Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: +wHxUizoNyXjcZO/7R9fO8ZnLyNMg3oHVyjcSxb9ES4=
Subject key identifier: 1F:83:2D:38:48:27:0B:C1:E5:55:37:4D:EA:B1:1E:96:3B:AE:64:6E
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0194BBCE49ECD05D576683C5CD600D48EC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: Xb14u82xdcHIC0Kcw08YaXlvn4k0+9oE1V0IB4qtwnI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:49:ec:d0:5d:57:66:83:c5:cd:60:0d:48:ec:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=1f832d3848270bc1e555374deab11e963bae646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c4:0b:2b:f8:49:28:ee:5c:55:aa:22:07:26:
75:d3:32:1e:a1:34:28:c7:b1:dd:21:42:bf:10:3e:
d4:f9:be:7c:71:fa:7e:ae:73:15:97:87:07:b9:cc:
d5:b0:c1:8c:2a:a7:13:35:d2:b7:e7:00:96:f0:7f:
b0:3b:11:09:87:4f:5e:a9:8e:1b:07:de:16:a4:2f:
1a:7c:1e:04:d4:62:ed:72:48:98:fa:4a:28:5f:d0:
5a:25:6d:a9:fd:e2:53:22:19:d4:97:a7:6c:09:fd:
a4:48:89:49:bb:b9:40:82:57:07:f9:6f:2f:06:3b:
b1:43:21:ae:b2:14:a1:0d:a0:b0:34:c2:02:db:59:
4d:42:bb:36:c3:5d:aa:39:79:a4:43:36:a2:7b:18:
76:4d:ce:c5:e4:16:a0:ff:57:69:1f:d1:c7:97:6c:
44:4e:15:fc:46:87:83:9b:91:f9:99:6d:4a:06:d7:
98:0b:08:1b:56:ab:77:57:a3:0d:15:70:79:c7:ee:
96:b1:ab:cc:e6:51:41:24:ff:2b:98:6d:e3:9a:6b:
02:dc:11:97:d7:41:92:4a:fb:9b:00:c2:ed:ab:a7:
9e:6f:81:22:b4:26:7a:fa:c6:37:57:2d:3f:af:b8:
0d:bb:eb:2d:b2:3c:de:62:68:4e:d0:a6:f3:37:8d:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:2D:38:48:27:0B:C1:E5:55:37:4D:EA:B1:1E:96:3B:AE:64:6E
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:96:2d:c2:a5:8b:dd:75:4c:65:ec:1a:1e:20:c0:71:90:11:
65:03:bc:f9:38:4b:4f:3e:cf:93:fc:e9:12:52:9c:8b:c9:af:
76:67:35:1c:6d:98:84:d6:e3:e8:0a:f6:eb:43:99:26:95:96:
2c:ac:d1:70:26:1e:95:87:05:60:34:bf:67:a2:88:15:fa:ec:
d7:9d:e7:58:e4:81:b1:9c:2a:91:4a:00:05:92:3d:de:83:c5:
6f:88:98:f1:58:c8:af:b4:28:11:26:67:1d:4f:93:7b:30:4c:
ea:ca:fb:c7:62:c9:14:fa:51:6b:0e:d0:a3:34:5f:f0:99:99:
db:0b:6e:bf:b5:0c:43:23:3c:c5:cb:f8:79:9d:b5:2e:88:2c:
21:c7:e9:90:95:9e:e1:b0:de:0c:e1:0e:06:9e:c9:02:4c:83:
44:96:1a:5f:e1:45:2d:e0:3e:dc:ac:1f:fa:f1:2e:bf:9b:e0:
7c:ad:cf:bc:92:4d:d1:3d:d4:c0:fd:76:2c:5f:11:ae:c8:47:
6e:46:13:f2:7e:b6:83:fb:9b:ce:34:c0:5a:17:1e:9c:65:2e:
07:76:e9:13:b4:99:79:85:5e:b5:e8:90:b1:3c:f9:6f:a4:5c:
df:0f:12:a0:b6:80:ca:99:65:6f:de:e4:02:dc:3a:94:79:6b:
45:0a:47:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkns0F1XZoPFzWANSOxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDg5ZmUxYzdlMjBhMGIwYzYzODQyYzQ1YzE2YzU3NjMx
Nzg1ZDMwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
EygxZjgzMmQzODQ4MjcwYmMxZTU1NTM3NGRlYWIxMWU5NjNiYWU2NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sQLK/hJKO5cVaoiByZ10zIeoTQo
x7HdIUK/ED7U+b58cfp+rnMVl4cHuczVsMGMKqcTNdK35wCW8H+wOxEJh09eqY4b
B94WpC8afB4E1GLtckiY+kooX9BaJW2p/eJTIhnUl6dsCf2kSIlJu7lAglcH+W8v
BjuxQyGushShDaCwNMIC21lNQrs2w12qOXmkQzaiexh2Tc7F5Bag/1dpH9HHl2xE
ThX8RoeDm5H5mW1KBteYCwgbVqt3V6MNFXB5x+6WsavM5lFBJP8rmG3jmmsC3BGX
10GSSvubAMLtq6eeb4EitCZ6+sY3Vy0/r7gNu+stsjzeYmhO0KbzN43EuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+DLThIJwvB5VU3TeqxHpY7rmRuMB8GA1UdIwQY
MBaAFG5In+HH4goLDGOELEXBbFdjF4XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjIt
ZDg4NjkzMTE0OTlhLzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjItZDg4NjkzMTE0OTlh
LzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpYtwqWL
3XVMZewaHiDAcZARZQO8+ThLTz7Pk/zpElKci8mvdmc1HG2YhNbj6Ar260OZJpWW
LKzRcCYelYcFYDS/Z6KIFfrs153nWOSBsZwqkUoABZI93oPFb4iY8VjIr7QoESZn
HU+TezBM6sr7x2LJFPpRaw7QozRf8JmZ2wtuv7UMQyM8xcv4eZ21LogsIcfpkJWe
4bDeDOEOBp7JAkyDRJYaX+FFLeA+3Kwf+vEuv5vgfK3PvJJN0T3UwP12LF8RrshH
bkYT8n62g/ubzjTAWhcenGUuB3bpE7SZeYVeteiQsTz5b6Rc3w8SoLaAypllb97k
Atw6lHlrRQpHFw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:46:27 2025 by rpki-client