Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: WxSXe8LJPVJEg1S8+jDO9KQJtbcQWH3/KDNGb4dzbbM=
Subject key identifier: 47:BA:FB:4E:13:58:9D:DD:EB:E9:47:1A:AC:14:34:12:F0:1C:39:E3
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 0194BD85AFC76DDADEC6016A0C80545FFA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 112D
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: DtTH4RnQ6Y27GyAi/o4EqgINnzPVexVw8NEkTVPfH2g=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:c7:6d:da:de:c6:01:6a:0c:80:54:5f:fa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=47bafb4e13589dddebe9471aac143412f01c39e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:f5:48:de:10:d1:44:92:de:dc:f4:fd:c4:
ea:24:2b:b6:5b:58:3f:63:72:c6:b1:07:1c:5d:de:
66:35:65:04:42:e4:d7:7c:6b:82:69:1e:21:de:06:
38:34:a3:32:7b:39:c8:be:ce:2a:42:ee:20:e6:c1:
07:89:3f:ef:0b:22:ce:84:51:46:6c:b7:32:fa:6e:
b3:4e:7e:4e:ab:16:62:6c:e1:c1:00:fc:ee:10:78:
bf:ea:93:dd:b1:5c:a3:f1:de:99:70:d4:39:47:f4:
2e:da:95:f0:74:7f:d6:95:e8:d9:c2:11:e1:ab:82:
4e:d9:90:9b:cf:85:2a:83:4a:d9:95:11:ee:96:7b:
5a:10:98:6e:21:59:a4:69:8a:d7:d5:a6:d8:da:b9:
17:12:b5:fd:eb:9a:05:40:ad:bc:0c:5a:a4:b0:1a:
d6:b3:c2:3f:58:6b:b7:96:a4:43:75:56:73:c6:03:
26:34:97:ef:b3:b4:0e:b5:f1:e0:b0:e7:c1:98:ec:
b7:89:e6:de:ad:d7:4a:8f:de:25:4e:2f:4e:cd:34:
36:13:a6:b3:ff:2d:61:b9:ca:e0:28:23:97:23:61:
a2:3b:f6:57:9d:d2:6a:27:ad:59:72:00:91:96:8a:
f5:d1:fc:2a:fd:84:f8:f7:8a:5f:b4:de:56:ec:ee:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:FB:4E:13:58:9D:DD:EB:E9:47:1A:AC:14:34:12:F0:1C:39:E3
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:07:02:a3:6e:4a:89:ac:b7:1f:b9:0a:b7:27:7c:72:60:fc:
51:d2:20:1d:4d:fa:eb:e3:8d:18:57:de:80:fc:c5:53:51:eb:
12:f5:a4:4f:62:bb:45:f4:6b:b1:07:46:74:bd:a8:52:84:12:
dc:d0:24:8a:94:11:92:b8:73:74:7b:4c:60:9f:90:14:be:18:
86:f0:3d:47:ca:e5:61:76:13:7d:6a:98:93:06:1c:58:9c:52:
27:b8:af:de:d7:8d:87:0d:06:ea:c1:01:3c:a7:8d:71:d8:fa:
10:5a:eb:90:78:e9:6a:2f:eb:48:6b:59:a1:11:81:fe:f8:0a:
31:a4:2f:14:2b:60:c3:fa:66:9c:c6:39:0f:95:d5:4f:44:79:
eb:f6:48:e1:fd:32:91:a0:02:cb:9b:22:7e:0c:01:08:fd:62:
bc:68:4d:31:72:3e:07:fc:5f:4e:e1:13:d2:c5:dd:a9:50:04:
49:3b:4f:ac:10:67:77:b1:e4:34:94:85:49:82:83:d1:d5:09:
f7:7f:8e:90:02:d3:80:0a:af:d6:cb:83:aa:3a:e1:66:95:e2:
9d:3e:be:fc:2e:a9:1f:32:7f:9e:f1:86:11:af:c1:35:8d:b9:
0d:ae:3a:a9:cc:d1:fd:c7:52:96:70:c5:57:02:cc:9c:9c:f0:
20:f6:c5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ha/HbdrexgFqDIBUX/qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
Eyg0N2JhZmI0ZTEzNTg5ZGRkZWJlOTQ3MWFhYzE0MzQxMmYwMWMzOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6z1SN4Q0USS3tz0/cTqJCu2W1g/
Y3LGsQccXd5mNWUEQuTXfGuCaR4h3gY4NKMyeznIvs4qQu4g5sEHiT/vCyLOhFFG
bLcy+m6zTn5OqxZibOHBAPzuEHi/6pPdsVyj8d6ZcNQ5R/Qu2pXwdH/WlejZwhHh
q4JO2ZCbz4Uqg0rZlRHulntaEJhuIVmkaYrX1abY2rkXErX965oFQK28DFqksBrW
s8I/WGu3lqRDdVZzxgMmNJfvs7QOtfHgsOfBmOy3ieberddKj94lTi9OzTQ2E6az
/y1hucrgKCOXI2GiO/ZXndJqJ61ZcgCRlor10fwq/YT494pftN5W7O7eBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe6+04TWJ3d6+lHGqwUNBLwHDnjMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQcCo25K
iay3H7kKtyd8cmD8UdIgHU366+ONGFfegPzFU1HrEvWkT2K7RfRrsQdGdL2oUoQS
3NAkipQRkrhzdHtMYJ+QFL4YhvA9R8rlYXYTfWqYkwYcWJxSJ7iv3teNhw0G6sEB
PKeNcdj6EFrrkHjpai/rSGtZoRGB/vgKMaQvFCtgw/pmnMY5D5XVT0R56/ZI4f0y
kaACy5sifgwBCP1ivGhNMXI+B/xfTuET0sXdqVAESTtPrBBnd7HkNJSFSYKD0dUJ
93+OkALTgAqv1suDqjrhZpXinT6+/C6pHzJ/nvGGEa/BNY25Da46qczR/cdSlnDF
VwLMnJzwIPbF2w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client