Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
File: 6bEyD7wk1vQ2bLZPz17S17G2vfc.mft (raw, json)
Hash identifier: F0oahuPrV1WmF8uEt5BLtkIlI/ubzaE7yTBzy38OT+U=
Subject key identifier: 1D:99:72:FD:E9:66:35:57:82:1B:65:7F:1F:B2:05:5F:C2:BB:DD:17
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 0194BD855978F221EEEDBD01C62D36052970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
Manifest number: 148A
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 6bEyD7wk1vQ2bLZPz17S17G2vfc.crl (hash: yWfw3OM7z/I07KBWk2mtuHbT/j4YCUQnY/fv9ivtc5E=)
2: TE5fERJgHgtYxUJy4wePwz5mU_w.roa (hash: OE1lv0k4N/61BtYex08ZD3aXtpKmdMMTc1Zc1Tz9A/I=)
3: ToZLErsSkbpl7Gieu9f3LQF10SY.roa (hash: dtkWxPvkQ7rwdets+Cyk4a3zGtoYQw0LGZRdf1yx45g=)
4: aTgUhMPQnjx2xjYwnwJ2gz-I7rs.roa (hash: B9eu7QuJTduRZceQo5fFEV1A6fHWCByz1rCSN6+BTS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:78:f2:21:ee:ed:bd:01:c6:2d:36:05:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=1d9972fde9663557821b657f1fb2055fc2bbdd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:97:02:5b:77:05:7c:9a:38:76:00:5f:16:
90:e4:71:6e:ed:23:ab:8f:55:ef:ac:c7:c5:58:b3:
23:d5:15:52:89:1f:58:9d:90:9f:b0:7c:53:5a:a5:
9d:8a:09:e2:75:8f:2f:c9:67:05:8c:5b:89:9d:e7:
55:ed:f8:8c:3f:c8:a2:e7:a4:c9:d7:21:9a:c6:1f:
ef:2a:e1:5e:3d:b0:5f:15:44:0b:9c:40:c1:ad:34:
bd:ff:01:5a:f2:8e:86:47:69:bd:21:fe:49:ce:4c:
ae:a0:ba:ed:06:4d:2b:5c:5d:36:50:fe:40:23:d7:
f9:70:be:9a:c5:d6:e3:d6:f2:55:a5:b0:9b:93:df:
b9:e1:c9:35:d7:ab:2e:f0:cd:9c:4e:76:bf:1a:cd:
02:34:aa:13:dd:6b:ee:2d:1e:cf:c0:28:90:57:76:
34:e4:eb:9b:09:4c:49:e8:6e:1b:2a:0c:aa:a1:31:
13:84:98:e8:16:68:70:96:02:37:43:9a:a4:0f:03:
2e:36:71:83:a3:20:b2:4e:bf:98:7a:16:04:ff:01:
cc:c0:da:4a:46:2a:49:3f:6a:e9:5e:40:6e:02:6f:
38:d3:b5:0e:ed:1e:21:e9:2a:6e:40:fc:6a:13:59:
ac:e3:60:f9:b8:44:d0:ac:31:48:6f:a6:74:f6:51:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:72:FD:E9:66:35:57:82:1B:65:7F:1F:B2:05:5F:C2:BB:DD:17
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:25:f4:fb:03:68:f7:89:00:d2:03:67:10:7f:ec:a7:a0:
ee:e2:bd:a3:e5:f0:97:60:c1:b8:0e:18:b0:5c:a3:c5:a1:36:
43:a9:7e:53:e8:43:49:9c:d9:36:fc:42:83:e6:d4:8a:6e:93:
f8:91:b4:2d:2c:b3:a7:b9:3f:bf:7e:3a:f2:11:a8:d9:6c:60:
61:ff:ff:46:35:31:0f:66:1e:7c:ba:8b:36:81:be:47:0f:7b:
7c:5d:ae:3b:ea:56:7e:23:97:b2:ca:df:18:bb:69:89:38:09:
cc:6e:fe:fe:43:b0:2f:d8:69:ac:54:0d:52:92:1b:77:c4:97:
0f:0f:8d:34:6b:6a:bb:9b:20:b1:15:be:81:98:3a:02:41:c5:
60:b3:b7:88:06:0e:d4:16:f7:82:99:44:fb:cb:30:72:82:fa:
11:08:37:da:3b:a3:a4:d7:33:af:9f:4f:4e:61:74:01:39:f3:
bb:45:a5:99:c5:8e:66:b5:34:07:e3:ce:41:d8:f9:08:dd:5e:
d0:ff:7b:f4:ef:f9:0c:b6:f9:03:b2:70:e7:db:91:77:bd:db:
01:1c:f7:1a:34:ac:51:97:68:d7:2e:11:5b:df:c5:31:26:b6:
9d:a5:d8:06:97:5d:4b:3c:77:bf:22:dd:79:18:f6:f2:a4:b2:
93:34:25:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVl48iHu7b0Bxi02BSlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YjEzMjBmYmMyNGQ2ZjQzNjZjYjY0ZmNmNWVkMmQ3YjFi
NmJkZjcwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EygxZDk5NzJmZGU5NjYzNTU3ODIxYjY1N2YxZmIyMDU1ZmMyYmJkZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql6XAlt3BXyaOHYAXxaQ5HFu7SOr
j1XvrMfFWLMj1RVSiR9YnZCfsHxTWqWdignidY8vyWcFjFuJnedV7fiMP8ii56TJ
1yGaxh/vKuFePbBfFUQLnEDBrTS9/wFa8o6GR2m9If5JzkyuoLrtBk0rXF02UP5A
I9f5cL6axdbj1vJVpbCbk9+54ck116su8M2cTna/Gs0CNKoT3WvuLR7PwCiQV3Y0
5OubCUxJ6G4bKgyqoTEThJjoFmhwlgI3Q5qkDwMuNnGDoyCyTr+YehYE/wHMwNpK
RipJP2rpXkBuAm8407UO7R4h6SpuQPxqE1ms42D5uETQrDFIb6Z09lE1uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2Zcv3pZjVXghtlfx+yBV/Cu90XMB8GA1UdIwQY
MBaAFOmxMg+8JNb0Nmy2T89e0textr33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUt
ZDNlMjgwMGJkNjQwLzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kZjFjYjUtNWY0OC00NmEwLWE3NmUtZDNlMjgwMGJkNjQw
LzEvNmJFeUQ3d2sxdlEyYkxaUHoxN1MxN0cydmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcUl9PsD
aPeJANIDZxB/7Keg7uK9o+Xwl2DBuA4YsFyjxaE2Q6l+U+hDSZzZNvxCg+bUim6T
+JG0LSyzp7k/v3468hGo2WxgYf//RjUxD2YefLqLNoG+Rw97fF2uO+pWfiOXssrf
GLtpiTgJzG7+/kOwL9hprFQNUpIbd8SXDw+NNGtqu5sgsRW+gZg6AkHFYLO3iAYO
1Bb3gplE+8swcoL6EQg32jujpNczr59PTmF0ATnzu0WlmcWOZrU0B+POQdj5CN1e
0P979O/5DLb5A7Jw59uRd73bARz3GjSsUZdo1y4RW9/FMSa2naXYBpddSzx3vyLd
eRj28qSykzQl5Q==
-----END CERTIFICATE-----
Generated at Sun May 4 03:46:58 2025 by rpki-client