Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: dO+ZeLWYRSd0jCdoZjX1uPEx4ON1xqoor64XDR5HzP4=
Subject key identifier: 31:CB:12:68:3A:69:F1:AF:42:8E:A2:13:6A:18:03:03:C3:2A:95:7C
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0194BCE0BC2B22860EC2AD5DD852CA006AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: zZlvJf90mI9Rohx61ka9R8hbMfEu/Nh2DrkC9enAjHI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bc:2b:22:86:0e:c2:ad:5d:d8:52:ca:00:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=31cb12683a69f1af428ea2136a180303c32a957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:85:cf:46:25:6e:dc:cc:5f:13:3a:ed:17:
06:bc:6c:16:ce:5a:56:33:bf:5e:a4:26:4c:34:8a:
49:3e:ec:b8:d8:eb:78:fd:ed:0e:cc:2c:82:8d:39:
0f:53:ea:5f:1a:4c:df:60:b7:19:bc:9f:17:dd:ba:
57:0a:ff:cf:4c:ec:a7:dc:b8:78:df:fe:6c:c4:f5:
07:42:87:7d:19:13:73:a9:e2:12:0e:f7:aa:e2:03:
de:d7:14:d8:5b:ec:0e:2b:1c:8d:d1:74:c5:cf:c5:
df:af:2d:95:1e:81:12:fb:70:42:a2:06:79:dc:04:
be:8f:b8:8d:64:cf:a1:e8:d9:07:61:b6:58:a4:a3:
70:b2:ac:cd:c4:16:ca:f4:81:06:49:45:2c:d2:bc:
ab:86:37:e3:6c:9b:da:6f:0b:d2:1a:68:a9:e1:4e:
db:ea:a3:21:fb:cf:17:bc:7d:51:e4:86:fb:0e:c6:
d8:98:34:0e:2c:38:50:2d:ef:3e:24:7f:ea:8f:04:
8e:46:ee:51:e4:54:14:3e:5e:ef:53:97:74:4d:be:
fc:bd:5f:07:70:75:3c:74:7b:b3:86:30:f3:ad:86:
b0:70:d2:d5:12:b8:cd:ff:8c:f5:40:c9:8f:56:2d:
e8:de:7e:ef:15:57:06:3d:54:c5:fa:3d:16:07:0b:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:12:68:3A:69:F1:AF:42:8E:A2:13:6A:18:03:03:C3:2A:95:7C
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ea:78:f6:f5:70:ea:86:5f:09:30:dc:42:bf:35:2b:d9:3b:
35:64:1d:97:ac:e5:ca:55:cf:34:70:68:99:ca:a6:d8:2b:19:
16:bc:20:5e:7a:73:d0:19:07:eb:4f:9a:86:3d:fc:91:ba:0d:
8d:39:7c:a5:27:46:f7:a8:9c:d2:5f:3a:17:3e:97:b1:de:80:
df:30:a7:4a:2b:a6:c4:3f:7e:42:76:3c:6e:3f:84:c9:42:78:
e7:c0:61:ba:56:e4:94:67:f7:f8:cc:23:c6:0f:30:4b:53:cf:
1b:68:98:22:14:2c:27:91:83:49:f3:f3:ed:3e:f9:a2:9c:8f:
09:8a:93:b7:56:7b:7a:d1:a8:95:19:dd:b5:5c:2b:10:7b:75:
67:6f:bc:82:17:63:c5:07:6a:c8:51:8e:0c:7d:cf:bc:9b:17:
0b:8e:7f:52:4a:83:6b:fd:7b:82:50:2e:fc:48:43:2c:76:1f:
6d:f5:cf:eb:00:c2:84:f5:c6:22:c8:82:b4:ef:4c:0e:84:b1:
f2:c2:25:54:6a:04:07:0b:16:bd:25:01:0a:8d:0d:62:f4:db:
59:d3:6c:e2:30:2c:82:7f:f8:4d:7a:fd:94:ef:be:ce:f7:ad:
e2:c2:3d:46:ea:da:bf:19:6e:c0:e2:3e:74:c6:67:6e:97:91:
3f:b5:f7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LwrIoYOwq1d2FLKAGqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjUwMTMxMTUwMDMyWhcNMjUwMjAxMTUwMDMyWjAzMTEwLwYDVQQD
EygzMWNiMTI2ODNhNjlmMWFmNDI4ZWEyMTM2YTE4MDMwM2MzMmE5NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCqFz0YlbtzMXxM67RcGvGwWzlpW
M79epCZMNIpJPuy42Ot4/e0OzCyCjTkPU+pfGkzfYLcZvJ8X3bpXCv/PTOyn3Lh4
3/5sxPUHQod9GRNzqeISDveq4gPe1xTYW+wOKxyN0XTFz8Xfry2VHoES+3BCogZ5
3AS+j7iNZM+h6NkHYbZYpKNwsqzNxBbK9IEGSUUs0ryrhjfjbJvabwvSGmip4U7b
6qMh+88XvH1R5Ib7DsbYmDQOLDhQLe8+JH/qjwSORu5R5FQUPl7vU5d0Tb78vV8H
cHU8dHuzhjDzrYawcNLVErjN/4z1QMmPVi3o3n7vFVcGPVTF+j0WBwtHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHLEmg6afGvQo6iE2oYAwPDKpV8MB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcep49vVw
6oZfCTDcQr81K9k7NWQdl6zlylXPNHBomcqm2CsZFrwgXnpz0BkH60+ahj38kboN
jTl8pSdG96ic0l86Fz6Xsd6A3zCnSiumxD9+QnY8bj+EyUJ458BhulbklGf3+Mwj
xg8wS1PPG2iYIhQsJ5GDSfPz7T75opyPCYqTt1Z7etGolRndtVwrEHt1Z2+8ghdj
xQdqyFGODH3PvJsXC45/UkqDa/17glAu/EhDLHYfbfXP6wDChPXGIsiCtO9MDoSx
8sIlVGoEBwsWvSUBCo0NYvTbWdNs4jAsgn/4TXr9lO++zvet4sI9RuravxluwOI+
dMZnbpeRP7X3ow==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:31 2025 by rpki-client