Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: Mc87hcfX3UuF2jq83ksAXwoKKwiY8GTHKAXbZtF7GTk=
Subject key identifier: 32:25:13:23:43:3B:4B:35:BA:98:67:B1:45:C6:A9:48:19:2F:DA:46
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0194BD4E90C8E11B953D616D282B1FD069F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: pkbmB4l7SdU6sfYAlVY3N+AF78RN6OvmQ67+rRpRIFE=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:c8:e1:1b:95:3d:61:6d:28:2b:1f:d0:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=32251323433b4b35ba9867b145c6a948192fda46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:54:e4:0d:dd:d4:74:24:a9:43:cb:92:c0:
a6:62:37:cc:e5:94:a9:54:a8:83:a1:fa:c7:2b:b1:
aa:9f:a2:cf:81:6e:e9:5e:f1:fd:e8:4d:03:dc:af:
2b:10:a5:a8:71:79:17:d0:fa:29:0b:e1:c5:31:0e:
cb:2d:e9:f8:e2:f0:d2:51:a8:14:37:ae:33:a7:92:
65:4c:70:ab:3e:4c:73:c6:dc:37:1b:aa:f7:85:30:
46:6f:37:eb:da:72:94:7e:c1:e9:ad:02:d1:82:cb:
4d:b1:d5:43:19:ad:b4:e8:a0:4b:f5:6a:d6:f9:7e:
4e:3c:eb:18:d6:f5:7d:d7:55:80:05:47:d2:65:2b:
22:6d:60:bc:c0:b2:18:e2:50:4f:94:80:8c:80:7b:
42:3f:3b:18:73:34:7d:a7:83:48:48:08:cf:7e:cb:
40:92:a1:e9:6e:d0:b2:25:80:36:fb:47:92:b1:0b:
92:ed:38:f5:24:c7:6b:f7:ee:d1:a5:f7:de:cf:4c:
89:5e:7f:cb:2d:fc:04:0d:19:0e:d2:4d:82:c5:b6:
dd:41:ea:e4:05:8d:79:dd:d8:28:c1:08:46:8b:33:
44:f8:b4:01:f1:aa:c6:80:cc:f3:4c:b5:83:c9:bf:
88:2b:c3:50:e3:ff:e9:99:1b:57:af:f8:af:e3:59:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:25:13:23:43:3B:4B:35:BA:98:67:B1:45:C6:A9:48:19:2F:DA:46
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e3:49:6b:0d:0c:ab:5e:e7:b7:30:59:7e:f6:72:74:9d:ec:
f2:3e:a6:d0:a8:95:23:be:e4:85:0a:53:ce:98:72:7c:0e:f0:
29:3d:8f:00:54:1c:74:8d:60:1c:0f:96:5f:24:d7:ee:9d:0e:
c0:f0:ca:57:14:c3:84:c6:c2:b0:e0:58:da:92:d5:9d:49:d6:
8b:26:f6:c4:67:5a:31:81:bd:5a:b5:1f:07:da:ad:6c:a3:ca:
6a:f4:02:71:c1:d1:ba:f9:2a:61:c8:c8:03:1f:78:1c:cc:59:
7f:39:d2:f5:d3:85:9a:28:66:c4:ac:ef:e2:3c:9f:e1:01:7e:
01:29:5b:bb:e3:40:06:f5:03:bc:a6:cc:27:c6:08:57:48:42:
e0:9c:76:95:58:6d:e6:c9:e7:b7:e5:aa:20:4d:75:46:e9:fb:
b9:2f:d8:34:fa:01:95:25:bd:ae:55:66:0d:13:f4:d3:eb:99:
35:36:d8:6c:72:29:3d:99:e8:a9:68:3a:26:13:fc:cc:ca:da:
03:e7:91:f4:ef:3f:99:ca:c4:b6:ca:c8:af:6a:92:a6:a6:1e:
62:b0:50:b3:09:6e:40:e2:6d:05:eb:d5:a2:dc:fa:b5:e7:52:
d9:58:16:c0:8f:2d:5b:2b:3a:b2:5f:d9:66:98:a5:45:83:54:
60:7b:4c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpDI4RuVPWFtKCsf0GnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1
ZDE3MDkwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
EygzMjI1MTMyMzQzM2I0YjM1YmE5ODY3YjE0NWM2YTk0ODE5MmZkYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllBU5A3d1HQkqUPLksCmYjfM5ZSp
VKiDofrHK7Gqn6LPgW7pXvH96E0D3K8rEKWocXkX0PopC+HFMQ7LLen44vDSUagU
N64zp5JlTHCrPkxzxtw3G6r3hTBGbzfr2nKUfsHprQLRgstNsdVDGa206KBL9WrW
+X5OPOsY1vV911WABUfSZSsibWC8wLIY4lBPlICMgHtCPzsYczR9p4NISAjPfstA
kqHpbtCyJYA2+0eSsQuS7Tj1JMdr9+7Rpffez0yJXn/LLfwEDRkO0k2CxbbdQerk
BY153dgowQhGizNE+LQB8arGgMzzTLWDyb+IK8NQ4//pmRtXr/iv41nxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIlEyNDO0s1uphnsUXGqUgZL9pGMB8GA1UdIwQY
MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt
NGM1MWM2Nzk3YzFmLzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm
LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqONJaw0M
q17ntzBZfvZydJ3s8j6m0KiVI77khQpTzphyfA7wKT2PAFQcdI1gHA+WXyTX7p0O
wPDKVxTDhMbCsOBY2pLVnUnWiyb2xGdaMYG9WrUfB9qtbKPKavQCccHRuvkqYcjI
Ax94HMxZfznS9dOFmihmxKzv4jyf4QF+ASlbu+NABvUDvKbMJ8YIV0hC4Jx2lVht
5snnt+WqIE11Run7uS/YNPoBlSW9rlVmDRP00+uZNTbYbHIpPZnoqWg6JhP8zMra
A+eR9O8/mcrEtsrIr2qSpqYeYrBQswluQOJtBevVotz6tedS2VgWwI8tWys6sl/Z
ZpilRYNUYHtMAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:21 2025 by rpki-client