Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File: BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier: wRyh6uZS7BIbiPEZBusryvv5FB+BrNw+q5BREjsRXVM=
Subject key identifier: 9F:14:34:2A:EC:F0:E4:E4:EC:9E:30:C1:4B:82:F2:0E:BD:9A:F5:91
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 0194BCA9A0BC50CDF464855A2D406C3F7674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number: 05C6
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: ktBXaj3+MryYBUw0C5raEe2asZD/jyvTjX+Z1/ZPYi0=)
2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:bc:50:cd:f4:64:85:5a:2d:40:6c:3f:76:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=9f14342aecf0e4e4ec9e30c14b82f20ebd9af591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:02:58:d8:cc:42:cb:17:b5:b0:fa:2f:be:
b8:66:ae:92:81:c8:11:b6:05:36:a1:f5:07:43:e6:
e5:04:6a:60:47:f1:77:21:43:fa:b5:a3:47:43:8c:
26:03:cb:a1:34:06:55:c5:83:d9:ae:c5:09:8b:7d:
43:ac:54:6c:5c:f6:8e:84:09:b9:e8:9d:c3:f0:05:
cf:ca:d1:b7:51:38:9d:7c:30:c3:9f:61:00:f2:a4:
e4:25:f4:55:2f:b3:2d:ff:5a:a6:24:bf:17:7e:da:
4a:56:fe:1f:60:91:a9:ef:0f:4a:89:91:97:b8:91:
94:1d:87:7f:80:9b:29:fd:18:a9:8a:4d:8a:cb:2e:
17:c8:9c:ca:2f:27:88:7d:eb:70:ca:10:0a:d5:00:
dd:ea:d5:fb:9a:27:44:dd:56:81:6e:d4:35:a1:c0:
a8:46:dd:2b:37:4a:ac:ab:79:73:8e:dd:ea:86:85:
13:9c:dc:da:6d:44:4a:3e:34:76:4c:14:d8:3b:0b:
f2:2b:48:15:58:e1:2b:55:de:b5:f4:ed:0a:ad:b3:
a6:c1:96:b2:6d:46:50:27:6c:bf:b1:13:4c:36:65:
e4:4e:9b:0a:5b:e2:07:23:ec:58:cd:be:e9:99:b3:
60:97:97:55:fe:65:35:60:64:7a:f7:f4:b0:64:69:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:34:2A:EC:F0:E4:E4:EC:9E:30:C1:4B:82:F2:0E:BD:9A:F5:91
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:f9:ad:32:41:46:ce:14:e0:17:6b:94:6f:f8:b2:1e:bb:
49:bf:3b:d8:ab:22:40:b0:d2:85:a7:ab:d0:1d:ba:a3:2a:8c:
c8:40:a4:11:c4:39:fc:a9:3b:55:03:21:4f:cd:e9:e8:ce:40:
2c:33:e0:99:dc:3d:91:47:e3:6f:b7:62:77:e5:bd:ff:e6:a7:
ce:14:f1:e0:14:13:b0:42:14:66:91:53:68:48:02:c3:a7:04:
c4:4c:cf:55:b0:5a:7a:48:3f:85:bf:0f:70:84:0a:94:c9:c8:
79:d5:ed:b2:dc:4f:a5:ae:24:d8:cb:3c:12:af:46:e9:a2:06:
cf:2f:a7:1e:0e:9e:56:30:3f:46:0a:e4:fa:3a:05:e1:c0:9f:
95:5d:36:f5:c5:73:24:e4:7e:8b:7d:60:f3:b0:82:e7:8c:38:
61:e2:30:c7:6d:24:f4:d3:46:29:09:3d:7f:16:87:73:16:36:
83:6d:e7:3b:7f:59:fb:83:4e:2c:e5:7d:aa:45:42:0c:ce:75:
a2:ab:cd:87:7f:d9:40:25:02:97:e8:fb:f3:c2:30:d3:b2:d9:
44:60:a4:43:20:57:71:a9:f0:1c:43:57:62:98:4d:a0:db:15:
3a:dd:9d:b8:ae:1c:e7:18:4d:c9:d2:d4:a5:e4:ad:bc:fd:52:
ab:4a:9d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaC8UM30ZIVaLUBsP3Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDUyNzlkODdmOGMwZjM4YzM5MGEzM2NmMTY5OTU1MWRj
MzBmZTQwHhcNMjUwMTMxMTQwMDIwWhcNMjUwMjAxMTQwMDIwWjAzMTEwLwYDVQQD
Eyg5ZjE0MzQyYWVjZjBlNGU0ZWM5ZTMwYzE0YjgyZjIwZWJkOWFmNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2YCWNjMQssXtbD6L764Zq6SgcgR
tgU2ofUHQ+blBGpgR/F3IUP6taNHQ4wmA8uhNAZVxYPZrsUJi31DrFRsXPaOhAm5
6J3D8AXPytG3UTidfDDDn2EA8qTkJfRVL7Mt/1qmJL8XftpKVv4fYJGp7w9KiZGX
uJGUHYd/gJsp/Ripik2Kyy4XyJzKLyeIfetwyhAK1QDd6tX7midE3VaBbtQ1ocCo
Rt0rN0qsq3lzjt3qhoUTnNzabURKPjR2TBTYOwvyK0gVWOErVd619O0KrbOmwZay
bUZQJ2y/sRNMNmXkTpsKW+IHI+xYzb7pmbNgl5dV/mU1YGR69/SwZGmldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8UNCrs8OTk7J4wwUuC8g69mvWRMB8GA1UdIwQY
MBaAFAVFJ52H+MDzjDkKM88WmVUdww/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAt
OWQzODZkMDQ2ZmIwLzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83NjgzNzgtZDc5Yi00NWM3LWEyOTAtOWQzODZkMDQ2ZmIw
LzEvQlVVbm5ZZjR3UE9NT1Fvenp4YVpWUjNERC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+j5rTJB
Rs4U4BdrlG/4sh67Sb872KsiQLDShaer0B26oyqMyECkEcQ5/Kk7VQMhT83p6M5A
LDPgmdw9kUfjb7did+W9/+anzhTx4BQTsEIUZpFTaEgCw6cExEzPVbBaekg/hb8P
cIQKlMnIedXtstxPpa4k2Ms8Eq9G6aIGzy+nHg6eVjA/Rgrk+joF4cCflV029cVz
JOR+i31g87CC54w4YeIwx20k9NNGKQk9fxaHcxY2g23nO39Z+4NOLOV9qkVCDM51
oqvNh3/ZQCUCl+j788Iw07LZRGCkQyBXcanwHENXYphNoNsVOt2duK4c5xhNydLU
peStvP1Sq0qd/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:45 2025 by rpki-client