Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: 4mKNJnAzjM/+ON2L/jdMTkQy3c6FdKIx1ry0Ehqodfc=
Subject key identifier: 72:CD:38:EB:1D:ED:F1:23:05:8A:4F:B3:A0:AF:C1:F0:A1:99:06:37
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 0194BC3BDA74B4B29C3A535867780ECA89D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: u/YbG87+DPpKeM88GGuMITOi/Pr2sHImlacRdts2zW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:74:b4:b2:9c:3a:53:58:67:78:0e:ca:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=72cd38eb1dedf123058a4fb3a0afc1f0a1990637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b9:6c:c7:f9:4e:d4:2c:71:82:1e:5e:37:7f:
e9:ab:62:14:01:89:a2:49:63:96:8a:40:79:9b:a9:
7e:a1:8e:b5:37:6f:2a:6d:d2:78:b4:4b:8f:b5:77:
84:f9:c9:26:57:dc:c9:2d:e8:7c:8c:bd:fc:c2:36:
90:cd:0d:85:92:b7:69:f7:b2:b7:a7:bf:d7:70:10:
94:d0:2e:a2:60:5e:08:7f:d5:98:c3:86:a0:da:3b:
eb:c3:94:27:81:1f:5a:71:5d:e4:5a:a6:81:8d:4f:
79:b4:3a:ae:bd:1c:a4:c4:05:66:1f:cb:4b:c1:06:
7a:46:8c:a8:4d:b7:0d:20:16:37:81:77:30:f1:74:
41:2f:7a:d2:f5:16:c8:13:da:b4:6a:c0:5b:0b:d6:
3d:e7:07:20:0b:04:d2:6b:64:84:12:c5:85:f2:0c:
45:fd:37:8c:23:3a:a2:b5:19:53:e5:55:08:98:cc:
8e:d9:15:31:d3:1f:7f:0e:41:b5:8b:63:eb:e6:04:
04:f5:22:d7:9d:c9:78:96:40:3c:3d:7c:8b:09:c5:
ec:0e:78:82:ca:6c:c9:be:10:66:f7:ba:8b:1f:78:
e4:b2:1f:91:1d:02:9d:fe:fb:90:4c:a4:3a:36:ae:
ba:fc:9e:4e:a9:79:ca:c5:3f:92:ee:e4:d1:99:8b:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CD:38:EB:1D:ED:F1:23:05:8A:4F:B3:A0:AF:C1:F0:A1:99:06:37
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:41:bd:ea:a7:3f:a0:92:17:f5:1e:df:99:ff:c5:95:50:d8:
97:3f:7f:7b:1f:9c:65:2b:43:90:f4:e7:8d:ed:9d:06:4a:10:
b7:b0:e5:b5:34:ef:16:e2:2e:11:d1:0d:08:4f:a6:27:2d:0b:
af:a2:2a:3f:80:35:b4:ef:55:20:cf:1b:6c:33:0f:9b:47:28:
1f:ab:d0:ff:c4:8b:f1:39:9c:94:5c:c8:ee:0c:b5:d3:c5:29:
a1:1c:51:e3:8b:9b:f2:c1:37:dd:be:4b:88:0d:3a:f3:93:a0:
4e:e3:6a:c4:3a:bd:ee:54:7f:99:51:93:ca:8b:60:6f:08:68:
7e:55:da:3c:2d:8d:50:42:88:39:cc:d9:81:cc:34:a5:81:57:
5d:f2:44:ec:3e:c2:d3:68:de:98:a9:af:34:6e:5b:47:a7:9d:
ae:65:07:0c:66:74:50:e9:1d:76:91:5e:54:60:62:44:7b:97:
35:97:de:42:46:0c:1f:80:de:98:d5:f7:02:1e:6c:e5:12:fe:
56:be:28:c1:7f:52:8f:16:45:04:ec:80:4d:5f:89:22:51:56:
fc:e7:ca:06:1e:23:3e:79:e9:c8:e2:fe:13:ea:99:38:a5:f6:
b9:3c:7e:3e:9d:e9:6f:53:f9:00:0a:5f:ae:0e:16:30:55:8b:
c4:fd:37:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9p0tLKcOlNYZ3gOyonRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx
NzVlMDcwHhcNMjUwMTMxMTIwMDI2WhcNMjUwMjAxMTIwMDI2WjAzMTEwLwYDVQQD
Eyg3MmNkMzhlYjFkZWRmMTIzMDU4YTRmYjNhMGFmYzFmMGExOTkwNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyblsx/lO1Cxxgh5eN3/pq2IUAYmi
SWOWikB5m6l+oY61N28qbdJ4tEuPtXeE+ckmV9zJLeh8jL38wjaQzQ2Fkrdp97K3
p7/XcBCU0C6iYF4If9WYw4ag2jvrw5QngR9acV3kWqaBjU95tDquvRykxAVmH8tL
wQZ6RoyoTbcNIBY3gXcw8XRBL3rS9RbIE9q0asBbC9Y95wcgCwTSa2SEEsWF8gxF
/TeMIzqitRlT5VUImMyO2RUx0x9/DkG1i2Pr5gQE9SLXncl4lkA8PXyLCcXsDniC
ymzJvhBm97qLH3jksh+RHQKd/vuQTKQ6Nq66/J5OqXnKxT+S7uTRmYtW/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLNOOsd7fEjBYpPs6CvwfChmQY3MB8GA1UdIwQY
MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt
ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx
LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREG96qc/
oJIX9R7fmf/FlVDYlz9/ex+cZStDkPTnje2dBkoQt7DltTTvFuIuEdENCE+mJy0L
r6IqP4A1tO9VIM8bbDMPm0coH6vQ/8SL8TmclFzI7gy108UpoRxR44ub8sE33b5L
iA0685OgTuNqxDq97lR/mVGTyotgbwhoflXaPC2NUEKIOczZgcw0pYFXXfJE7D7C
02jemKmvNG5bR6edrmUHDGZ0UOkddpFeVGBiRHuXNZfeQkYMH4DemNX3Ah5s5RL+
Vr4owX9SjxZFBOyATV+JIlFW/OfKBh4jPnnpyOL+E+qZOKX2uTx+Pp3pb1P5AApf
rg4WMFWLxP033g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:27 2025 by rpki-client