Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File: bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier: JRSXzJ4skXqSq/tgYK6ZJWZ5ijn2ZQmLdZ0s1CPrRws=
Subject key identifier: 2B:BF:6D:B7:D7:48:65:C8:29:39:67:CC:B0:8F:F1:C0:FA:BC:44:B9
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 0194BC72EB68695162B6354F16E500E17705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number: 0CD6
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: u25B/xy3sjaMThp8+zozYNn9Dc2ky+77d+nufm8YzAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:68:69:51:62:b6:35:4f:16:e5:00:e1:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=2bbf6db7d74865c8293967ccb08ff1c0fabc44b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:a1:32:fa:d3:c7:61:f3:19:f0:4e:0b:d5:
55:f6:b9:b2:ae:a6:02:f7:23:7c:53:e5:6a:cc:b6:
45:2a:4f:93:bc:98:c6:1c:8e:41:af:eb:a1:7f:bb:
7b:3e:03:a3:9a:03:8a:28:6c:31:49:74:ab:38:4a:
67:70:3b:ff:55:26:04:a4:0c:83:82:49:b9:8b:38:
dd:6d:dd:f2:0a:30:7c:d9:ba:cb:0e:a2:a2:db:32:
5f:99:b2:83:ef:8d:4a:87:3e:33:f0:26:cd:77:61:
ae:d3:ab:e7:8c:97:49:57:f2:d0:df:88:e9:1b:73:
ad:1c:dc:a8:bb:e1:7a:a8:07:d7:22:e5:94:eb:37:
24:db:12:2d:6b:08:2c:77:f7:20:12:00:c6:12:0d:
5e:7a:69:db:66:84:0a:ef:a8:0a:34:f6:66:2a:61:
0d:ea:cc:33:43:97:49:bb:ca:0e:5c:69:bb:52:08:
54:ec:03:bd:a9:69:0d:03:0b:b3:e8:2a:df:cb:c2:
e4:71:33:ba:ca:ba:46:08:7f:37:d6:4d:65:ff:f3:
82:40:e0:e2:c7:25:3f:ef:31:4f:f0:82:84:ec:b4:
01:a1:d5:ac:63:df:b6:49:f7:66:50:7d:22:50:4c:
21:29:5e:f0:06:81:95:ca:92:a6:cc:01:83:b6:6e:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BF:6D:B7:D7:48:65:C8:29:39:67:CC:B0:8F:F1:C0:FA:BC:44:B9
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:65:5f:f6:6a:42:13:6f:f4:e6:3e:61:96:1b:52:6d:78:f5:
6e:0f:6e:c7:de:a7:83:81:df:8c:26:80:2b:6f:60:d6:88:58:
7f:19:7b:4d:e9:df:a9:f8:b8:aa:7c:20:d6:e9:8c:c8:6f:fa:
23:0f:68:2f:82:78:67:d3:19:c0:3d:b5:45:bf:69:ac:99:cd:
0f:22:22:bf:ef:fc:68:7e:ce:44:e4:97:59:95:58:8e:00:3c:
d9:eb:6a:3c:82:a9:d1:83:97:57:ee:79:61:2f:49:fc:f4:ae:
4b:0c:a7:6a:d0:fc:25:3f:5e:c0:e8:26:f9:cc:3e:df:7c:ee:
c8:26:2f:43:f9:0a:95:11:44:82:02:2a:ca:97:a3:ea:57:b9:
c4:2a:32:c9:e3:75:da:6a:73:18:dd:3b:3e:52:df:3f:f1:66:
ad:46:d4:75:69:a7:8c:cf:3c:aa:cf:f0:8f:8b:d1:e5:02:8d:
fc:59:55:4d:e8:3c:47:cd:57:d5:2a:5f:cf:6e:43:4f:89:44:
82:70:a1:5e:69:1c:68:de:bb:32:98:07:21:4a:6d:8c:be:74:
89:91:c3:3b:70:11:36:ee:f8:63:df:52:03:a8:3c:0c:8a:85:
74:de:cf:79:d5:20:4c:a0:48:cf:66:7d:ce:85:a0:30:ac:b5:
6d:91:a1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cutoaVFitjVPFuUA4XcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzFjNjRjM2U1YTdkZTEwNDBmNDBkYThmZWRjNDdjMzhm
ZTU5ZmEwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EygyYmJmNmRiN2Q3NDg2NWM4MjkzOTY3Y2NiMDhmZjFjMGZhYmM0NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ehMvrTx2HzGfBOC9VV9rmyrqYC
9yN8U+VqzLZFKk+TvJjGHI5Br+uhf7t7PgOjmgOKKGwxSXSrOEpncDv/VSYEpAyD
gkm5izjdbd3yCjB82brLDqKi2zJfmbKD741Khz4z8CbNd2Gu06vnjJdJV/LQ34jp
G3OtHNyou+F6qAfXIuWU6zck2xItawgsd/cgEgDGEg1eemnbZoQK76gKNPZmKmEN
6swzQ5dJu8oOXGm7UghU7AO9qWkNAwuz6Crfy8LkcTO6yrpGCH831k1l//OCQODi
xyU/7zFP8IKE7LQBodWsY9+2SfdmUH0iUEwhKV7wBoGVypKmzAGDtm7t7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu/bbfXSGXIKTlnzLCP8cD6vES5MB8GA1UdIwQY
MBaAFG8xxkw+Wn3hBA9A2o/txHw4/ln6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTIt
YjA4MGEzNDUxYzdmLzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZWQzODItMzA5Ny00MTNlLWI2YTItYjA4MGEzNDUxYzdm
LzEvYnpIR1RENWFmZUVFRDBEYWotM0VmRGotV2ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmVf9mpC
E2/05j5hlhtSbXj1bg9ux96ng4HfjCaAK29g1ohYfxl7Tenfqfi4qnwg1umMyG/6
Iw9oL4J4Z9MZwD21Rb9prJnNDyIiv+/8aH7OROSXWZVYjgA82etqPIKp0YOXV+55
YS9J/PSuSwynatD8JT9ewOgm+cw+33zuyCYvQ/kKlRFEggIqypej6le5xCoyyeN1
2mpzGN07PlLfP/FmrUbUdWmnjM88qs/wj4vR5QKN/FlVTeg8R81X1Spfz25DT4lE
gnChXmkcaN67MpgHIUptjL50iZHDO3ARNu74Y99SA6g8DIqFdN7PedUgTKBIz2Z9
zoWgMKy1bZGh6A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:23 2025 by rpki-client