Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: UerfzNfJq/IxrNfVhnI3c7BhVv11TtyRup6c0FaSxj0=
Subject key identifier: 82:2C:33:4E:17:28:1C:C6:CC:51:5C:03:CB:E0:7A:9F:36:0B:FC:7D
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0194BD852A7F64A2E10B9E587B7B256DF091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: PVonbEaZYexx1UiM7GAggIVlzNPILIsvqimd75FfRN8=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2a:7f:64:a2:e1:0b:9e:58:7b:7b:25:6d:f0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=822c334e17281cc6cc515c03cbe07a9f360bfc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:0f:63:0c:9b:34:92:8f:1d:5f:e6:b8:75:
d5:24:61:ec:e9:a9:da:88:68:5a:ec:f7:cf:e9:ba:
99:f0:4a:de:9a:96:e4:c1:46:be:44:b9:94:65:27:
cc:46:30:1c:eb:f8:a7:0b:8e:3f:e8:47:70:c3:6f:
b4:a2:24:61:14:09:36:e5:ca:62:e2:79:f3:b4:c9:
6e:ee:34:da:30:a2:fb:ad:d6:3c:b6:ed:41:b9:2f:
60:df:ce:37:82:9a:ee:67:53:ab:53:7a:06:1d:70:
93:98:3c:80:ea:c2:5f:28:e9:05:1f:26:4c:1e:ab:
e5:c9:70:92:d5:7e:20:a0:e4:3e:af:21:3b:c6:94:
44:2c:b5:4a:58:20:09:7f:aa:26:24:ff:1b:cd:65:
ac:69:60:2b:b4:a6:6d:23:97:1e:d0:5a:3c:e2:62:
e0:38:87:cb:71:fd:73:33:19:3e:13:36:0c:4a:95:
a1:d2:0a:fe:f3:89:de:50:39:6a:00:e0:c6:af:b5:
fa:11:b1:7c:c4:47:fe:91:74:21:26:5d:d0:a6:ea:
31:03:16:6c:56:dd:ea:7a:e8:be:65:a7:72:12:57:
84:73:22:bb:c4:2d:b5:d0:f5:de:20:fe:2f:70:14:
64:db:26:ee:27:28:2b:18:1b:6f:d6:62:7c:a4:a7:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:33:4E:17:28:1C:C6:CC:51:5C:03:CB:E0:7A:9F:36:0B:FC:7D
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:87:48:b7:5b:7d:4f:50:ce:40:bd:dc:7c:05:a2:10:ac:
58:6a:31:b3:f0:0b:b4:5f:e5:ec:bd:f8:8c:2e:83:69:70:2c:
20:70:6f:0a:68:ed:b9:bb:f4:a4:27:92:31:38:04:4e:78:66:
83:48:60:a7:da:bd:ec:ea:43:1a:03:4f:c0:ef:c2:a7:a7:71:
a2:1a:4f:86:70:7f:4b:18:e0:0f:27:ff:28:a3:16:d3:5a:bd:
79:67:3e:b1:40:76:3c:5a:f6:e4:54:23:d1:36:1d:48:12:42:
eb:88:55:70:f9:7a:0b:bc:8f:44:6f:7b:8a:2f:f0:ff:f0:e5:
74:2e:92:03:c6:6f:e4:8f:d3:df:6a:77:48:dc:c4:eb:c6:b7:
ac:2d:22:d9:ad:0a:3c:20:6e:8e:23:12:7f:78:8f:b1:48:72:
01:52:42:03:94:89:5a:1f:d4:dc:05:a2:9e:b5:37:0b:45:0a:
55:8e:17:d4:74:cf:b4:7f:4f:d4:bb:82:fb:a7:03:90:2f:79:
5b:91:91:47:81:a5:21:d1:39:bc:f1:78:50:55:65:46:0a:af:
1e:17:4c:c4:18:a6:e5:75:e8:2d:da:47:cf:db:42:48:c1:d8:
24:86:9d:e9:d4:9d:6d:2e:5e:c3:e9:4b:d2:29:95:d8:ac:9d:
e9:8e:77:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSp/ZKLhC55Ye3slbfCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGE3NTcxYzVlYjEzYjFhZTRmNDQxN2NlZmVjMmJkNzc5
MDJlMmQwHhcNMjUwMTMxMTgwMDA4WhcNMjUwMjAxMTgwMDA4WjAzMTEwLwYDVQQD
Eyg4MjJjMzM0ZTE3MjgxY2M2Y2M1MTVjMDNjYmUwN2E5ZjM2MGJmYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEEPYwybNJKPHV/muHXVJGHs6ana
iGha7PfP6bqZ8ErempbkwUa+RLmUZSfMRjAc6/inC44/6Edww2+0oiRhFAk25cpi
4nnztMlu7jTaMKL7rdY8tu1BuS9g3843gpruZ1OrU3oGHXCTmDyA6sJfKOkFHyZM
HqvlyXCS1X4goOQ+ryE7xpRELLVKWCAJf6omJP8bzWWsaWArtKZtI5ce0Fo84mLg
OIfLcf1zMxk+EzYMSpWh0gr+84neUDlqAODGr7X6EbF8xEf+kXQhJl3QpuoxAxZs
Vt3qeui+ZadyEleEcyK7xC210PXeIP4vcBRk2ybuJygrGBtv1mJ8pKclyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIsM04XKBzGzFFcA8vgep82C/x9MB8GA1UdIwQY
MBaAFAXadXHF6xOxrk9EF87+wr13kC4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEt
MzY1NTMwMmJmMDA1LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjRmODMtMzcwYS00OTAxLThiZmEtMzY1NTMwMmJmMDA1
LzEvQmRwMWNjWHJFN0d1VDBRWHp2N0N2WGVRTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDqHSLdb
fU9QzkC93HwFohCsWGoxs/ALtF/l7L34jC6DaXAsIHBvCmjtubv0pCeSMTgETnhm
g0hgp9q97OpDGgNPwO/Cp6dxohpPhnB/SxjgDyf/KKMW01q9eWc+sUB2PFr25FQj
0TYdSBJC64hVcPl6C7yPRG97ii/w//DldC6SA8Zv5I/T32p3SNzE68a3rC0i2a0K
PCBujiMSf3iPsUhyAVJCA5SJWh/U3AWinrU3C0UKVY4X1HTPtH9P1LuC+6cDkC95
W5GRR4GlIdE5vPF4UFVlRgqvHhdMxBim5XXoLdpHz9tCSMHYJIad6dSdbS5ew+lL
0imV2Kyd6Y53Qg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client