
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File: b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier: WYhw0uUjEdgDC4PQebNOpuQz6SJVyPS/MwrivOTW0X4=
Subject key identifier: B9:83:82:9F:88:91:E6:AB:15:60:C8:72:6B:2F:19:67:FC:A3:80:D0
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 0194BCAA1ECB1C23BB37B0BCD55EC8A5F45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number: 10DB
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=)
2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=)
3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=)
4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=)
5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: nyVA6cK5M/BOz6crGJuc/5U4GDsK7t9II7+kA87d4Ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:cb:1c:23:bb:37:b0:bc:d5:5e:c8:a5:f4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=b983829f8891e6ab1560c8726b2f1967fca380d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:9d:e4:37:30:b6:08:12:3d:58:8a:6f:8a:
cf:bf:51:e7:3d:90:6a:5f:b2:a0:82:b9:96:90:99:
53:96:60:00:68:c1:43:a8:88:2d:02:58:f0:46:9b:
73:09:f8:11:3d:9f:a7:fc:fa:4b:24:24:e1:5f:5e:
ae:be:ca:3f:3b:bf:83:ba:96:51:8b:3c:ea:ba:63:
2b:c3:81:a4:95:3e:68:04:28:c7:97:64:9c:fe:31:
be:df:1e:0c:a9:6e:af:8e:b2:a9:1e:61:ea:56:53:
3f:6f:a9:4e:b6:f8:61:ec:22:d6:73:0d:87:3b:f4:
97:eb:66:62:42:4e:ca:64:7b:46:0a:fc:73:f0:fd:
41:a3:83:ff:b4:c9:8a:d3:8c:81:4a:4d:0c:42:76:
39:f0:7f:2d:01:39:50:77:40:7e:a2:c8:c7:63:aa:
d4:db:bd:91:7d:d2:32:06:a4:46:49:21:d3:ac:6f:
93:74:4f:f8:e6:44:9c:dc:d5:cd:ea:cb:ea:9f:66:
21:c2:28:43:c5:23:d9:24:d8:f6:20:1a:6c:f0:ae:
e6:b3:0d:58:54:1e:b4:bb:07:55:c5:ce:34:15:14:
46:c4:4b:64:3a:b7:c5:9f:8a:6a:b9:49:19:88:9f:
35:d9:51:ec:89:b7:be:ff:e4:39:07:9b:c3:09:2b:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:82:9F:88:91:E6:AB:15:60:C8:72:6B:2F:19:67:FC:A3:80:D0
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:14:c6:96:8c:73:50:05:d2:b5:75:c7:81:49:7d:06:09:75:
09:32:43:33:cd:ae:62:02:db:a7:10:61:ab:70:51:4a:c3:68:
0f:04:18:b6:8d:7f:3e:7d:b0:6b:74:1e:6c:45:c8:7a:af:65:
98:35:fd:c2:86:5f:20:82:49:1b:dc:2e:fc:04:e6:d2:29:2a:
c4:87:79:f3:3b:49:ad:89:5e:e7:dc:f0:10:56:9d:65:11:f4:
d5:56:c5:10:93:a1:58:2d:aa:da:a0:bb:7f:fb:dc:e6:ee:2d:
cb:2a:34:39:20:bd:d0:58:bf:17:f1:13:89:08:b1:d0:1b:24:
f2:58:8e:60:69:ed:8c:db:01:dc:69:a4:3a:d7:21:1e:31:37:
31:90:f1:ee:b3:97:48:0b:00:a6:02:c1:fb:e9:6d:65:d2:78:
65:35:b5:4b:ee:19:06:c4:87:9f:6e:bd:0e:72:2b:35:da:6a:
4d:b2:4c:e3:a9:60:bb:12:2c:a1:94:9d:7f:fe:fa:46:e3:c3:
e0:39:23:b7:91:80:ef:39:71:02:06:ea:bf:54:57:06:93:d4:
e5:73:44:3a:84:17:81:be:67:0e:94:97:44:b3:27:66:9a:5d:
29:46:fc:73:3b:4b:32:d9:8e:af:22:1e:70:45:ad:35:c0:29:
1d:c8:e4:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh7LHCO7N7C81V7IpfRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjM2MmMwNzY1YWZiN2I5ODA0YjZkODE5NDcwMDA3YjAx
ZjI2MmUwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
EyhiOTgzODI5Zjg4OTFlNmFiMTU2MGM4NzI2YjJmMTk2N2ZjYTM4MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOd5DcwtggSPViKb4rPv1HnPZBq
X7KggrmWkJlTlmAAaMFDqIgtAljwRptzCfgRPZ+n/PpLJCThX16uvso/O7+DupZR
izzqumMrw4GklT5oBCjHl2Sc/jG+3x4MqW6vjrKpHmHqVlM/b6lOtvhh7CLWcw2H
O/SX62ZiQk7KZHtGCvxz8P1Bo4P/tMmK04yBSk0MQnY58H8tATlQd0B+osjHY6rU
272RfdIyBqRGSSHTrG+TdE/45kSc3NXN6svqn2YhwihDxSPZJNj2IBps8K7msw1Y
VB60uwdVxc40FRRGxEtkOrfFn4pquUkZiJ812VHsibe+/+Q5B5vDCSukAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmDgp+IkearFWDIcmsvGWf8o4DQMB8GA1UdIwQY
MBaAFG/zYsB2Wvt7mAS22BlHAAewHyYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEt
ZGFmZDc0NzYzZDIzLzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEtZGFmZDc0NzYzZDIz
LzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixTGloxz
UAXStXXHgUl9Bgl1CTJDM82uYgLbpxBhq3BRSsNoDwQYto1/Pn2wa3QebEXIeq9l
mDX9woZfIIJJG9wu/ATm0ikqxId58ztJrYle59zwEFadZRH01VbFEJOhWC2q2qC7
f/vc5u4tyyo0OSC90Fi/F/ETiQix0Bsk8liOYGntjNsB3GmkOtchHjE3MZDx7rOX
SAsApgLB++ltZdJ4ZTW1S+4ZBsSHn269DnIrNdpqTbJM46lguxIsoZSdf/76RuPD
4Dkjt5GA7zlxAgbqv1RXBpPU5XNEOoQXgb5nDpSXRLMnZppdKUb8cztLMtmOryIe
cEWtNcApHcjkTg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:13 2025 by rpki-client