Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
File: bn-6EaMdOqkN48e7i1bTzQbmvnU.mft (raw, json)
Hash identifier: xIjXu9YjB7UwK30CPM4QjDuLzP4POuBq0VlEokWhozw=
Subject key identifier: 6A:ED:5F:8A:E8:64:19:14:2E:D7:0F:F7:14:40:E9:B5:BE:A4:84:6D
Authority key identifier: 6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
Certificate issuer: /CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Certificate serial: 0194BBCE43A19190A5EE46016BD45B3ECF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
Manifest number: 1410
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: bn-6EaMdOqkN48e7i1bTzQbmvnU.crl (hash: FlEnkgHlxGL5UYPzdwbKVjA1lFptyDS+gpwFL9Zs8qY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:a1:91:90:a5:ee:46:01:6b:d4:5b:3e:cf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7fba11a31d3aa90de3c7bb8b56d3cd06e6be75
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=6aed5f8ae86419142ed70ff71440e9b5bea4846d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:de:fe:45:a8:c3:a2:41:8d:bf:0f:d4:98:
5a:c0:45:ac:ba:45:ec:d1:ea:a6:1a:59:51:9c:c8:
c4:51:4b:cd:ab:7f:0e:92:f1:77:ed:7f:5d:12:52:
44:c7:6d:d5:40:c1:d6:9d:71:01:dd:31:32:34:d9:
b1:f5:37:0d:14:7c:f5:03:af:37:18:73:96:d6:71:
15:24:12:b8:86:f7:95:0b:fa:37:8b:fd:91:36:40:
8a:b1:54:c1:24:ca:96:07:6f:9f:b0:19:c8:64:73:
dd:1c:15:f7:5e:b9:d7:30:76:9e:12:73:05:78:21:
16:03:df:a3:ef:3a:27:c4:94:6b:82:53:43:d8:88:
94:0d:07:d1:ae:ed:f9:c0:70:bd:3b:19:fe:d4:cb:
cc:a6:df:25:98:65:66:d3:64:f2:f3:38:26:31:38:
25:90:2b:2f:c9:7b:d0:de:44:ef:c1:f0:97:e2:8a:
63:73:0d:2b:6d:81:c9:76:64:07:54:9e:79:e6:6c:
d9:25:1d:08:88:25:8a:65:a3:24:43:95:3b:18:13:
f9:dd:d2:bc:4d:ba:fb:87:8b:bb:ee:a1:f3:73:9b:
bb:e5:8d:10:6b:6c:34:07:d5:b9:a0:a0:57:d7:01:
83:b0:8c:80:24:aa:3c:b9:75:2e:52:45:8f:ab:44:
ee:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:5F:8A:E8:64:19:14:2E:D7:0F:F7:14:40:E9:B5:BE:A4:84:6D
X509v3 Authority Key Identifier:
keyid:6E:7F:BA:11:A3:1D:3A:A9:0D:E3:C7:BB:8B:56:D3:CD:06:E6:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn-6EaMdOqkN48e7i1bTzQbmvnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52ef7c-9a36-4362-8e7f-6394214a122c/1/bn-6EaMdOqkN48e7i1bTzQbmvnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:69:47:fa:59:36:6d:ba:e3:39:3a:71:7f:27:01:31:77:
a3:20:50:b1:80:b3:5e:be:8e:4c:f3:af:f9:b2:41:4e:69:64:
01:60:54:a6:e0:e6:4e:20:1b:b8:48:7c:40:82:3c:24:d7:cd:
66:9a:51:d9:da:28:b3:73:cd:74:97:e3:46:b2:65:87:6f:94:
df:75:dc:ce:b1:b2:c4:70:b7:b8:e2:99:1c:71:9c:b2:7f:b2:
5d:5d:65:a6:3f:25:10:a7:06:44:a7:b9:67:83:7a:92:00:56:
a7:6e:a3:e3:07:56:32:46:29:1c:c4:72:a8:2c:28:9b:18:5b:
7c:0e:8b:de:5e:4c:17:04:c4:38:77:e0:8a:a1:a3:ad:7a:f0:
d7:f4:c3:d5:33:55:6b:3c:c3:5c:d8:58:c3:1e:13:65:35:7f:
d6:02:0d:1c:c1:46:b0:e9:33:36:56:13:f3:3d:ce:71:04:d2:
46:d0:93:30:92:b7:ee:f0:c8:5d:b0:37:c0:e3:6f:d0:ac:69:
c6:19:f6:83:f4:d6:2d:86:53:28:47:4b:4f:73:69:17:63:85:
97:5f:6d:5b:e4:40:55:51:8e:ac:89:eb:1d:48:48:dd:5a:a5:
3f:e7:bf:54:28:c2:45:18:70:e1:f6:1c:da:55:63:c3:80:09:
85:d3:c0:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkOhkZCl7kYBa9RbPs8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2ZiYTExYTMxZDNhYTkwZGUzYzdiYjhiNTZkM2NkMDZl
NmJlNzUwHhcNMjUwMTMxMTAwMDQ0WhcNMjUwMjAxMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg2YWVkNWY4YWU4NjQxOTE0MmVkNzBmZjcxNDQwZTliNWJlYTQ4NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZLe/kWow6JBjb8P1JhawEWsukXs
0eqmGllRnMjEUUvNq38OkvF37X9dElJEx23VQMHWnXEB3TEyNNmx9TcNFHz1A683
GHOW1nEVJBK4hveVC/o3i/2RNkCKsVTBJMqWB2+fsBnIZHPdHBX3XrnXMHaeEnMF
eCEWA9+j7zonxJRrglND2IiUDQfRru35wHC9Oxn+1MvMpt8lmGVm02Ty8zgmMTgl
kCsvyXvQ3kTvwfCX4opjcw0rbYHJdmQHVJ555mzZJR0IiCWKZaMkQ5U7GBP53dK8
Tbr7h4u77qHzc5u75Y0Qa2w0B9W5oKBX1wGDsIyAJKo8uXUuUkWPq0TuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrtX4roZBkULtcP9xRA6bW+pIRtMB8GA1UdIwQY
MBaAFG5/uhGjHTqpDePHu4tW080G5r51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MmVmN2MtOWEzNi00MzYyLThlN2Yt
NjM5NDIxNGExMjJjLzEvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81MmVmN2MtOWEzNi00MzYyLThlN2YtNjM5NDIxNGExMjJj
LzEvYm4tNkVhTWRPcWtONDhlN2kxYlR6UWJtdm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkppR/pZ
Nm264zk6cX8nATF3oyBQsYCzXr6OTPOv+bJBTmlkAWBUpuDmTiAbuEh8QII8JNfN
ZppR2doos3PNdJfjRrJlh2+U33XczrGyxHC3uOKZHHGcsn+yXV1lpj8lEKcGRKe5
Z4N6kgBWp26j4wdWMkYpHMRyqCwomxhbfA6L3l5MFwTEOHfgiqGjrXrw1/TD1TNV
azzDXNhYwx4TZTV/1gINHMFGsOkzNlYT8z3OcQTSRtCTMJK37vDIXbA3wONv0Kxp
xhn2g/TWLYZTKEdLT3NpF2OFl19tW+RAVVGOrInrHUhI3VqlP+e/VCjCRRhw4fYc
2lVjw4AJhdPAzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:57 2025 by rpki-client