Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: HzaXskdoTzMd5VRyosTYdVtGDjs9r5dGT6dRAvo5MAQ=
Subject key identifier: 90:53:F0:34:93:BD:7B:8F:F3:1F:1C:A4:A9:54:CE:AA:91:0B:53:11
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 0194BD4E4067AAD892A9A6659DEF0B41FBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: SfuXmn1NL2KWW85LUhadDSb/SrNrtSLP+IXPMJ5ULLo=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:67:aa:d8:92:a9:a6:65:9d:ef:0b:41:fb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=9053f03493bd7b8ff31f1ca4a954ceaa910b5311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:2d:54:d9:37:a9:30:7d:73:83:73:97:4e:
b7:f5:b7:16:79:6e:f6:b2:0b:b4:d6:bc:db:81:a9:
e5:39:fb:63:af:24:f6:60:0c:0d:8c:88:ee:42:da:
e1:04:03:b3:b1:d9:b4:44:4d:96:67:8c:31:c3:62:
8d:53:24:0c:61:6f:e4:0a:78:f2:49:47:57:d1:94:
c1:3c:a7:36:5c:f2:52:6d:c5:cd:02:b5:9a:12:98:
ed:ab:f0:5f:8c:3c:02:5d:b6:75:a5:de:a0:2d:3c:
84:b6:c9:e3:77:83:d7:dc:4d:8e:69:3d:d6:f8:62:
b0:76:dd:cb:af:7f:a7:fe:e4:fd:f0:fd:5a:45:64:
d9:01:ef:9b:5e:36:ff:75:e1:d2:92:ba:f5:05:9c:
c9:f7:14:cc:5b:59:ea:2d:85:0a:d6:b9:f7:62:2e:
d9:c5:98:61:fb:b7:2f:f0:6b:62:fc:26:a4:5e:04:
c6:fc:0b:21:84:2b:95:bb:8d:07:e1:8d:72:4b:ed:
a8:f2:1f:9b:04:b2:44:79:cf:e1:7e:4b:b8:d1:35:
98:19:2f:f4:99:0a:d5:d8:c6:d8:4b:bf:84:5b:71:
41:aa:44:e7:6f:26:d0:1e:a9:c9:25:57:2e:9d:ac:
07:a5:b0:df:e5:75:71:c1:52:4c:71:fa:63:e5:d5:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:53:F0:34:93:BD:7B:8F:F3:1F:1C:A4:A9:54:CE:AA:91:0B:53:11
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:46:8d:c1:bd:b2:d2:1d:2a:28:de:25:e5:85:a2:f4:d9:f3:
71:b4:db:63:1a:38:f0:28:d4:2a:9e:8d:b1:d1:ae:4d:fa:ef:
a5:45:58:f8:e9:b3:19:ff:c6:2e:a2:53:d6:be:9d:5d:9e:a6:
55:1a:0b:a0:11:e2:72:0b:a9:1f:ae:23:ae:b8:06:4f:e1:0d:
61:10:60:d0:95:97:e7:ab:df:cb:b0:c9:ae:4a:9c:15:ba:ce:
40:9c:74:8e:01:8b:ea:31:88:16:bf:4f:57:cf:03:11:d1:7f:
c8:00:4c:75:38:94:e5:ba:77:1b:de:96:68:7a:06:c8:07:04:
41:ba:b9:bb:c7:e1:f1:34:ec:ce:40:eb:76:10:5c:fd:ec:4a:
aa:46:05:9d:97:68:43:a1:c7:ae:c2:07:67:2d:28:5c:54:2c:
e5:c0:2d:1f:f5:8b:ac:38:de:2e:84:4a:73:9c:ca:dd:f2:08:
fa:79:cc:c2:97:bb:0c:bf:f5:c7:4b:a0:4a:a9:45:7b:01:0d:
b7:c4:5f:f6:e2:03:ac:35:39:0c:e5:9a:56:7f:bf:d1:a2:f8:
f5:34:40:77:64:ce:d4:ea:34:e1:f3:e3:88:fd:1a:3b:49:ff:
1b:89:94:25:ee:d8:7b:6b:72:f0:3b:47:ea:10:8e:96:e0:9b:
1f:7d:47:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TkBnqtiSqaZlne8LQfvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl
MTUzMGQwHhcNMjUwMTMxMTcwMDA5WhcNMjUwMjAxMTcwMDA5WjAzMTEwLwYDVQQD
Eyg5MDUzZjAzNDkzYmQ3YjhmZjMxZjFjYTRhOTU0Y2VhYTkxMGI1MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8gtVNk3qTB9c4Nzl0639bcWeW72
sgu01rzbganlOftjryT2YAwNjIjuQtrhBAOzsdm0RE2WZ4wxw2KNUyQMYW/kCnjy
SUdX0ZTBPKc2XPJSbcXNArWaEpjtq/BfjDwCXbZ1pd6gLTyEtsnjd4PX3E2OaT3W
+GKwdt3Lr3+n/uT98P1aRWTZAe+bXjb/deHSkrr1BZzJ9xTMW1nqLYUK1rn3Yi7Z
xZhh+7cv8Gti/CakXgTG/AshhCuVu40H4Y1yS+2o8h+bBLJEec/hfku40TWYGS/0
mQrV2MbYS7+EW3FBqkTnbybQHqnJJVcunawHpbDf5XVxwVJMcfpj5dVFHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBT8DSTvXuP8x8cpKlUzqqRC1MRMB8GA1UdIwQY
MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt
NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0
LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0aNwb2y
0h0qKN4l5YWi9NnzcbTbYxo48CjUKp6NsdGuTfrvpUVY+OmzGf/GLqJT1r6dXZ6m
VRoLoBHicgupH64jrrgGT+ENYRBg0JWX56vfy7DJrkqcFbrOQJx0jgGL6jGIFr9P
V88DEdF/yABMdTiU5bp3G96WaHoGyAcEQbq5u8fh8TTszkDrdhBc/exKqkYFnZdo
Q6HHrsIHZy0oXFQs5cAtH/WLrDjeLoRKc5zK3fII+nnMwpe7DL/1x0ugSqlFewEN
t8Rf9uIDrDU5DOWaVn+/0aL49TRAd2TO1Oo04fPjiP0aO0n/G4mUJe7Ye2ty8DtH
6hCOluCbH31HAg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client