Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
File: rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft (raw, json)
Hash identifier: JpNw8eVEHcXrEjrWfPe6zPU8LcTTyQG8CHwMwsgXYnQ=
Subject key identifier: 1E:28:C0:C0:53:F0:5F:B8:44:27:DF:CF:CB:D0:6E:C9:3B:A4:5C:82
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 0194BCA9F4667AC1F8AA174B7C468BAB450D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: e7v6KfsQ42Ju_th6J-KjayhE0pc.roa (hash: 2QzdBlDL7vaApFGThIZoir4ZfxpYLQiDlB23vrYFa1A=)
2: rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl (hash: 9hiNIcp13zfGUWP0pvmNulZ9xfYVG9LYQZH//UTZhUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:66:7a:c1:f8:aa:17:4b:7c:46:8b:ab:45:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=1e28c0c053f05fb84427dfcfcbd06ec93ba45c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:ed:b2:99:8c:22:f7:6d:43:8b:bf:76:83:
7f:b8:6b:e8:df:ff:1e:62:57:d8:4b:89:1f:df:f5:
f3:55:4c:dc:3f:6d:dd:18:52:49:57:9c:49:62:f4:
42:7e:34:c3:40:d9:98:d1:02:a5:1f:06:8b:4d:a1:
d8:65:2e:6a:44:a0:0c:f2:b0:39:6f:7f:eb:a6:c3:
d8:19:da:59:ad:86:d0:d1:0a:d7:96:9f:68:dd:2e:
47:16:31:7c:c0:6b:42:57:60:d7:9b:4a:c4:70:1f:
5a:d2:e2:8d:13:2e:54:79:e4:19:36:3e:51:9a:26:
80:b6:78:37:bd:c3:19:4a:4a:76:58:62:3a:10:92:
db:6d:8f:50:75:82:e3:14:a5:9a:a4:52:07:14:0f:
ee:81:d8:2d:61:53:69:c6:35:b3:ee:bd:7a:a3:0e:
8f:aa:07:17:b5:a5:5c:fb:11:9d:7a:03:0c:55:81:
0c:f9:25:e0:47:5c:2e:55:bf:ff:70:b4:cc:d7:0d:
42:82:10:c9:3f:46:25:6e:dd:f1:fb:41:57:d7:27:
c2:5f:d3:a4:05:0d:0c:18:9a:f7:33:8b:0e:d0:77:
19:98:ba:68:b1:95:8a:ff:8d:c5:8f:66:38:76:f4:
af:a2:7c:af:85:b5:bf:5a:a0:bd:37:be:da:59:43:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:C0:C0:53:F0:5F:B8:44:27:DF:CF:CB:D0:6E:C9:3B:A4:5C:82
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5d:01:ef:6b:d7:c0:67:a8:b0:8a:3a:cd:93:94:ae:fb:16:
94:56:d7:8c:55:52:57:db:e6:0d:09:ae:29:28:e6:38:8a:82:
de:8f:5f:11:6c:8e:2d:20:e7:c5:df:a7:18:92:e3:31:d4:01:
b0:3c:9d:96:e1:18:1e:08:6e:e3:1f:8e:09:0a:45:04:71:43:
84:ec:05:12:65:6a:7d:48:cf:d1:fc:0e:ff:5f:ae:2f:e1:fc:
cb:7f:d7:e7:ce:68:86:ae:aa:14:a4:ab:95:1f:91:0b:c4:83:
9f:8a:5e:bc:75:bc:a1:a1:59:e8:59:53:84:f6:32:6f:09:9c:
13:e6:7a:96:6c:7f:b7:0b:69:b5:4f:5c:fa:d4:3a:50:f5:5d:
88:10:62:93:b7:e6:1e:05:08:cc:cf:91:99:8b:c1:62:be:ba:
f8:18:b0:1d:a8:8c:17:a9:64:24:28:a6:0d:e9:39:4c:6d:1d:
17:f2:03:81:24:9e:b3:54:0c:3a:a1:30:66:1b:59:bc:76:ed:
6f:33:e1:d6:f9:41:00:47:ac:c2:6f:94:82:1e:57:c4:58:e2:
14:fc:77:e3:5d:e3:46:8d:0b:e3:87:35:51:11:3f:95:b5:cc:
b3:67:a3:57:6b:0d:15:94:f1:b1:6f:54:d4:71:49:9d:cc:3c:
7c:6e:7c:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfRmesH4qhdLfEaLq0UNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWEwYjljYzVjZThiZmQ5ZWUyNmQwOWQ3ZTkxMTUxYTQy
ZDM3MGQwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
EygxZTI4YzBjMDUzZjA1ZmI4NDQyN2RmY2ZjYmQwNmVjOTNiYTQ1YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwurtspmMIvdtQ4u/doN/uGvo3/8e
YlfYS4kf3/XzVUzcP23dGFJJV5xJYvRCfjTDQNmY0QKlHwaLTaHYZS5qRKAM8rA5
b3/rpsPYGdpZrYbQ0QrXlp9o3S5HFjF8wGtCV2DXm0rEcB9a0uKNEy5UeeQZNj5R
miaAtng3vcMZSkp2WGI6EJLbbY9QdYLjFKWapFIHFA/ugdgtYVNpxjWz7r16ow6P
qgcXtaVc+xGdegMMVYEM+SXgR1wuVb//cLTM1w1CghDJP0Ylbt3x+0FX1yfCX9Ok
BQ0MGJr3M4sO0HcZmLposZWK/43Fj2Y4dvSvonyvhbW/WqC9N77aWUPzZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4owMBT8F+4RCffz8vQbsk7pFyCMB8GA1UdIwQY
MBaAFKwaC5zFzov9nuJtCdfpEVGkLTcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMt
YWE3MzUzZDRkOThmLzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMzI4NzItODhhMy00ZTg0LTlmODMtYWE3MzUzZDRkOThm
LzEvckJvTG5NWE9pXzJlNG0wSjEta1JVYVF0TncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq10B72vX
wGeosIo6zZOUrvsWlFbXjFVSV9vmDQmuKSjmOIqC3o9fEWyOLSDnxd+nGJLjMdQB
sDydluEYHghu4x+OCQpFBHFDhOwFEmVqfUjP0fwO/1+uL+H8y3/X585ohq6qFKSr
lR+RC8SDn4pevHW8oaFZ6FlThPYybwmcE+Z6lmx/twtptU9c+tQ6UPVdiBBik7fm
HgUIzM+RmYvBYr66+BiwHaiMF6lkJCimDek5TG0dF/IDgSSes1QMOqEwZhtZvHbt
bzPh1vlBAEeswm+Ugh5XxFjiFPx3413jRo0L44c1URE/lbXMs2ejV2sNFZTxsW9U
1HFJncw8fG58Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:45 2025 by rpki-client