Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: +sjrxiFWbObcG/Sj77IS59mPVurMSL5oW/GQSktuvXs=
Subject key identifier: 45:DC:09:DD:F0:21:C8:B5:32:8B:B9:F7:1A:49:BE:B0:31:75:33:81
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 0194BC050A4392C2539844D7790CCE59503C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0A19
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: kP2DDnaJRuUM2j7J71LKcPJinrLc7RpwRCkUvHngQ3k=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:43:92:c2:53:98:44:d7:79:0c:ce:59:50:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=45dc09ddf021c8b5328bb9f71a49beb031753381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:dd:c0:99:4d:b8:f6:44:67:30:ee:57:c4:
8b:5d:f2:0f:8d:d1:f1:94:69:1a:3a:c8:99:36:e4:
fc:31:4a:b8:da:bb:4c:d5:08:e0:06:21:a0:72:2b:
3d:c5:1a:ff:38:c0:31:0b:5b:1b:b8:6e:54:d9:7f:
78:cb:48:a2:95:69:7f:15:14:9b:0a:e1:eb:1b:01:
3d:f1:22:aa:ef:52:4c:cd:83:5e:58:ac:ce:76:7f:
28:5d:3f:e4:c3:06:04:84:6d:dd:ac:77:63:15:ef:
9f:6f:7c:a7:9f:d9:9d:5f:3c:a6:56:a6:97:10:bc:
80:3a:1a:83:2c:96:e5:da:af:d8:3d:83:49:29:f8:
40:6d:51:93:77:e4:0a:23:6c:e5:39:ad:5a:5e:b8:
21:24:b3:d6:90:5d:ab:35:b0:81:ad:a2:5b:6d:c1:
40:44:7e:b5:f8:e6:49:a5:27:09:3c:aa:f9:6c:a5:
c3:02:5a:86:03:19:88:5c:eb:a1:fc:d7:52:5a:16:
ab:22:fb:2a:3e:74:c1:16:e0:0a:52:40:76:83:78:
ff:57:a5:b6:e2:e8:d4:f3:7f:cc:4e:c4:55:6c:c5:
ef:30:73:d9:81:45:44:a9:4f:1e:69:d1:06:e8:34:
51:c2:08:73:a5:04:90:ef:06:81:54:fc:19:5d:aa:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:09:DD:F0:21:C8:B5:32:8B:B9:F7:1A:49:BE:B0:31:75:33:81
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a6:1e:08:8b:f0:f3:db:88:a9:17:fb:78:48:8c:95:41:5c:
ff:1d:8a:b7:f7:2e:18:30:14:0e:ac:56:e7:c8:b7:58:c5:c3:
f2:a0:8c:64:0e:e5:db:ee:e1:42:de:de:e3:cd:02:85:db:1a:
5a:0a:75:f3:d9:78:d3:86:41:5b:b7:36:c6:29:ec:8a:45:69:
14:fa:d8:c3:52:37:eb:d8:13:8f:e5:39:84:ff:9b:6d:5c:57:
0a:9c:49:9b:23:55:a3:c3:be:ff:9e:8d:ac:b8:c1:5c:48:5d:
57:af:05:85:52:85:3e:bb:9b:cb:fd:50:c9:9f:25:dd:ce:1c:
a3:3a:d4:e1:79:2a:fd:fa:ea:ea:1a:c8:2d:eb:f0:53:aa:e5:
f4:a2:aa:ed:6a:45:00:fa:9a:0e:e1:b8:02:01:83:fd:69:4a:
41:a4:8d:b3:02:32:8b:89:ad:d7:d6:48:47:a3:0f:c3:3c:63:
5f:a1:6d:9b:16:2b:1e:07:07:e8:05:31:dc:de:42:3b:09:53:
41:22:1c:4b:18:f5:8e:2f:7e:53:94:7e:ce:ac:34:23:59:88:
7e:11:17:8d:8f:4c:52:c5:e9:1e:85:0f:d7:8a:5e:51:7c:d4:
93:3d:f6:60:cc:11:84:26:c6:6f:39:95:0b:af:d1:13:ab:fd:
d9:98:9c:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQpDksJTmETXeQzOWVA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Yjg4MGM1YTQ1YzNkNDAxYjkyZDViNDI2MDhlODU1NzUx
ODU5ZGUwHhcNMjUwMTMxMTEwMDM0WhcNMjUwMjAxMTEwMDM0WjAzMTEwLwYDVQQD
Eyg0NWRjMDlkZGYwMjFjOGI1MzI4YmI5ZjcxYTQ5YmViMDMxNzUzMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXPdwJlNuPZEZzDuV8SLXfIPjdHx
lGkaOsiZNuT8MUq42rtM1QjgBiGgcis9xRr/OMAxC1sbuG5U2X94y0iilWl/FRSb
CuHrGwE98SKq71JMzYNeWKzOdn8oXT/kwwYEhG3drHdjFe+fb3ynn9mdXzymVqaX
ELyAOhqDLJbl2q/YPYNJKfhAbVGTd+QKI2zlOa1aXrghJLPWkF2rNbCBraJbbcFA
RH61+OZJpScJPKr5bKXDAlqGAxmIXOuh/NdSWharIvsqPnTBFuAKUkB2g3j/V6W2
4ujU83/MTsRVbMXvMHPZgUVEqU8eadEG6DRRwghzpQSQ7waBVPwZXao3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXcCd3wIci1Mou59xpJvrAxdTOBMB8GA1UdIwQY
MBaAFAW4gMWkXD1AG5LVtCYI6FV1GFneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUt
YzM2NTc5NGNlZmY3LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS80YWM0MjgtYjA3OC00NjAwLWFiMmUtYzM2NTc5NGNlZmY3
LzEvQmJpQXhhUmNQVUFia3RXMEpnam9WWFVZV2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKYeCIvw
89uIqRf7eEiMlUFc/x2Kt/cuGDAUDqxW58i3WMXD8qCMZA7l2+7hQt7e480Chdsa
Wgp189l404ZBW7c2xinsikVpFPrYw1I369gTj+U5hP+bbVxXCpxJmyNVo8O+/56N
rLjBXEhdV68FhVKFPruby/1QyZ8l3c4cozrU4Xkq/frq6hrILevwU6rl9KKq7WpF
APqaDuG4AgGD/WlKQaSNswIyi4mt19ZIR6MPwzxjX6FtmxYrHgcH6AUx3N5COwlT
QSIcSxj1ji9+U5R+zqw0I1mIfhEXjY9MUsXpHoUP14peUXzUkz32YMwRhCbGbzmV
C6/RE6v92Zichg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:02 2025 by rpki-client