Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
File: v00XR_NcDNayXwsKDmjQRCyTkUw.mft (raw, json)
Hash identifier: 3qpoDCgrMA9831c10Q4/I62k6ru6LjiThaFW/VmZ4c0=
Subject key identifier: BD:36:26:BC:1E:5D:BF:7F:4B:04:8F:50:37:BC:23:73:B5:7A:76:B2
Authority key identifier: BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
Certificate issuer: /CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Certificate serial: 0194BCA98EBE991667F90BCF87F767C1028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: v00XR_NcDNayXwsKDmjQRCyTkUw.crl (hash: +c9FrS+y0+DWyThxXNiM8E7MmfbY7EgJ4bALaav9Uv8=)
2: yCu0qXLroHa-uvUpKWPoBDUbw7g.roa (hash: /v4EBHqO51xrU73pnqmkUPUdNSVLhSB/7ZsVYORcZ+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:be:99:16:67:f9:0b:cf:87:f7:67:c1:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d1747f35c0cd6b25f0b0a0e68d0442c93914c
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=bd3626bc1e5dbf7f4b048f5037bc2373b57a76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:6a:27:b2:d3:5e:bb:d8:ac:7e:a0:7d:66:
c8:c7:a3:d4:41:0c:26:b9:06:79:3c:05:6f:e2:8a:
dc:2e:aa:bd:4d:eb:95:c8:e3:23:83:b0:f1:e0:19:
37:72:c7:5d:25:48:28:1c:79:9f:e9:73:5d:ca:6b:
62:31:c4:cb:b2:5a:dc:c4:f5:32:6d:62:6a:de:87:
2a:19:fc:de:3f:80:46:12:6b:ff:51:06:8d:c8:03:
5a:b4:50:f3:b3:62:4a:ad:3d:8d:86:9a:28:e7:1e:
75:c3:bd:9a:b1:da:ee:c9:5a:d2:d7:6c:6e:03:5d:
67:0f:54:02:e8:6c:5c:0e:84:4e:de:5b:2f:61:f7:
c8:86:55:11:6a:7b:33:3a:87:e4:81:27:65:6a:05:
1d:71:ab:e3:f2:f4:bd:97:80:c3:79:06:12:c5:76:
40:2e:94:7f:de:b3:35:10:6c:15:44:d8:4a:b1:e5:
ef:08:a6:72:c5:58:83:3b:20:96:91:27:12:a8:84:
31:dd:fa:12:6a:bf:89:08:78:4a:f6:d5:93:56:78:
dc:79:98:08:ee:c1:6e:87:29:d5:8e:29:a4:05:cb:
0f:17:27:f5:58:40:18:ad:fa:f8:e7:96:8b:8d:16:
03:09:62:9c:02:84:0b:2c:ba:c4:39:e1:87:42:88:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:26:BC:1E:5D:BF:7F:4B:04:8F:50:37:BC:23:73:B5:7A:76:B2
X509v3 Authority Key Identifier:
keyid:BF:4D:17:47:F3:5C:0C:D6:B2:5F:0B:0A:0E:68:D0:44:2C:93:91:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v00XR_NcDNayXwsKDmjQRCyTkUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9eb64a-939c-4584-987e-7f19e8c8b83d/1/v00XR_NcDNayXwsKDmjQRCyTkUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:f8:db:5d:1d:34:10:a5:74:3e:13:9b:f5:33:cd:f5:8d:
9a:27:96:01:fe:88:d7:ff:09:ef:9f:86:62:8a:a0:fe:ca:e4:
08:e8:47:45:83:68:f1:1c:d0:c3:cb:90:48:33:ae:a9:a6:41:
aa:f9:42:19:40:e4:6d:50:24:df:80:7b:bd:db:71:75:0a:24:
56:b6:bd:c6:7e:83:9f:a0:67:b6:97:25:01:e1:da:f3:15:91:
21:23:ef:12:ae:5d:83:e7:a4:60:36:6b:21:cf:72:0e:6f:18:
84:b4:47:a7:70:5d:2d:f8:79:7c:25:66:42:01:72:e0:bc:6f:
d1:55:f8:18:1e:43:4f:f7:72:e5:86:fa:23:ed:7c:05:87:4f:
0b:64:d0:e0:b5:95:58:1f:0d:d0:8a:ec:4b:d9:d5:b9:de:b9:
3c:52:f7:0b:90:55:93:b0:21:a3:ce:66:6b:55:ca:c7:b4:cd:
12:b0:7d:0b:b7:e4:2a:69:d2:03:4f:ce:5d:eb:95:53:b0:b9:
08:16:05:76:73:7d:26:dd:b6:38:e5:b1:fd:c4:9e:18:a4:c8:
cf:80:4f:c7:3e:c9:e8:46:2f:64:0a:53:e5:7c:ef:06:70:b1:
28:ba:55:de:1c:89:d4:e5:9c:4a:ef:7c:4e:7e:2d:c8:74:80:
98:20:2b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY6+mRZn+QvPh/dnwQKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGQxNzQ3ZjM1YzBjZDZiMjVmMGIwYTBlNjhkMDQ0MmM5
MzkxNGMwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
EyhiZDM2MjZiYzFlNWRiZjdmNGIwNDhmNTAzN2JjMjM3M2I1N2E3NmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9qJ7LTXrvYrH6gfWbIx6PUQQwm
uQZ5PAVv4orcLqq9TeuVyOMjg7Dx4Bk3csddJUgoHHmf6XNdymtiMcTLslrcxPUy
bWJq3ocqGfzeP4BGEmv/UQaNyANatFDzs2JKrT2Nhpoo5x51w72asdruyVrS12xu
A11nD1QC6GxcDoRO3lsvYffIhlURanszOofkgSdlagUdcavj8vS9l4DDeQYSxXZA
LpR/3rM1EGwVRNhKseXvCKZyxViDOyCWkScSqIQx3foSar+JCHhK9tWTVnjceZgI
7sFuhynVjimkBcsPFyf1WEAYrfr455aLjRYDCWKcAoQLLLrEOeGHQohywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL02JrweXb9/SwSPUDe8I3O1enayMB8GA1UdIwQY
MBaAFL9NF0fzXAzWsl8LCg5o0EQsk5FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2Ut
N2YxOWU4YzhiODNkLzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85ZWI2NGEtOTM5Yy00NTg0LTk4N2UtN2YxOWU4YzhiODNk
LzEvdjAwWFJfTmNETmF5WHdzS0RtalFSQ3lUa1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV74210d
NBCldD4Tm/UzzfWNmieWAf6I1/8J75+GYoqg/srkCOhHRYNo8RzQw8uQSDOuqaZB
qvlCGUDkbVAk34B7vdtxdQokVra9xn6Dn6BntpclAeHa8xWRISPvEq5dg+ekYDZr
Ic9yDm8YhLRHp3BdLfh5fCVmQgFy4Lxv0VX4GB5DT/dy5Yb6I+18BYdPC2TQ4LWV
WB8N0IrsS9nVud65PFL3C5BVk7Aho85ma1XKx7TNErB9C7fkKmnSA0/OXeuVU7C5
CBYFdnN9Jt22OOWx/cSeGKTIz4BPxz7J6EYvZApT5XzvBnCxKLpV3hyJ1OWcSu98
Tn4tyHSAmCArgA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:05 2025 by rpki-client