Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: +/EZpxzvsEI2uQt96PNtp76M0o37BFJVoWZE92mIQNo=
Subject key identifier: 67:F0:FE:11:8F:7A:05:5D:12:31:1D:99:2F:A9:77:19:63:59:9A:41
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 0194BCA9898333D668B6A63DB47D1470A1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: ly7cPWrYO1gA2SjX1JnUJWoCjEPXAJMkMPbbyryguGo=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:83:33:d6:68:b6:a6:3d:b4:7d:14:70:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=67f0fe118f7a055d12311d992fa9771963599a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:0d:c6:68:1f:e6:f4:36:45:48:2a:49:4d:
36:b1:47:26:4b:27:d8:01:09:50:5e:f6:13:51:b0:
2d:37:0b:4f:65:2d:8a:38:62:db:29:23:e6:d3:ac:
02:8e:86:cd:bf:0a:45:3a:f7:da:93:ed:87:1b:e7:
33:a5:bb:6a:c4:82:0d:a6:9b:6a:a7:c1:56:d2:68:
76:7c:c5:98:32:9f:88:8e:27:31:58:84:3b:4a:71:
3b:83:67:e6:35:a6:2f:38:15:47:67:ba:9b:25:97:
e7:30:26:e3:77:40:9a:c7:76:3b:9e:15:2d:c4:16:
05:d1:d6:55:6a:35:2a:5f:4f:85:3d:2b:ce:d1:d9:
03:e7:9e:b6:7b:b9:b4:49:97:6b:20:32:d3:6f:50:
c9:e0:12:1c:36:7f:41:5c:16:b5:25:21:a2:e8:e4:
84:67:43:17:32:41:08:a8:f3:9b:ad:37:26:df:3c:
71:d1:21:04:76:18:6b:3f:11:64:e7:67:3f:c0:78:
bf:d2:d3:9a:7b:bf:fe:f4:fa:2a:c2:27:b5:8c:89:
3f:47:f6:ad:a7:54:dc:82:08:5d:72:a6:de:64:37:
77:54:67:1b:45:8b:cc:b4:01:86:7f:83:68:ce:de:
f3:6e:13:52:e0:9f:91:e8:3b:1f:33:f3:60:a4:de:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:FE:11:8F:7A:05:5D:12:31:1D:99:2F:A9:77:19:63:59:9A:41
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:03:d2:95:44:de:cf:04:3a:57:5d:87:e3:ad:9e:7c:2c:
9d:b6:38:f9:1b:5e:43:59:91:dd:1b:49:fd:8f:31:12:5e:dc:
6c:96:4d:f3:a6:7f:4b:47:2c:4f:dd:f0:c3:9e:9d:fc:bd:1b:
bc:85:fa:19:67:a4:e8:e1:d4:4e:a2:d5:6f:c5:06:cb:09:b0:
f1:ca:c3:a6:e3:e2:b1:12:a6:36:a1:3c:00:26:96:6a:b2:1c:
d3:e7:2a:6b:ed:19:2a:97:6b:47:e2:e4:f5:a7:3e:49:c1:dc:
25:f1:8c:a9:c3:8d:e9:65:00:45:4b:b4:6b:b3:97:e8:d8:d3:
92:f0:84:78:2e:d9:ac:96:25:91:26:01:07:78:72:50:ca:21:
3c:fa:b6:e9:67:b1:ab:b1:f1:44:1b:2d:da:dd:12:9b:f5:c9:
38:83:9f:c1:85:f6:77:08:55:a0:7b:5a:0a:84:d2:11:37:6a:
11:66:bc:40:79:4d:c5:ee:e3:48:2c:1c:4c:4a:f2:31:a8:65:
4a:f7:d0:e0:34:de:aa:87:b4:3b:10:f3:4f:ed:70:dc:c1:68:
98:77:18:f3:ef:0e:83:93:0f:07:ad:57:39:91:f9:14:b9:ba:
9f:b1:b4:94:56:ce:69:79:0f:3a:fd:20:8e:af:6d:c3:ec:2b:
ee:9d:6c:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYmDM9ZotqY9tH0UcKH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmIwZjliZGMzYTJmYWU0N2I0N2U3MDIxODk5M2M5MTlm
MTBmYjAwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
Eyg2N2YwZmUxMThmN2EwNTVkMTIzMTFkOTkyZmE5NzcxOTYzNTk5YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWYNxmgf5vQ2RUgqSU02sUcmSyfY
AQlQXvYTUbAtNwtPZS2KOGLbKSPm06wCjobNvwpFOvfak+2HG+czpbtqxIINpptq
p8FW0mh2fMWYMp+IjicxWIQ7SnE7g2fmNaYvOBVHZ7qbJZfnMCbjd0Cax3Y7nhUt
xBYF0dZVajUqX0+FPSvO0dkD5562e7m0SZdrIDLTb1DJ4BIcNn9BXBa1JSGi6OSE
Z0MXMkEIqPObrTcm3zxx0SEEdhhrPxFk52c/wHi/0tOae7/+9Poqwie1jIk/R/at
p1TcgghdcqbeZDd3VGcbRYvMtAGGf4Nozt7zbhNS4J+R6DsfM/NgpN6z0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfw/hGPegVdEjEdmS+pdxljWZpBMB8GA1UdIwQY
MBaAFG/7D5vcOi+uR7R+cCGJk8kZ8Q+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYt
ZjlhYjNiMDUyMzQ5LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84NGFjZGYtYmE4NS00YTgxLWEzMDYtZjlhYjNiMDUyMzQ5
LzEvYl9zUG05dzZMNjVIdEg1d0lZbVR5Um54RDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2AD0pVE
3s8EOlddh+OtnnwsnbY4+RteQ1mR3RtJ/Y8xEl7cbJZN86Z/S0csT93ww56d/L0b
vIX6GWek6OHUTqLVb8UGywmw8crDpuPisRKmNqE8ACaWarIc0+cqa+0ZKpdrR+Lk
9ac+ScHcJfGMqcON6WUARUu0a7OX6NjTkvCEeC7ZrJYlkSYBB3hyUMohPPq26Wex
q7HxRBst2t0Sm/XJOIOfwYX2dwhVoHtaCoTSETdqEWa8QHlNxe7jSCwcTEryMahl
SvfQ4DTeqoe0OxDzT+1w3MFomHcY8+8Og5MPB61XOZH5FLm6n7G0lFbOaXkPOv0g
jq9tw+wr7p1sIw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:23 2025 by rpki-client