66:3c:db:5f:f6:0f:27:ba:91:32:69:cd:c9:
8b:15:32:4c:22:4a:6e:8e:7f:3b:7c:54:6b:83:39:92:32:a9:
27:d6:7b:75:54:2c:36:f6:e3:c5:a9:55:c1:ef:e2:6d:48:20:
db:7d:88:5c:98:1e:8a:1c:db:21:14:88:18:8f:78:e4:92:db:
e6:8c:08:28:ac:08:e2:ec:4a:4e:2b:55:24:25:2c:8f:0b:9f:
2e:fa:cf:bc:94:5f:2c:84:63:73:5d:16:94:96:a7:4e:b4:3e:
83:99:d1:78:91:d4:59:d6:24:63:d3:38:81:1f:8d:22:e5:eb:
f2:82:14:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JyNNLnjrkO/WjaOtgBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx
YmQyMTIwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
Eyg3ZGMyZjhiNTM2NWI4OGRmYmMwZjU5NmI3ZjgxMTNkNmU0YTdiNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ihOlDT1zeAp66nyksc8+2SS8++x
HL5JpTzar0NSL4w15B01TYDkEwKllS1OKgFZfYq2pLCaY1QiMusv9Hrt/ZcCjtFy
eDAAOSnf04heZ7bwVbKKc8IrbIoKG6zv4c9iyBdJ5WJeMQRXBk8Cyt9QmbpIJLun
eC0deOdjHWSFCS3EM7kMSVINfYDY+aEvmDS6dUegXGNXLoh+sy7uaxEDyseWMt62
dXk8JmiOrKaXmSR6AgwCgvWR2ciOMr2WwmfoaINJvDFcn6Vh0YeSgHEmjerS+LZK
XvCupTp8TvHRZW9gA/4CE7nwXGWlMvVoI9uKuKPD1ebGQiYeIg9jE6EwowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3C+LU2W4jfvA9Za3+BE9bkp7YWMB8GA1UdIwQY
MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt
Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm
LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8V2pZYr
RpI8IgMEI2Nbish3je8/69GJDrJzEIwOO8otk3UKbW3EfS2jm51giqGSjgecVnjt
zP45wmZww47YvL0fbq4mK92tpr/SJ1LM7tg+I2junBeiJ/86qp76eTMgFBDIYGCi
4NDQOXwenj2AZLbsjzYLG4XM+thCgzHYx+emvWxmPNtf9g8nupEyac3JixUyTCJK
bo5/O3xUa4M5kjKpJ9Z7dVQsNvbjxalVwe/ibUgg232IXJgeihzbIRSIGI945JLb
5owIKKwI4uxKTitVJCUsjwufLvrPvJRfLIRjc10WlJanTrQ+g5nReJHUWdYkY9M4
gR+NIuXr8oIUkw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:49 2025 by rpki-client