Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File: V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier: QS+fx4BgU1PIKzNmkOmqsO2aElN6gNmfK1AHmt4hXfw=
Subject key identifier: BF:BC:49:BF:4A:DB:7A:E1:BC:55:F8:30:1F:58:2B:F3:A9:04:F1:E1
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer: /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial: 0194BC3BF4C932E136F6EBE7F69902DA72FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number: 03E8
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (hash: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=)
2: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: Fl5YEGCnRSRaBryEuiEOI4RURNnVDpES4VXdeD5h4nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:c9:32:e1:36:f6:eb:e7:f6:99:02:da:72:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=bfbc49bf4adb7ae1bc55f8301f582bf3a904f1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:5b:73:5b:69:0c:a8:ad:78:7c:55:6f:be:
ed:b8:e5:d4:31:fd:3b:ec:6f:66:7e:b8:e3:de:61:
12:ad:da:5a:b1:7b:52:e3:d1:08:bd:58:c9:0e:5b:
7d:47:f9:aa:9f:17:44:2d:48:05:ce:53:f1:83:65:
b3:d9:5f:ae:4e:88:8e:c1:e5:82:4c:91:73:79:51:
e8:0e:19:bc:81:32:c4:36:e3:27:44:00:57:ba:c6:
5c:5c:21:6e:0c:fd:fd:3c:04:a9:8c:39:1b:ca:cc:
99:a1:6c:a1:0f:1b:31:63:c4:3e:41:af:03:b3:61:
a8:ed:ce:e6:3a:42:98:5c:2f:a8:5a:0c:e2:e0:16:
78:09:1e:cc:c1:5d:7d:61:04:93:b2:21:4d:1d:23:
a1:8b:68:b6:ec:7d:ad:59:e4:c7:33:48:40:33:b7:
01:eb:ec:a0:1a:d9:47:b1:6d:3d:82:4b:d7:e2:f5:
cc:61:92:55:67:27:ed:f5:7f:56:2e:69:df:71:05:
4f:67:86:99:36:17:6b:07:70:8f:bc:cd:82:0d:80:
df:4f:40:24:83:1f:d1:41:01:f7:84:52:8d:12:21:
3a:5e:44:85:cf:66:f5:d6:9a:c6:2b:66:c5:17:03:
1f:54:4b:7c:23:19:ff:d8:f5:4d:c0:f1:90:79:9a:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:49:BF:4A:DB:7A:E1:BC:55:F8:30:1F:58:2B:F3:A9:04:F1:E1
X509v3 Authority Key Identifier:
keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0c:d4:99:72:1c:1f:ba:1b:a4:5c:55:33:e3:83:4c:e4:a7:
d4:59:86:0c:38:c9:ea:b0:f9:94:98:b3:45:07:a8:7f:cc:ab:
70:e7:ba:9e:53:29:29:b3:50:94:c8:c4:07:9c:b0:d5:38:de:
cc:d5:30:ce:be:f8:55:4a:fd:26:16:b1:12:3a:ca:09:af:00:
53:0f:62:ba:3f:63:b6:b4:76:82:ae:df:54:f8:8c:ff:18:bc:
d5:2d:7f:4f:42:50:ee:57:95:e6:43:f0:fa:5c:b7:ba:f9:03:
4b:4a:03:86:51:54:9f:f3:2c:b2:c8:6c:af:98:17:c5:37:3f:
40:37:fd:5c:8c:b2:ee:60:56:eb:fa:78:3e:f7:a8:7e:a2:01:
8a:33:70:a9:08:73:20:e0:df:d3:91:ba:7a:d0:41:d3:d5:66:
37:18:7f:f4:59:3a:1c:13:65:35:0d:d9:6c:17:76:f6:8e:19:
05:fa:83:ed:1d:be:b1:05:c4:b3:60:f7:af:68:7c:a8:81:de:
c3:c2:51:e4:e1:80:cd:16:e1:bb:34:d9:2f:82:eb:7d:04:4d:
f1:51:a5:3f:10:87:c7:62:0c:85:bb:66:d2:f8:aa:43:5a:b9:
31:bf:9d:ec:c1:fb:f2:78:99:63:64:34:1b:b9:43:77:d1:30:
de:f1:f6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/TJMuE29uvn9pkC2nL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmJiYzQ3YjFjNjdlNTU3YmVhYjBmMmM2ZDE4YmYwMjZj
MzA2ZTAwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EyhiZmJjNDliZjRhZGI3YWUxYmM1NWY4MzAxZjU4MmJmM2E5MDRmMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI9bc1tpDKiteHxVb77tuOXUMf07
7G9mfrjj3mESrdpasXtS49EIvVjJDlt9R/mqnxdELUgFzlPxg2Wz2V+uToiOweWC
TJFzeVHoDhm8gTLENuMnRABXusZcXCFuDP39PASpjDkbysyZoWyhDxsxY8Q+Qa8D
s2Go7c7mOkKYXC+oWgzi4BZ4CR7MwV19YQSTsiFNHSOhi2i27H2tWeTHM0hAM7cB
6+ygGtlHsW09gkvX4vXMYZJVZyft9X9WLmnfcQVPZ4aZNhdrB3CPvM2CDYDfT0Ak
gx/RQQH3hFKNEiE6XkSFz2b11prGK2bFFwMfVEt8Ixn/2PVNwPGQeZreAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+8Sb9K23rhvFX4MB9YK/OpBPHhMB8GA1UdIwQY
MBaAFFe7vEexxn5Ve+qw8sbRi/AmwwbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEt
YjdiM2FmZmM2ZWM5LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZWYxM2QtOGI5OC00NTFkLThlMDEtYjdiM2FmZmM2ZWM5
LzEvVjd1OFI3SEdmbFY3NnJEeXh0R0w4Q2JEQnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAzUmXIc
H7obpFxVM+ODTOSn1FmGDDjJ6rD5lJizRQeof8yrcOe6nlMpKbNQlMjEB5yw1Tje
zNUwzr74VUr9JhaxEjrKCa8AUw9iuj9jtrR2gq7fVPiM/xi81S1/T0JQ7leV5kPw
+ly3uvkDS0oDhlFUn/Mssshsr5gXxTc/QDf9XIyy7mBW6/p4PveofqIBijNwqQhz
IODf05G6etBB09VmNxh/9Fk6HBNlNQ3ZbBd29o4ZBfqD7R2+sQXEs2D3r2h8qIHe
w8JR5OGAzRbhuzTZL4LrfQRN8VGlPxCHx2IMhbtm0viqQ1q5Mb+d7MH78niZY2Q0
G7lDd9Ew3vH2VQ==
-----END CERTIFICATE-----
Generated at Thu May 8 07:00:48 2025 by rpki-client