Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: CxdQBwwjCWKE6NwvlNN4oBcUBTdbvN9U9s/1cXep+VQ=
Subject key identifier: 41:CD:42:CB:23:67:32:EA:E5:49:6D:B6:01:0A:0B:C2:AE:14:D0:63
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 0194BD857CA3CDB7232944E803EEFDF15F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: zxVtyp5Rv+iVOX5k5PHsZuVLj0aeWQRTahKBaSQ9poc=)
2: fcZemZl1vze9O7p9AxyuSyrFuZM.roa (hash: FwV5i3nd9L09P7VibTZwPG5Ywt6qHvbEJ0CkZEQ+EhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7c:a3:cd:b7:23:29:44:e8:03:ee:fd:f1:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=41cd42cb236732eae5496db6010a0bc2ae14d063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:71:54:af:aa:36:a5:2b:21:6b:e4:1e:32:
95:d1:29:e9:8a:d9:8a:89:5d:86:32:a4:47:ed:cf:
f4:8f:09:41:ee:92:8b:2a:4f:93:a1:91:c5:49:4f:
5d:e9:3a:6c:6a:fc:00:66:b3:27:36:50:f5:f8:19:
4d:38:41:5f:c7:6f:8b:9d:fe:60:ea:5d:fc:61:6a:
20:82:f5:b2:50:76:00:e7:05:be:7a:7c:bc:44:76:
45:18:9c:a7:60:dd:00:93:ba:df:b4:bd:20:7c:df:
47:cf:f6:6e:d9:24:75:2f:52:f5:76:1a:7d:84:87:
5c:a1:bb:23:7b:f0:c8:bb:0f:3b:b5:28:04:66:52:
e5:78:d7:57:25:f8:c3:90:0f:17:58:5f:ed:a5:06:
3e:f9:9f:4e:0c:13:5f:f2:eb:62:30:01:79:89:91:
62:1a:c7:a5:b3:9c:be:bb:17:10:64:2c:5b:4d:ca:
3a:2c:d4:3a:43:87:ba:27:23:9f:c7:79:00:c0:28:
e2:3f:b9:d3:58:57:cb:96:c2:62:99:1a:7b:63:13:
1a:f1:f2:7f:75:2e:c2:bb:97:17:60:d1:45:40:9e:
cc:06:9d:57:6e:45:6b:30:a0:2e:a2:43:85:13:33:
f3:28:76:75:92:7e:4d:ae:54:8e:38:1c:41:ea:fd:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CD:42:CB:23:67:32:EA:E5:49:6D:B6:01:0A:0B:C2:AE:14:D0:63
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:09:7c:be:59:e7:b0:3d:57:85:5b:65:a4:b2:46:3b:9c:d0:
47:e7:c7:4b:b7:24:a1:94:8e:73:f9:00:a6:6d:db:8b:12:33:
d1:b7:ea:1b:2e:d2:3f:3c:ce:36:42:01:5b:02:6f:c4:bd:f0:
1d:f5:67:ed:84:4c:24:a9:22:cd:71:52:44:67:e7:11:e9:49:
c4:57:d3:92:57:bd:c6:1e:62:40:c5:84:d8:83:90:71:ee:22:
8f:69:da:9f:e4:6d:30:30:6d:84:f7:bb:6d:af:12:81:62:a4:
41:93:1f:8f:a5:d9:29:cd:a5:2b:c9:31:e0:63:1b:c2:86:9c:
b7:9c:4b:47:52:40:a1:60:ea:63:f9:2e:79:9d:5f:8f:3a:21:
16:82:b7:e7:d1:be:c7:dd:01:0c:90:0b:67:69:00:1c:de:6f:
a9:2b:ec:ca:38:3d:e7:f9:ed:1a:ff:e3:72:06:9a:a3:13:bd:
91:5d:02:1e:24:d6:d4:75:79:10:9b:62:01:ed:8c:e4:6c:26:
50:6a:e8:f9:90:b7:9a:99:ee:8e:25:93:c5:d8:01:79:9e:f4:
69:fb:d1:4f:4f:2b:cb:32:56:b8:2c:78:30:57:16:c2:b7:40:
24:9f:3e:74:2b:0f:c6:be:89:0a:42:e9:a6:78:41:e6:b6:ea:
36:fb:09:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hXyjzbcjKUToA+798V8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh
NGI4YTcwHhcNMjUwMTMxMTgwMDI5WhcNMjUwMjAxMTgwMDI5WjAzMTEwLwYDVQQD
Eyg0MWNkNDJjYjIzNjczMmVhZTU0OTZkYjYwMTBhMGJjMmFlMTRkMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvpxVK+qNqUrIWvkHjKV0SnpitmK
iV2GMqRH7c/0jwlB7pKLKk+ToZHFSU9d6TpsavwAZrMnNlD1+BlNOEFfx2+Lnf5g
6l38YWoggvWyUHYA5wW+eny8RHZFGJynYN0Ak7rftL0gfN9Hz/Zu2SR1L1L1dhp9
hIdcobsje/DIuw87tSgEZlLleNdXJfjDkA8XWF/tpQY++Z9ODBNf8utiMAF5iZFi
Gsels5y+uxcQZCxbTco6LNQ6Q4e6JyOfx3kAwCjiP7nTWFfLlsJimRp7YxMa8fJ/
dS7Cu5cXYNFFQJ7MBp1XbkVrMKAuokOFEzPzKHZ1kn5NrlSOOBxB6v0uQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHNQssjZzLq5UlttgEKC8KuFNBjMB8GA1UdIwQY
MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt
NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4
LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAl8vlnn
sD1XhVtlpLJGO5zQR+fHS7ckoZSOc/kApm3bixIz0bfqGy7SPzzONkIBWwJvxL3w
HfVn7YRMJKkizXFSRGfnEelJxFfTkle9xh5iQMWE2IOQce4ij2nan+RtMDBthPe7
ba8SgWKkQZMfj6XZKc2lK8kx4GMbwoact5xLR1JAoWDqY/kueZ1fjzohFoK359G+
x90BDJALZ2kAHN5vqSvsyjg95/ntGv/jcgaaoxO9kV0CHiTW1HV5EJtiAe2M5Gwm
UGro+ZC3mpnujiWTxdgBeZ70afvRT08ryzJWuCx4MFcWwrdAJJ8+dCsPxr6JCkLp
pnhB5rbqNvsJWg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:55 2025 by rpki-client