Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: rNZ7g6AXUPWzTJ3vQQDy6zc9rh1ayl1+E2P+D53bm3A=
Subject key identifier: 0D:79:0F:36:5B:2E:17:56:41:DE:7F:93:85:A5:CD:AF:D8:62:01:C2
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0194BD4E8079DFC5FCD587FD518D52E7190E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: /12YBgObanMOa6CRVYeQLjR8Q0lXpRQPStHMpD3VzTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:80:79:df:c5:fc:d5:87:fd:51:8d:52:e7:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=0d790f365b2e175641de7f9385a5cdafd86201c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:61:05:a6:65:7e:d6:7b:69:6b:53:ca:06:
88:c0:15:03:12:8d:71:82:ba:23:72:ae:ad:23:54:
56:06:dd:ab:71:79:33:99:99:32:c9:d8:3c:a3:fb:
58:cb:f5:e3:5b:d2:44:72:87:69:29:d9:a8:37:3f:
a6:db:50:17:d5:df:c3:ca:b4:f4:00:c1:d4:df:3c:
c8:54:da:82:e3:5b:21:2a:f7:2e:60:a0:fc:af:b8:
67:1c:a0:64:e9:fb:e2:99:6e:0b:e9:5d:0d:d7:04:
85:65:74:6d:df:f1:b6:b1:30:07:e2:c8:29:45:51:
e0:b0:8e:6a:ae:cc:f1:aa:45:77:f4:3e:99:bf:a0:
e6:3f:a8:2c:34:94:6d:d2:67:6f:ff:95:2e:6f:ca:
90:99:69:cb:0d:9a:0e:09:9e:c9:72:f9:af:73:9c:
d9:54:57:f3:88:4f:5b:8d:7d:bf:27:1e:11:9c:df:
84:b1:67:f8:b8:9a:c0:e3:b1:22:99:57:5f:d1:ba:
30:fc:f0:92:d5:25:2d:73:ea:68:c8:25:e9:19:db:
e3:e1:4d:9a:30:6c:ee:de:af:e4:1e:45:b2:ad:16:
34:6a:69:10:ce:d7:07:e6:98:16:aa:f5:08:0b:03:
65:d1:6a:ae:3e:93:de:b3:93:23:6d:10:65:5f:ee:
2b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:0F:36:5B:2E:17:56:41:DE:7F:93:85:A5:CD:AF:D8:62:01:C2
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d5:55:ef:46:e5:33:ee:40:39:f7:08:71:fe:22:24:9b:a7:
17:52:c3:e8:c1:01:1d:e5:77:c9:af:79:eb:62:a2:b0:de:27:
17:db:db:cc:49:48:98:ba:03:5b:dc:48:ad:40:e3:f6:fb:9b:
1e:ef:42:00:ec:fa:57:3e:c9:cd:30:a5:c9:7f:0d:da:6d:fe:
21:2e:dc:ad:b0:89:8e:78:27:9b:62:4a:51:a6:72:27:83:b0:
26:bd:ad:a2:39:82:51:fd:d2:5e:a3:b7:e4:12:c4:6e:40:21:
47:b1:b7:15:f2:7f:f1:a9:4c:de:df:3b:12:09:e8:07:7f:d4:
cb:15:5d:ef:08:c8:3b:0d:03:89:d5:c8:57:69:9e:44:90:3b:
3e:80:43:c9:d9:c7:24:54:22:38:fb:f9:52:e0:05:64:be:26:
66:76:da:73:b8:07:3c:17:41:e5:e5:69:e3:64:3a:ee:75:f2:
4b:6c:64:25:14:53:e8:eb:f9:11:d1:ea:36:91:dd:86:90:8e:
73:f0:46:ac:e1:85:06:11:71:00:ae:88:7b:cc:1e:f8:df:6c:
d5:05:47:0c:ce:67:cf:b5:43:f5:16:e2:0c:fc:5d:1f:84:1a:
0e:5d:70:d8:de:ca:02:2f:8c:67:2b:cf:b2:0a:c2:67:44:b4:
fa:9d:6b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToB538X81Yf9UY1S5xkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjUwMTMxMTcwMDI1WhcNMjUwMjAxMTcwMDI1WjAzMTEwLwYDVQQD
EygwZDc5MGYzNjViMmUxNzU2NDFkZTdmOTM4NWE1Y2RhZmQ4NjIwMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xhBaZlftZ7aWtTygaIwBUDEo1x
grojcq6tI1RWBt2rcXkzmZkyydg8o/tYy/XjW9JEcodpKdmoNz+m21AX1d/DyrT0
AMHU3zzIVNqC41shKvcuYKD8r7hnHKBk6fvimW4L6V0N1wSFZXRt3/G2sTAH4sgp
RVHgsI5qrszxqkV39D6Zv6DmP6gsNJRt0mdv/5Uub8qQmWnLDZoOCZ7Jcvmvc5zZ
VFfziE9bjX2/Jx4RnN+EsWf4uJrA47EimVdf0bow/PCS1SUtc+poyCXpGdvj4U2a
MGzu3q/kHkWyrRY0amkQztcH5pgWqvUICwNl0WquPpPes5MjbRBlX+4rsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA15DzZbLhdWQd5/k4Wlza/YYgHCMB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxtVV70bl
M+5AOfcIcf4iJJunF1LD6MEBHeV3ya9562KisN4nF9vbzElImLoDW9xIrUDj9vub
Hu9CAOz6Vz7JzTClyX8N2m3+IS7crbCJjngnm2JKUaZyJ4OwJr2tojmCUf3SXqO3
5BLEbkAhR7G3FfJ/8alM3t87EgnoB3/UyxVd7wjIOw0DidXIV2meRJA7PoBDydnH
JFQiOPv5UuAFZL4mZnbac7gHPBdB5eVp42Q67nXyS2xkJRRT6Ov5EdHqNpHdhpCO
c/BGrOGFBhFxAK6Ie8we+N9s1QVHDM5nz7VD9RbiDPxdH4QaDl1w2N7KAi+MZyvP
sgrCZ0S0+p1r4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:54 2025 by rpki-client