Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File: 6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier: JHkKJ5kwnouCU2WX9f1/p9rYin4fP8n7aSXYmqZlm04=
Subject key identifier: 3E:1A:F7:BE:CE:1E:70:E0:A6:C4:CA:10:18:CA:F6:E4:36:04:BF:31
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer: /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial: 0194BD174C87440103B081488404A7682C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: DmKA7JFrSyTdwpBO+uTLLHBOtgiQRycB9o9jimmNCZo=)
2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:87:44:01:03:b0:81:48:84:04:a7:68:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=3e1af7bece1e70e0a6c4ca1018caf6e43604bf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:69:e9:55:04:9e:4b:29:ef:6e:eb:d3:b3:
bc:e4:43:fa:e0:92:6c:65:a2:b9:7e:14:b2:c3:82:
e4:1f:71:48:12:59:3c:71:6e:25:e6:8c:44:1a:c5:
53:70:57:35:50:e9:5b:dc:fa:dc:9c:36:8e:97:ea:
14:58:5c:46:49:47:39:00:40:2c:db:02:ee:45:e6:
db:8f:e8:68:91:88:fa:a8:5f:f0:a5:62:05:a2:6a:
7c:06:df:fe:ab:df:22:00:c2:68:1e:ff:8d:05:bf:
38:07:ac:8e:13:91:b4:3d:cc:5b:d0:72:53:68:e4:
23:6d:a0:0c:30:df:1b:d4:89:c4:36:3d:5e:6c:ee:
1a:0f:95:29:e7:63:dd:fb:bd:d8:db:0b:f3:51:3e:
d4:c6:eb:0f:37:37:1f:1a:33:63:02:59:84:3c:33:
2f:43:ea:d4:fd:b1:02:95:4f:bc:99:23:00:9f:b4:
77:8a:ae:3e:7a:0b:33:9b:eb:84:e9:63:81:d5:44:
e4:69:7f:0e:3e:95:f6:b3:09:35:a7:c4:5e:b4:eb:
dc:9c:5e:db:41:a8:0f:59:38:0c:62:dd:a1:4a:9d:
c7:8e:40:55:e9:23:4d:04:45:9a:9e:1c:d4:f1:e8:
75:9d:77:0f:c8:63:01:56:7c:b3:bd:0a:c4:58:35:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:F7:BE:CE:1E:70:E0:A6:C4:CA:10:18:CA:F6:E4:36:04:BF:31
X509v3 Authority Key Identifier:
keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c0:96:fa:29:8c:54:c1:33:51:80:7b:57:6b:f4:e0:0e:7a:
ca:ae:b4:7f:61:9e:b0:45:54:c5:9e:d2:00:9e:fc:84:98:51:
cd:a7:43:36:52:c7:84:e3:bd:d4:8a:4b:30:5b:dc:3f:91:8d:
6f:d2:a4:e9:1d:37:9c:7c:85:1a:f4:3d:5b:90:39:07:a9:ab:
9d:0c:44:f3:ff:f5:3b:0d:bd:7c:6f:8b:48:c8:b4:c4:28:3a:
9d:c2:e4:0a:8f:5b:48:f6:15:dd:f0:d8:39:7e:13:f1:1e:95:
61:47:c7:24:bc:22:3a:6c:fe:6d:08:dc:b4:ce:64:61:b0:3c:
85:ff:92:fd:31:b5:eb:52:56:42:88:7c:8e:7a:4e:60:15:46:
6d:6c:cc:0a:d8:7f:34:22:73:77:19:8c:d2:52:b3:0f:1b:35:
6c:7a:d9:65:b4:15:91:ab:b4:1c:f1:97:03:af:76:29:e7:8f:
5a:8d:1a:5a:83:0f:53:c0:f3:b2:60:62:5a:d3:5e:aa:19:e8:
99:96:d9:d6:1d:a4:f3:20:a0:33:7f:a2:4a:de:d7:23:cc:14:
ee:d4:27:e4:a5:31:5a:c7:65:f9:40:62:a7:f9:ac:1b:04:df:
0f:6d:0b:83:fe:67:07:8a:be:88:a5:c6:40:af:bc:a3:3f:fb:
e5:50:d2:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0yHRAEDsIFIhASnaCwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWQyZGNmMmI2OWFiZGJkNjA5NDM2NDQwMTE1YTllNGVh
MTlhMDUwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
EygzZTFhZjdiZWNlMWU3MGUwYTZjNGNhMTAxOGNhZjZlNDM2MDRiZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl1p6VUEnksp727r07O85EP64JJs
ZaK5fhSyw4LkH3FIElk8cW4l5oxEGsVTcFc1UOlb3PrcnDaOl+oUWFxGSUc5AEAs
2wLuRebbj+hokYj6qF/wpWIFomp8Bt/+q98iAMJoHv+NBb84B6yOE5G0Pcxb0HJT
aOQjbaAMMN8b1InENj1ebO4aD5Up52Pd+73Y2wvzUT7UxusPNzcfGjNjAlmEPDMv
Q+rU/bEClU+8mSMAn7R3iq4+egszm+uE6WOB1UTkaX8OPpX2swk1p8RetOvcnF7b
QagPWTgMYt2hSp3HjkBV6SNNBEWanhzU8eh1nXcPyGMBVnyzvQrEWDUjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4a977OHnDgpsTKEBjK9uQ2BL8xMB8GA1UdIwQY
MBaAFOgdLc8raavb1glDZEARWp5OoZoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEt
MjJlNTU0NzMxNmI1LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEtMjJlNTU0NzMxNmI1
LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsCW+imM
VMEzUYB7V2v04A56yq60f2GesEVUxZ7SAJ78hJhRzadDNlLHhOO91IpLMFvcP5GN
b9Kk6R03nHyFGvQ9W5A5B6mrnQxE8//1Ow29fG+LSMi0xCg6ncLkCo9bSPYV3fDY
OX4T8R6VYUfHJLwiOmz+bQjctM5kYbA8hf+S/TG161JWQoh8jnpOYBVGbWzMCth/
NCJzdxmM0lKzDxs1bHrZZbQVkau0HPGXA692KeePWo0aWoMPU8DzsmBiWtNeqhno
mZbZ1h2k8yCgM3+iSt7XI8wU7tQn5KUxWsdl+UBip/msGwTfD20Lg/5nB4q+iKXG
QK+8oz/75VDSKA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:36 2025 by rpki-client