Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: JjRnltt4dt1rPe+xvUI2vlyutNXp6McIp0/2C5M1KAs=
Subject key identifier: 3B:94:3E:9B:3A:D7:A9:40:FF:60:6E:C7:AB:B0:E6:F2:E6:BB:E1:77
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 0194BD4EB2551793D4BF2F9BA5FF198F218C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: OjygTduVhAVb6s3wHS+ld45WxBhWlOuMmKCqbeh5R78=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:55:17:93:d4:bf:2f:9b:a5:ff:19:8f:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=3b943e9b3ad7a940ff606ec7abb0e6f2e6bbe177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:29:98:08:12:97:b3:f9:3f:9e:1f:15:e4:
9c:c9:0f:40:ae:70:56:f4:ec:b3:0d:39:0b:7c:a0:
29:31:a6:f8:2d:ad:f6:c5:61:9c:ef:0e:4b:08:35:
90:d9:ea:fe:c6:7d:40:97:6f:41:ab:3a:e3:68:6a:
02:6e:3a:58:e0:c9:41:bb:de:11:6d:74:d2:3d:bc:
8e:45:e1:6d:41:ae:2f:40:15:9f:a9:21:d7:e8:25:
a5:c1:85:aa:a0:0d:f1:92:98:a4:6d:5e:6b:f5:00:
50:fa:24:83:3c:ed:8d:04:12:12:2a:3d:6c:d9:fc:
24:66:38:a9:12:32:17:ff:df:b4:de:1a:52:0c:f0:
c7:28:3a:b2:87:f2:8b:1c:29:ca:0a:df:fa:13:40:
7d:2a:18:bc:46:18:cd:17:b6:d9:a0:d3:31:39:45:
44:71:01:d5:5b:58:f0:6b:8a:1d:14:a2:9b:63:7d:
50:d1:ad:61:d8:2e:db:cc:ca:3b:5c:00:af:52:42:
d8:0c:56:bf:32:b1:99:87:f5:81:cd:4f:2c:1b:50:
ae:fc:09:e7:f8:78:5a:81:90:98:17:47:28:bc:05:
a9:e8:92:28:8d:1e:5b:48:98:bb:85:8e:3a:10:16:
6e:86:e3:31:d6:d7:be:03:cb:31:b7:49:31:72:38:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:3E:9B:3A:D7:A9:40:FF:60:6E:C7:AB:B0:E6:F2:E6:BB:E1:77
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5e:0f:e1:fe:26:4e:1e:bc:a4:76:dc:3b:94:47:10:ed:b8:
56:25:a5:1e:cd:d0:3a:bf:68:aa:10:52:c2:02:47:9b:fd:eb:
29:ad:0e:a3:fc:a0:12:a3:15:72:ca:58:f2:fb:bb:f7:c0:24:
1f:c2:3b:d5:e6:6e:c1:c7:eb:1d:6d:dc:49:20:5c:29:fc:34:
78:bf:b8:7c:3b:e1:22:f9:c3:02:81:71:00:a5:b2:ad:6a:bc:
f6:2c:0b:bf:fe:7b:0d:37:98:a6:6b:1a:de:77:f6:45:ae:30:
77:52:be:6a:bd:c3:36:b0:02:93:11:c4:6a:f4:cc:f3:3f:00:
f3:5e:34:f1:d3:7d:ce:a6:36:92:cd:d7:a8:ad:6a:51:87:b0:
34:d5:b2:a2:c3:07:d8:87:f0:6d:50:49:9d:a0:a7:b5:87:1f:
eb:2f:0b:53:9b:86:c9:90:ab:c0:0b:7f:c2:67:a3:ff:1f:e6:
1b:8e:95:c1:7e:01:20:b1:61:5a:65:e4:13:6a:0a:0b:0e:d7:
1f:05:57:a2:b5:5a:51:40:71:2d:61:66:3a:c1:3a:e2:69:b1:
72:6b:ef:1b:98:e9:ce:c0:85:b4:d6:0d:ee:0a:46:c2:1d:cd:
70:d4:c7:66:9a:5b:ab:2d:03:89:e6:3b:5d:fe:67:00:0a:c9:
ab:e3:8b:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrJVF5PUvy+bpf8ZjyGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4
ODljYTMwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
EygzYjk0M2U5YjNhZDdhOTQwZmY2MDZlYzdhYmIwZTZmMmU2YmJlMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl00pmAgSl7P5P54fFeScyQ9ArnBW
9OyzDTkLfKApMab4La32xWGc7w5LCDWQ2er+xn1Al29BqzrjaGoCbjpY4MlBu94R
bXTSPbyOReFtQa4vQBWfqSHX6CWlwYWqoA3xkpikbV5r9QBQ+iSDPO2NBBISKj1s
2fwkZjipEjIX/9+03hpSDPDHKDqyh/KLHCnKCt/6E0B9Khi8RhjNF7bZoNMxOUVE
cQHVW1jwa4odFKKbY31Q0a1h2C7bzMo7XACvUkLYDFa/MrGZh/WBzU8sG1Cu/Ann
+HhagZCYF0covAWp6JIojR5bSJi7hY46EBZuhuMx1te+A8sxt0kxcjiCPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuUPps616lA/2Bux6uw5vLmu+F3MB8GA1UdIwQY
MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt
Y2ZkY2I1N2I1ZTFkLzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk
LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADF4P4f4m
Th68pHbcO5RHEO24ViWlHs3QOr9oqhBSwgJHm/3rKa0Oo/ygEqMVcspY8vu798Ak
H8I71eZuwcfrHW3cSSBcKfw0eL+4fDvhIvnDAoFxAKWyrWq89iwLv/57DTeYpmsa
3nf2Ra4wd1K+ar3DNrACkxHEavTM8z8A81408dN9zqY2ks3XqK1qUYewNNWyosMH
2IfwbVBJnaCntYcf6y8LU5uGyZCrwAt/wmej/x/mG46VwX4BILFhWmXkE2oKCw7X
HwVXorVaUUBxLWFmOsE64mmxcmvvG5jpzsCFtNYN7gpGwh3NcNTHZppbqy0DieY7
Xf5nAArJq+OLRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:16 2025 by rpki-client