Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
File: _-BodRu9xkUKIUa4VBshlMKcgAk.mft (raw, json)
Hash identifier: XEN1FoRzNuaMDxG6vbxzHlJDAQ3X1Q6I76MwEuJSX08=
Subject key identifier: 94:06:05:DD:2A:81:4B:54:96:F7:F7:88:50:AD:33:D6:C6:86:2E:93
Authority key identifier: FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
Certificate issuer: /CN=ffe068751bbdc6450a2146b8541b2194c29c8009
Certificate serial: 0194BCA9907E1FF0EACD530DA6C6F11A38B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BodRu9xkUKIUa4VBshlMKcgAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
Manifest number: 0319
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: _-BodRu9xkUKIUa4VBshlMKcgAk.crl (hash: I7RnQvQASWQ4RHl88Hxzi1GFRubKhzzYemKKb9dXDGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:7e:1f:f0:ea:cd:53:0d:a6:c6:f1:1a:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe068751bbdc6450a2146b8541b2194c29c8009
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=940605dd2a814b5496f7f78850ad33d6c6862e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:dd:f2:4c:3c:97:74:bf:95:bf:99:b7:23:
99:4e:cd:74:dd:d9:f0:0a:2b:a7:e3:03:65:3f:70:
80:10:04:07:62:82:5c:4c:59:f3:3d:9d:c1:76:83:
eb:61:04:46:64:91:ab:02:9a:63:09:ce:3a:69:ba:
5d:32:d8:42:02:0f:c1:4a:c8:aa:f2:51:93:6b:55:
d3:3d:bf:39:02:5b:fb:99:31:8a:8e:15:4c:42:fd:
81:e7:d9:cb:d2:f1:a9:95:d0:1f:53:b3:f7:ab:a0:
53:35:39:9a:c0:9d:80:ee:ac:53:f1:79:ff:6b:8c:
1c:5e:45:a7:78:9a:04:95:78:08:81:6c:a4:e1:23:
10:4b:35:d6:42:15:c4:a0:ae:05:9c:97:7c:26:8c:
fc:da:9b:3e:88:8e:aa:5c:e2:22:a9:59:26:ce:94:
ee:0d:92:31:2f:58:be:63:0e:a1:db:a7:a1:21:0a:
8d:13:30:2c:01:4f:5e:1a:67:d4:69:3d:c8:10:86:
dc:bb:d3:ad:19:31:bf:59:9a:5a:d3:04:22:11:12:
38:e2:94:4a:c7:b4:7d:b3:0d:a7:57:24:54:97:eb:
1d:91:4d:33:e0:d9:3d:a3:0e:0b:7a:08:1a:09:1f:
f6:52:ce:58:bb:28:fe:af:c0:49:06:c1:d9:c2:4c:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:06:05:DD:2A:81:4B:54:96:F7:F7:88:50:AD:33:D6:C6:86:2E:93
X509v3 Authority Key Identifier:
keyid:FF:E0:68:75:1B:BD:C6:45:0A:21:46:B8:54:1B:21:94:C2:9C:80:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BodRu9xkUKIUa4VBshlMKcgAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e6285b-abd1-4d76-9845-548ef3845269/1/_-BodRu9xkUKIUa4VBshlMKcgAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cd:54:42:dd:a1:28:d0:7d:9e:7d:c6:9c:f0:44:99:2e:90:
ec:20:23:41:e0:71:16:8a:13:32:9f:cf:27:31:64:22:58:71:
63:62:32:56:66:ef:19:ff:bb:6b:35:93:b1:af:43:97:12:36:
0e:40:2f:dd:70:f8:e3:30:d6:a2:45:dc:37:12:4e:89:89:2f:
41:ec:c9:d0:a5:ab:dd:be:75:80:76:2b:8b:71:3f:15:97:0d:
68:4c:8a:35:23:af:24:a9:da:c3:d1:5e:6d:9f:a3:73:35:41:
58:4d:54:0b:f3:9e:01:4f:03:8c:d8:70:a3:54:a3:bb:86:ce:
d2:86:bb:8c:22:de:2d:3a:de:bd:ed:ed:03:5d:aa:ea:2e:48:
a3:c3:be:8a:3c:f3:0d:fe:58:f5:61:d4:b4:d7:5b:7a:c5:6a:
c5:04:7d:58:99:0c:78:1d:b9:51:35:ed:82:a7:5e:ff:1e:c6:
31:a9:cd:c1:ae:a7:cd:b0:b8:4e:3e:c8:20:1a:17:6f:6b:04:
d4:77:38:68:12:1a:d3:61:3a:65:26:4c:0e:8f:08:13:82:0a:
32:cc:da:7a:e7:0b:77:21:8c:0d:36:28:b5:90:df:0f:cb:f9:
a6:7f:7c:65:b1:a3:e7:b9:a7:4b:d6:a5:75:5f:15:a7:71:73:
37:3e:f0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZB+H/DqzVMNpsbxGji0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTA2ODc1MWJiZGM2NDUwYTIxNDZiODU0MWIyMTk0YzI5
YzgwMDkwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
Eyg5NDA2MDVkZDJhODE0YjU0OTZmN2Y3ODg1MGFkMzNkNmM2ODYyZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm3d8kw8l3S/lb+ZtyOZTs103dnw
Ciun4wNlP3CAEAQHYoJcTFnzPZ3BdoPrYQRGZJGrAppjCc46abpdMthCAg/BSsiq
8lGTa1XTPb85Alv7mTGKjhVMQv2B59nL0vGpldAfU7P3q6BTNTmawJ2A7qxT8Xn/
a4wcXkWneJoElXgIgWyk4SMQSzXWQhXEoK4FnJd8Joz82ps+iI6qXOIiqVkmzpTu
DZIxL1i+Yw6h26ehIQqNEzAsAU9eGmfUaT3IEIbcu9OtGTG/WZpa0wQiERI44pRK
x7R9sw2nVyRUl+sdkU0z4Nk9ow4LeggaCR/2Us5Yuyj+r8BJBsHZwkyReQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQGBd0qgUtUlvf3iFCtM9bGhi6TMB8GA1UdIwQY
MBaAFP/gaHUbvcZFCiFGuFQbIZTCnIAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1Cb2RSdTl4a1VLSVVhNFZCc2hsTUtjZ0FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNjI4NWItYWJkMS00ZDc2LTk4NDUt
NTQ4ZWYzODQ1MjY5LzEvXy1Cb2RSdTl4a1VLSVVhNFZCc2hsTUtjZ0FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lNjI4NWItYWJkMS00ZDc2LTk4NDUtNTQ4ZWYzODQ1MjY5
LzEvXy1Cb2RSdTl4a1VLSVVhNFZCc2hsTUtjZ0FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc1UQt2h
KNB9nn3GnPBEmS6Q7CAjQeBxFooTMp/PJzFkIlhxY2IyVmbvGf+7azWTsa9DlxI2
DkAv3XD44zDWokXcNxJOiYkvQezJ0KWr3b51gHYri3E/FZcNaEyKNSOvJKnaw9Fe
bZ+jczVBWE1UC/OeAU8DjNhwo1Sju4bO0oa7jCLeLTreve3tA12q6i5Io8O+ijzz
Df5Y9WHUtNdbesVqxQR9WJkMeB25UTXtgqde/x7GManNwa6nzbC4Tj7IIBoXb2sE
1Hc4aBIa02E6ZSZMDo8IE4IKMszaeucLdyGMDTYotZDfD8v5pn98ZbGj57mnS9al
dV8Vp3FzNz7w1g==
-----END CERTIFICATE-----
Generated at Thu May 1 11:54:14 2025 by rpki-client