Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: GWUsWPcx/S5ZyubuUXOoN/wCf+68fB+SfYExfc291dU=
Subject key identifier: 96:05:9F:92:91:B0:67:2B:E4:2D:AA:83:39:1F:E7:86:9D:E2:DF:00
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 0194BC3BCDEC4CFFCEE78F325C162712D1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: 9gXq4RcJyupl7YdMUgiLgG0SYABC0iuFGfFeMb7kjlE=)
2: zuoKD31gcVRQUR2NG9ebmxdQlUY.roa (hash: 6Yq+wArquNdBN7wmHKv+2fAgO8zmiD+Zj0gA9mY9jzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cd:ec:4c:ff:ce:e7:8f:32:5c:16:27:12:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=96059f9291b0672be42daa83391fe7869de2df00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:7b:ee:95:c0:64:cf:68:49:a9:73:c9:b0:
df:d3:ae:3d:38:ae:69:71:ff:e3:c4:b6:c6:c6:89:
0e:e0:92:0a:09:90:fb:0e:ab:80:01:4c:f7:c1:ae:
70:cf:2a:20:d6:f1:be:d0:dd:47:03:89:83:26:90:
f0:4b:0f:96:b3:f0:8e:c2:92:64:fa:9b:28:d9:59:
4e:74:11:bc:af:51:94:74:50:09:52:af:4b:23:82:
e9:02:4f:f2:60:34:72:70:b4:a1:18:85:8d:c7:c9:
b1:68:eb:e5:9e:e6:75:ce:fb:4c:f2:c4:e3:a6:eb:
b7:a1:34:6e:85:3b:2f:bd:b5:5a:cb:0a:b3:94:47:
6b:be:66:52:21:b5:63:45:29:29:2a:bc:cd:a5:3b:
e0:68:1b:25:33:2d:26:11:4b:10:a9:01:b9:e4:99:
57:ef:0d:7b:4f:6c:94:db:2b:72:eb:7d:6d:35:1c:
1d:27:cc:32:aa:cf:91:dd:ac:fd:48:07:4f:e7:0e:
6d:98:95:a6:19:9b:84:00:96:37:b6:0c:47:81:9c:
eb:74:85:ad:69:1b:39:84:58:ed:c9:06:6c:49:37:
75:35:58:bb:18:1d:c7:6d:4f:aa:a0:55:f4:46:a8:
f3:be:18:84:72:2a:56:2d:44:66:bb:f2:ca:06:e4:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:05:9F:92:91:B0:67:2B:E4:2D:AA:83:39:1F:E7:86:9D:E2:DF:00
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:97:1d:bd:08:6e:90:97:d3:b1:99:5b:66:08:b6:dc:d6:d0:
f5:f6:d6:a7:a6:e7:e4:cb:20:f8:67:12:53:a7:fe:f4:96:92:
45:42:ea:d7:97:15:4b:51:6e:ff:fc:c2:ee:a7:98:db:ea:47:
bd:e5:b9:3f:16:51:c2:13:75:dd:54:cc:a7:aa:60:5c:14:5d:
7e:90:84:85:b1:3d:39:95:38:dc:f8:59:1e:d2:15:24:23:41:
8e:42:e3:a7:ad:0a:cd:bf:8f:34:c6:9a:c2:47:b8:8d:cf:87:
91:fa:f8:64:08:b2:88:2f:5d:48:61:47:20:10:69:98:64:3b:
a2:d3:d7:16:c7:10:bb:aa:ed:f4:a6:57:b6:5c:5c:ad:eb:30:
cf:67:bd:5a:8f:e6:e9:b3:68:64:02:12:73:ff:7a:c8:98:1d:
ae:e7:26:62:3f:86:e8:a3:da:92:87:7f:bb:2b:34:c9:cc:aa:
bb:b7:86:60:d1:d7:8c:81:bb:e8:c9:c1:2b:d3:bb:2f:5d:24:
37:dc:af:26:62:42:bb:7a:36:e3:bb:43:09:31:ab:67:03:99:
fd:b8:2b:22:4b:83:40:67:bd:3e:f4:e4:84:19:d0:6b:74:9c:
50:d4:c0:8f:cc:ed:7d:a4:c6:a7:bc:f2:d9:d6:04:32:cb:4e:
7f:6c:27:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O83sTP/O548yXBYnEtHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
Eyg5NjA1OWY5MjkxYjA2NzJiZTQyZGFhODMzOTFmZTc4NjlkZTJkZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u577pXAZM9oSalzybDf0649OK5p
cf/jxLbGxokO4JIKCZD7DquAAUz3wa5wzyog1vG+0N1HA4mDJpDwSw+Ws/COwpJk
+pso2VlOdBG8r1GUdFAJUq9LI4LpAk/yYDRycLShGIWNx8mxaOvlnuZ1zvtM8sTj
puu3oTRuhTsvvbVaywqzlEdrvmZSIbVjRSkpKrzNpTvgaBslMy0mEUsQqQG55JlX
7w17T2yU2yty631tNRwdJ8wyqs+R3az9SAdP5w5tmJWmGZuEAJY3tgxHgZzrdIWt
aRs5hFjtyQZsSTd1NVi7GB3HbU+qoFX0RqjzvhiEcipWLURmu/LKBuQgVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYFn5KRsGcr5C2qgzkf54ad4t8AMB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJcdvQhu
kJfTsZlbZgi23NbQ9fbWp6bn5Msg+GcSU6f+9JaSRULq15cVS1Fu//zC7qeY2+pH
veW5PxZRwhN13VTMp6pgXBRdfpCEhbE9OZU43PhZHtIVJCNBjkLjp60Kzb+PNMaa
wke4jc+Hkfr4ZAiyiC9dSGFHIBBpmGQ7otPXFscQu6rt9KZXtlxcreswz2e9Wo/m
6bNoZAISc/96yJgdrucmYj+G6KPakod/uys0ycyqu7eGYNHXjIG76MnBK9O7L10k
N9yvJmJCu3o247tDCTGrZwOZ/bgrIkuDQGe9PvTkhBnQa3ScUNTAj8ztfaTGp7zy
2dYEMstOf2wnPw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:01 2025 by rpki-client