Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
File: bgRq62oBykikl1DYgbefenjVEIk.mft (raw, json)
Hash identifier: C/eJgSq1AQVKlNKRODlTjDpNNVGAYT/iFsKwbqnQsWM=
Subject key identifier: 0E:EB:F9:77:1A:50:5E:18:0D:02:4F:17:DF:F7:30:6F:B5:5C:9A:7B
Authority key identifier: 6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
Certificate issuer: /CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Certificate serial: 0194BCA9F76F71717D88DF8E60A2FD7DC785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: GIVWprWFbOZPhSHYq7Ic-gvexKY.roa (hash: a5n2A2nV2+7629D0mXkl2qBTB/0Qibtp1AVMOfdCCQU=)
2: bgRq62oBykikl1DYgbefenjVEIk.crl (hash: 82yJ2ZDjyqkn9T+2k//7i3ACEQbotz/CGVEJpgpSCLg=)
3: gXKAmV_Cm93EQ03TWF25G0QCK6Y.roa (hash: fQ2SrwapEKlQ7rgN9V0I2bJGTFweLcR8p5tMKIoqhrE=)
4: uAY7hVAuFrjWUoNPpdRgTEHtcz8.roa (hash: ATwY0nwj3G5EjIg+VZz3Y24NdHZrssfo8WEV62/YzO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:6f:71:71:7d:88:df:8e:60:a2:fd:7d:c7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e046aeb6a01ca48a49750d881b79f7a78d51089
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=0eebf9771a505e180d024f17dff7306fb55c9a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:6e:fd:40:08:d6:cd:28:da:8d:5b:0b:44:
97:c5:7f:85:f2:64:05:af:b1:44:cb:61:a7:33:a5:
a4:05:58:5b:56:33:e1:19:78:5a:80:98:1d:46:ab:
38:50:3c:ff:8b:77:a6:f1:c6:d4:f3:ff:4c:67:47:
a6:b6:c7:99:bc:6b:6f:9b:40:29:ae:24:92:c9:85:
46:a6:12:78:ae:89:cb:dc:db:b0:16:b5:2e:81:24:
06:ad:1b:71:d5:34:ec:79:8d:a4:ac:87:e1:18:9c:
3c:47:c6:97:fd:3f:89:57:f7:15:e7:40:2f:5f:52:
fd:2a:9b:9e:5e:11:dc:a8:b8:50:9e:c0:c8:14:e9:
08:6f:94:3a:b7:10:3b:82:b2:aa:dd:1b:63:a2:59:
29:67:24:6a:14:12:a6:8e:e0:c1:1c:e4:7b:bc:6b:
92:28:dd:03:47:13:f2:9a:40:de:9d:f1:e9:9c:64:
7f:8b:ff:69:e5:59:93:dc:5c:a0:1c:bd:7f:0f:62:
97:d3:a6:f1:3e:fb:f5:4c:c6:79:61:a1:93:c3:62:
a7:92:e6:92:79:f2:33:06:8a:bb:e6:bf:8d:76:a7:
90:18:fa:ca:d6:3f:31:9e:e7:07:10:43:85:98:51:
80:17:f1:c0:c5:3e:ca:f7:5d:19:42:9c:3f:d4:0b:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:F9:77:1A:50:5E:18:0D:02:4F:17:DF:F7:30:6F:B5:5C:9A:7B
X509v3 Authority Key Identifier:
keyid:6E:04:6A:EB:6A:01:CA:48:A4:97:50:D8:81:B7:9F:7A:78:D5:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgRq62oBykikl1DYgbefenjVEIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/809da0-e395-4f80-ab17-3d4da8d12806/1/bgRq62oBykikl1DYgbefenjVEIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4e:46:d1:cf:57:fc:0b:7e:eb:25:66:d4:3d:a3:f3:c8:5a:
ee:2b:5c:0a:f0:f9:6b:6c:02:51:5c:3c:76:a8:f2:4e:33:b3:
02:fe:0a:58:c8:e2:68:44:04:c4:66:90:f2:28:a8:16:4c:f2:
d6:92:b8:d0:7e:ba:d3:a9:78:61:aa:18:94:66:b4:4f:ca:ea:
71:da:41:a5:4b:42:66:5e:bf:2c:0a:16:e1:fe:95:86:82:01:
d3:f8:22:ac:c9:11:8e:c2:d0:d4:74:1f:03:4b:cb:86:f1:70:
79:b7:b0:91:43:82:6d:44:c5:00:38:9a:e3:d6:f2:02:ea:61:
85:1d:34:9a:ef:76:31:25:e7:9d:e1:0f:d5:53:3d:0b:c9:61:
d8:5e:de:c7:db:c2:66:d4:21:31:6a:2f:07:13:14:38:26:cd:
45:56:81:1a:bd:b1:52:8e:8c:f0:a4:29:5e:3d:ec:2b:c3:63:
23:df:4d:40:ad:0f:f6:49:51:71:83:e3:f8:07:f3:ac:c0:ae:
36:7e:15:5b:a0:f6:33:04:e1:ec:b9:ea:e2:52:e1:db:ac:43:
c0:eb:44:b7:3d:18:d3:2c:f3:75:42:cf:1e:e0:33:73:2a:82:
03:0f:41:cc:43:e0:91:a1:bc:2e:2f:8e:65:4d:05:94:89:d9:
a6:90:ae:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfdvcXF9iN+OYKL9fceFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDQ2YWViNmEwMWNhNDhhNDk3NTBkODgxYjc5ZjdhNzhk
NTEwODkwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
EygwZWViZjk3NzFhNTA1ZTE4MGQwMjRmMTdkZmY3MzA2ZmI1NWM5YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQZu/UAI1s0o2o1bC0SXxX+F8mQF
r7FEy2GnM6WkBVhbVjPhGXhagJgdRqs4UDz/i3em8cbU8/9MZ0emtseZvGtvm0Ap
riSSyYVGphJ4ronL3NuwFrUugSQGrRtx1TTseY2krIfhGJw8R8aX/T+JV/cV50Av
X1L9KpueXhHcqLhQnsDIFOkIb5Q6txA7grKq3RtjolkpZyRqFBKmjuDBHOR7vGuS
KN0DRxPymkDenfHpnGR/i/9p5VmT3FygHL1/D2KX06bxPvv1TMZ5YaGTw2KnkuaS
efIzBoq75r+NdqeQGPrK1j8xnucHEEOFmFGAF/HAxT7K910ZQpw/1AsD8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7r+XcaUF4YDQJPF9/3MG+1XJp7MB8GA1UdIwQY
MBaAFG4EautqAcpIpJdQ2IG3n3p41RCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84MDlkYTAtZTM5NS00ZjgwLWFiMTct
M2Q0ZGE4ZDEyODA2LzEvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84MDlkYTAtZTM5NS00ZjgwLWFiMTctM2Q0ZGE4ZDEyODA2
LzEvYmdScTYyb0J5a2lrbDFEWWdiZWZlbmpWRUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK05G0c9X
/At+6yVm1D2j88ha7itcCvD5a2wCUVw8dqjyTjOzAv4KWMjiaEQExGaQ8iioFkzy
1pK40H6606l4YaoYlGa0T8rqcdpBpUtCZl6/LAoW4f6VhoIB0/girMkRjsLQ1HQf
A0vLhvFwebewkUOCbUTFADia49byAuphhR00mu92MSXnneEP1VM9C8lh2F7ex9vC
ZtQhMWovBxMUOCbNRVaBGr2xUo6M8KQpXj3sK8NjI99NQK0P9klRcYPj+AfzrMCu
Nn4VW6D2MwTh7Lnq4lLh26xDwOtEtz0Y0yzzdULPHuAzcyqCAw9BzEPgkaG8Li+O
ZU0FlInZppCuZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:35 2025 by rpki-client