Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: Q2UNYvwdjWgMBcyq/6cfJMV+2tbVqaJdLNFGg7lSXoU=
Subject key identifier: BD:90:B0:BF:42:5A:DA:BE:25:B1:D8:B9:2B:AF:67:49:0E:B9:7F:50
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 0194BD17DDB0165D31F4E2D3002BF9506E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 13C0
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: YuJeNuIhh5geSiOVgg71a+bKpvxrm2WRUiyT6owQADA=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:b0:16:5d:31:f4:e2:d3:00:2b:f9:50:6e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=bd90b0bf425adabe25b1d8b92baf67490eb97f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:75:03:d3:b2:82:1a:54:d9:5e:dd:0c:44:
42:67:f2:f4:70:68:34:8f:9a:36:58:d9:c8:26:a8:
a2:ee:57:3c:ae:54:ad:5a:84:bf:97:37:33:9c:9d:
3e:ee:1c:9e:64:62:58:31:de:f7:be:9e:04:35:bb:
63:d7:a5:57:1d:f7:97:8b:30:92:af:4b:1d:2b:9c:
12:d5:f7:4e:2a:36:a3:e9:2a:14:1e:73:15:f0:7c:
14:d0:30:c1:34:62:a6:ca:6a:e1:5c:93:90:da:1c:
3f:35:74:be:d3:c1:0c:48:1a:a4:23:08:20:31:cd:
eb:49:be:4d:c0:71:36:ea:61:4d:25:4f:8e:4d:df:
69:ca:28:93:2a:08:9d:2d:30:13:fb:a6:46:85:16:
fa:21:88:83:a8:19:ab:6f:be:c7:2d:4b:ee:16:ab:
1d:b6:66:d3:84:a3:46:26:93:db:38:a2:80:2b:bf:
4a:5d:be:05:d5:e6:ba:ad:2e:4b:80:9f:1d:71:49:
8f:68:eb:09:d5:7b:4b:a4:44:a0:dc:cb:b1:e9:0f:
e8:12:62:ad:64:4c:2d:00:97:b7:20:07:79:a9:82:
c4:2f:a3:eb:64:da:2c:49:1e:ba:a5:6f:82:18:43:
b1:76:33:02:15:b0:8d:d7:9a:50:a5:6b:b9:3f:54:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:B0:BF:42:5A:DA:BE:25:B1:D8:B9:2B:AF:67:49:0E:B9:7F:50
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:ad:7a:c1:82:18:8b:19:32:94:a0:72:33:a3:fa:2e:bf:
f7:28:46:84:23:bf:8a:a8:00:51:ad:49:7d:e4:36:80:99:ee:
d0:ef:7c:22:98:8d:5e:b6:62:7b:76:d1:a0:e7:b4:10:2a:2d:
ce:e1:8f:48:f8:37:11:03:e0:8b:23:f0:03:e5:4f:5c:6d:92:
9c:c5:64:03:a2:93:26:27:23:3d:81:5f:e2:db:18:6a:7c:d3:
95:02:69:9e:c2:ea:1a:39:41:b0:2d:9f:b0:ef:58:87:78:38:
27:f2:07:6b:f5:30:92:2e:15:c2:50:76:b6:29:5c:84:02:92:
f4:63:ef:f2:77:cd:35:b3:bb:4b:3e:29:01:43:73:02:df:dc:
fb:d7:2b:ba:b1:79:ef:63:58:90:4d:9b:18:af:45:9e:74:49:
b6:a6:29:7b:88:49:f5:31:3e:20:69:a7:da:41:5a:54:1a:69:
0b:97:52:2e:6f:eb:d0:b6:91:30:a5:df:fb:31:ad:78:3a:66:
7f:55:b9:3c:69:1a:52:79:5c:98:74:c5:ed:21:ea:2d:0e:7e:
ff:ed:7b:7b:c2:88:b2:3e:b1:e0:49:8c:5e:7e:0f:12:37:62:
ce:c2:fd:ea:bf:84:76:e0:18:a3:48:ae:a7:37:87:9f:1f:eb:
32:d1:7d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F92wFl0x9OLTACv5UG5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx
NzQyYzgwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
EyhiZDkwYjBiZjQyNWFkYWJlMjViMWQ4YjkyYmFmNjc0OTBlYjk3ZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3El1A9OyghpU2V7dDERCZ/L0cGg0
j5o2WNnIJqii7lc8rlStWoS/lzcznJ0+7hyeZGJYMd73vp4ENbtj16VXHfeXizCS
r0sdK5wS1fdOKjaj6SoUHnMV8HwU0DDBNGKmymrhXJOQ2hw/NXS+08EMSBqkIwgg
Mc3rSb5NwHE26mFNJU+OTd9pyiiTKgidLTAT+6ZGhRb6IYiDqBmrb77HLUvuFqsd
tmbThKNGJpPbOKKAK79KXb4F1ea6rS5LgJ8dcUmPaOsJ1XtLpESg3Mux6Q/oEmKt
ZEwtAJe3IAd5qYLEL6PrZNosSR66pW+CGEOxdjMCFbCN15pQpWu5P1Q2AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2QsL9CWtq+JbHYuSuvZ0kOuX9QMB8GA1UdIwQY
MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt
YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0
LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwatesGC
GIsZMpSgcjOj+i6/9yhGhCO/iqgAUa1JfeQ2gJnu0O98IpiNXrZie3bRoOe0ECot
zuGPSPg3EQPgiyPwA+VPXG2SnMVkA6KTJicjPYFf4tsYanzTlQJpnsLqGjlBsC2f
sO9Yh3g4J/IHa/Uwki4VwlB2tilchAKS9GPv8nfNNbO7Sz4pAUNzAt/c+9crurF5
72NYkE2bGK9FnnRJtqYpe4hJ9TE+IGmn2kFaVBppC5dSLm/r0LaRMKXf+zGteDpm
f1W5PGkaUnlcmHTF7SHqLQ5+/+17e8KIsj6x4EmMXn4PEjdizsL96r+EduAYo0iu
pzeHnx/rMtF9Sw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:50 2025 by rpki-client