Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File: bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier: LVeT+kZ7L68bngRTs9xVMKbgFVNV+DNiEzw8bSyQ0hg=
Subject key identifier: B1:F5:F6:E6:ED:91:45:B1:7A:E9:5C:A0:32:93:98:7F:E6:45:A7:4E
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer: /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial: 0194BC04E5604A445A7B8E7F43B01CA314D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number: 025E
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: 7+OfTRRdigP2W/7xLS6AKpn/ku08h6TDpJZ/DGTog3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:60:4a:44:5a:7b:8e:7f:43:b0:1c:a3:14:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=b1f5f6e6ed9145b17ae95ca03293987fe645a74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:72:da:7a:65:c6:88:3b:42:51:1e:3a:69:
64:77:8c:e6:de:28:17:b6:80:f5:88:e5:03:cb:4f:
7b:4f:96:2f:8a:ea:88:38:1b:6c:f3:03:ea:9f:43:
f9:2d:2b:2d:bf:ea:5e:9c:e9:c2:53:f3:af:9a:63:
f2:8a:15:53:ac:77:ea:89:e2:31:be:9a:b0:2a:3c:
51:2c:09:dc:db:b4:28:d2:17:c2:6f:a4:e2:ad:84:
c4:4f:48:95:b6:e7:2e:78:cb:33:5a:0e:4f:45:12:
43:fc:77:67:ad:d0:50:52:a6:eb:cf:2e:ab:6e:5e:
fc:f4:1c:de:9e:ba:dc:d4:9f:b1:b9:8e:04:83:76:
84:ab:ac:70:f0:43:14:11:6f:5c:db:b0:34:48:91:
18:65:d6:93:57:0d:c7:dc:53:f5:d9:79:a1:1e:38:
4c:3e:af:47:b4:71:31:e9:f3:9e:f9:95:9d:25:e3:
a4:1a:4a:83:63:db:4a:18:23:fc:db:51:5f:57:88:
4e:8e:a5:30:77:d9:48:f3:bd:d4:16:9c:54:95:34:
7a:7f:ce:f2:8d:4d:5a:b9:f3:e2:4c:c4:2e:2d:17:
aa:a2:71:9d:d5:e7:62:5e:6d:f8:00:44:88:dd:b5:
54:7b:2a:a1:d5:76:5c:f5:a3:cf:dc:7f:b9:e2:86:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:F6:E6:ED:91:45:B1:7A:E9:5C:A0:32:93:98:7F:E6:45:A7:4E
X509v3 Authority Key Identifier:
keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:c1:1c:40:e0:0f:2c:7e:43:b4:7c:59:81:a2:a7:59:f7:
c5:1e:7a:12:2c:ba:e0:6f:a1:35:b1:59:cd:94:3f:d8:89:68:
03:5b:59:06:71:28:fb:e5:b1:9d:89:ad:ee:b5:41:63:0b:c6:
85:db:7b:14:23:66:12:5b:c6:b1:17:50:86:ad:32:0d:b5:80:
38:6d:1d:b2:d1:5a:4f:c6:a3:42:0f:90:77:46:96:1d:6c:7b:
73:1d:a7:0c:a2:37:0a:9d:84:f0:94:27:15:16:d5:43:4d:19:
66:8f:a7:10:fe:7b:1c:3d:8d:5e:3e:56:e4:f7:27:3f:bc:95:
90:c4:54:50:1c:74:04:32:03:01:f7:56:bb:2c:49:8b:f2:7a:
ab:48:27:6a:89:28:1d:0f:9b:a4:9f:9d:24:99:26:b9:ee:0d:
b7:7c:ae:48:5e:69:04:8a:88:bf:13:5e:5d:e5:fa:48:2d:1f:
1c:ff:d5:ef:14:bf:f9:7a:fa:ce:25:37:82:ab:4c:b6:e9:1c:
10:ce:04:db:64:58:26:15:81:06:cc:ec:ad:22:f6:44:43:a2:
84:cb:5c:bd:d2:7f:c9:23:e2:c6:99:71:57:c9:63:f3:6b:5b:
15:60:fb:f0:0c:22:4b:39:9f:f4:e0:e4:22:bd:47:b8:11:10:
ff:d0:df:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOVgSkRae45/Q7AcoxTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDEyODJhNzdlMjU2NjUwMTY4ZDJlNTY1NmFlZmNlOWFk
NmEyZWMwHhcNMjUwMTMxMTEwMDI0WhcNMjUwMjAxMTEwMDI0WjAzMTEwLwYDVQQD
EyhiMWY1ZjZlNmVkOTE0NWIxN2FlOTVjYTAzMjkzOTg3ZmU2NDVhNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQVy2nplxog7QlEeOmlkd4zm3igX
toD1iOUDy097T5YviuqIOBts8wPqn0P5LSstv+penOnCU/OvmmPyihVTrHfqieIx
vpqwKjxRLAnc27Qo0hfCb6TirYTET0iVtucueMszWg5PRRJD/HdnrdBQUqbrzy6r
bl789Bzenrrc1J+xuY4Eg3aEq6xw8EMUEW9c27A0SJEYZdaTVw3H3FP12XmhHjhM
Pq9HtHEx6fOe+ZWdJeOkGkqDY9tKGCP821FfV4hOjqUwd9lI873UFpxUlTR6f87y
jU1aufPiTMQuLReqonGd1ediXm34AESI3bVUeyqh1XZc9aPP3H+54oY8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH19ubtkUWxeulcoDKTmH/mRadOMB8GA1UdIwQY
MBaAFG3RKCp34lZlAWjS5WVq786a1qLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgt
ZTAyMzNiN2M2MGFhLzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgtZTAyMzNiN2M2MGFh
LzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjXBHEDg
Dyx+Q7R8WYGip1n3xR56Eiy64G+hNbFZzZQ/2IloA1tZBnEo++WxnYmt7rVBYwvG
hdt7FCNmElvGsRdQhq0yDbWAOG0dstFaT8ajQg+Qd0aWHWx7cx2nDKI3Cp2E8JQn
FRbVQ00ZZo+nEP57HD2NXj5W5PcnP7yVkMRUUBx0BDIDAfdWuyxJi/J6q0gnaoko
HQ+bpJ+dJJkmue4Nt3yuSF5pBIqIvxNeXeX6SC0fHP/V7xS/+Xr6ziU3gqtMtukc
EM4E22RYJhWBBszsrSL2REOihMtcvdJ/ySPixplxV8lj82tbFWD78AwiSzmf9ODk
Ir1HuBEQ/9DfZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:05 2025 by rpki-client