Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: TS01ESLjg2lin08OdOKQruIxuFPEN0iejfwqZMF3mSU=
Subject key identifier: 8B:46:23:B1:23:6F:41:83:37:63:D5:70:EC:C8:B1:4B:23:08:16:87
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 0194BC3C409204681A299FFF616F27EF5B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0C93
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: NdISpG4fYt+OiMZUz7HqiXJWPVnHJdhwJSct+pZniXw=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:92:04:68:1a:29:9f:ff:61:6f:27:ef:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=8b4623b1236f41833763d570ecc8b14b23081687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:79:dd:30:cf:5f:57:cb:35:73:b6:8a:b7:
8a:33:67:be:ba:33:f9:49:7c:44:d4:61:a9:87:ea:
a8:76:81:ef:73:f6:6b:f5:f3:11:a5:f0:40:9b:68:
b8:e0:82:ac:2c:10:09:8d:b7:69:82:39:2a:6a:48:
86:c6:66:10:37:9d:b0:ae:2a:97:8a:b6:93:6a:9e:
01:fe:03:38:cb:53:f7:c7:06:02:6d:e5:af:1a:17:
e5:62:bf:67:22:44:4b:35:e9:89:4d:13:ab:6e:48:
92:38:18:88:11:24:2e:81:36:9b:55:0d:12:de:98:
34:eb:31:b8:cd:1a:69:e7:76:55:2f:27:0e:29:96:
2c:44:7c:cb:f9:ca:7e:f8:fc:f5:f6:9d:df:f5:28:
61:4c:39:f1:a7:d2:f8:33:99:63:8a:7b:67:1d:6a:
46:17:b8:c3:b7:b3:45:55:52:c3:b5:f7:5c:fc:d4:
d1:3e:7e:fa:31:16:73:cc:f4:d3:a1:25:18:c1:3b:
6f:f5:73:c6:91:dc:c4:05:11:54:5d:00:82:78:e0:
6a:d3:44:dc:b1:61:80:48:67:5b:90:ff:28:61:6c:
ee:3a:e4:39:52:e5:27:8c:bb:58:38:77:91:1e:a4:
6d:35:a6:72:1b:cb:5d:1d:3b:44:93:93:6a:4a:6a:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:23:B1:23:6F:41:83:37:63:D5:70:EC:C8:B1:4B:23:08:16:87
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fb:53:53:17:8a:df:a0:db:45:47:30:72:a7:dc:a8:bb:3a:
50:0c:d6:6a:ce:81:06:91:fa:4b:e9:18:9b:e7:59:e6:7d:5c:
4c:c1:74:81:4a:6b:bc:75:2d:dc:e0:00:d1:ba:d8:2e:81:a7:
e5:ed:59:6a:30:f2:34:ef:60:6e:8b:d5:af:0e:a0:f1:ba:bd:
66:93:9f:d3:db:e4:f5:56:06:24:8a:cb:a0:25:db:c2:a5:db:
fe:1b:46:1a:cb:2c:ee:f1:6d:6a:9b:ed:8b:80:05:11:0b:08:
a4:6d:e8:1f:54:df:a1:b5:94:97:48:ce:dc:e4:b4:06:e7:e2:
aa:b9:fb:7d:20:af:a9:cd:9e:2e:21:f0:d5:d5:13:10:60:31:
c9:7c:33:2f:de:ba:2d:7f:1b:ed:5d:1b:9c:cf:87:78:9f:45:
77:9a:bb:47:14:55:52:46:ec:f9:ee:69:af:f1:1a:a9:a9:bd:
66:29:77:f8:3a:56:08:fc:97:b5:f4:f3:93:a6:2f:55:82:f8:
23:57:d3:98:42:a1:de:5d:10:19:97:44:67:40:19:f5:d4:69:
cc:72:63:aa:27:09:58:35:65:15:5a:84:9c:9f:19:c1:51:c3:
2e:d3:0b:af:41:8e:54:56:7e:ca:2f:1e:49:a5:22:bb:f2:c3:
01:81:ee:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PECSBGgaKZ//YW8n71seMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz
ZTYwMDgwHhcNMjUwMTMxMTIwMDUyWhcNMjUwMjAxMTIwMDUyWjAzMTEwLwYDVQQD
Eyg4YjQ2MjNiMTIzNmY0MTgzMzc2M2Q1NzBlY2M4YjE0YjIzMDgxNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUB53TDPX1fLNXO2ireKM2e+ujP5
SXxE1GGph+qodoHvc/Zr9fMRpfBAm2i44IKsLBAJjbdpgjkqakiGxmYQN52wriqX
iraTap4B/gM4y1P3xwYCbeWvGhflYr9nIkRLNemJTROrbkiSOBiIESQugTabVQ0S
3pg06zG4zRpp53ZVLycOKZYsRHzL+cp++Pz19p3f9ShhTDnxp9L4M5ljintnHWpG
F7jDt7NFVVLDtfdc/NTRPn76MRZzzPTToSUYwTtv9XPGkdzEBRFUXQCCeOBq00Tc
sWGASGdbkP8oYWzuOuQ5UuUnjLtYOHeRHqRtNaZyG8tdHTtEk5NqSmrAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItGI7Ejb0GDN2PVcOzIsUsjCBaHMB8GA1UdIwQY
MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt
MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz
LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvtTUxeK
36DbRUcwcqfcqLs6UAzWas6BBpH6S+kYm+dZ5n1cTMF0gUprvHUt3OAA0brYLoGn
5e1ZajDyNO9gbovVrw6g8bq9ZpOf09vk9VYGJIrLoCXbwqXb/htGGsss7vFtapvt
i4AFEQsIpG3oH1TfobWUl0jO3OS0Bufiqrn7fSCvqc2eLiHw1dUTEGAxyXwzL966
LX8b7V0bnM+HeJ9Fd5q7RxRVUkbs+e5pr/Eaqam9Zil3+DpWCPyXtfTzk6YvVYL4
I1fTmEKh3l0QGZdEZ0AZ9dRpzHJjqicJWDVlFVqEnJ8ZwVHDLtMLr0GOVFZ+yi8e
SaUiu/LDAYHuQA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:37 2025 by rpki-client