Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier: OtRJ7jXP8C3mcrqK425Vv54NU6sz1u6F0GH0z4pEmgY=
Subject key identifier: 2D:AD:7D:F3:CF:F5:E3:8B:85:D0:63:66:00:F7:7B:7A:64:E8:A5:7C
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0194BC04C7B5ED71ECC964BFFB7941CC95E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number: 109A
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: I7tfazkghShzpGoWM8k2eP0CKD6R78aT0CpOeAEOhUU=)
2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=)
3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=)
4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=)
5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=)
6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:b5:ed:71:ec:c9:64:bf:fb:79:41:cc:95:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2dad7df3cff5e38b85d0636600f77b7a64e8a57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:70:6a:71:5c:bf:af:67:33:ce:d8:6b:e8:
20:75:72:8e:83:d4:ec:aa:9f:c4:f5:83:c2:22:ab:
44:23:fa:83:38:6a:e2:e1:ba:0e:4d:c3:f5:87:c3:
6a:45:54:0f:68:fe:06:49:1b:cc:63:d5:b1:c7:ef:
1b:2f:37:2d:66:f1:22:ca:a5:01:17:ea:4a:a2:1a:
5e:f4:66:4b:4c:4d:da:51:57:27:fb:27:5f:1c:9c:
07:8a:51:76:cd:52:6e:74:26:2a:d6:07:23:8d:bb:
29:b2:b6:79:02:f4:a1:ed:d4:9f:dc:a1:8c:3f:ea:
b9:63:d9:5d:ca:b4:9c:d4:67:d7:5d:20:66:2a:87:
32:2e:f5:dd:85:a7:4d:76:4b:45:25:e6:7b:05:cb:
9e:2e:ee:a9:96:00:48:d3:f9:fe:eb:59:f3:66:88:
52:69:0d:41:49:c4:3c:17:32:8a:bd:40:ff:0c:4a:
0a:12:48:99:16:08:c4:38:27:a7:9d:83:b9:85:88:
ac:82:7e:5e:55:44:c1:f6:dd:36:c8:77:04:86:cd:
25:18:5a:95:52:87:91:67:19:98:b8:cd:f3:b6:23:
85:d1:23:09:59:41:21:c8:35:17:d5:3c:29:32:88:
bd:c8:4b:29:64:58:69:b4:58:99:17:49:82:94:56:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AD:7D:F3:CF:F5:E3:8B:85:D0:63:66:00:F7:7B:7A:64:E8:A5:7C
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:de:5d:15:e7:29:8d:fc:29:c5:7d:1e:81:b1:f8:90:0c:
33:8e:d6:77:61:22:03:00:2f:8d:cd:1b:25:3a:ce:c8:14:0e:
3a:66:b2:cf:23:9e:ea:45:12:7e:32:b2:9c:e6:d0:7d:9a:be:
c8:bb:d6:40:dc:b6:e8:49:0e:31:74:d6:40:98:ad:df:df:d7:
a7:0b:90:a6:16:23:97:70:2a:13:75:db:ab:57:c5:0b:d1:28:
c6:f4:c5:5a:72:f1:19:20:6b:3c:ad:f1:ac:fa:17:d5:a6:fd:
70:43:0e:3d:ae:60:34:69:c0:f9:66:09:61:ad:93:7b:5e:57:
86:12:46:81:3e:88:1a:32:30:93:b9:09:0f:b4:72:87:16:02:
26:ed:70:4b:e4:84:45:4e:89:ce:91:cb:d7:fd:f5:fa:46:80:
e3:8b:0c:54:ae:26:b0:4a:6b:4b:f2:7c:d7:81:6a:01:20:61:
ca:00:aa:11:93:29:4b:1b:2a:a7:d7:5d:25:a0:68:06:59:4a:
3d:36:7e:91:48:44:bc:6a:a0:51:88:19:fa:a9:98:40:0a:07:
1e:de:5d:84:8a:20:a3:0b:73:8a:63:63:3d:a7:c5:5b:b9:a6:
16:25:b7:47:08:56:47:92:38:ec:5c:9b:db:bd:39:b1:15:b9:
1c:81:8c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMe17XHsyWS/+3lBzJXhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl
MDQ4MWYwHhcNMjUwMTMxMTEwMDE3WhcNMjUwMjAxMTEwMDE3WjAzMTEwLwYDVQQD
EygyZGFkN2RmM2NmZjVlMzhiODVkMDYzNjYwMGY3N2I3YTY0ZThhNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSNwanFcv69nM87Ya+ggdXKOg9Ts
qp/E9YPCIqtEI/qDOGri4boOTcP1h8NqRVQPaP4GSRvMY9Wxx+8bLzctZvEiyqUB
F+pKohpe9GZLTE3aUVcn+ydfHJwHilF2zVJudCYq1gcjjbspsrZ5AvSh7dSf3KGM
P+q5Y9ldyrSc1GfXXSBmKocyLvXdhadNdktFJeZ7BcueLu6plgBI0/n+61nzZohS
aQ1BScQ8FzKKvUD/DEoKEkiZFgjEOCennYO5hYisgn5eVUTB9t02yHcEhs0lGFqV
UoeRZxmYuM3ztiOF0SMJWUEhyDUX1TwpMoi9yEspZFhptFiZF0mClFZmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2tffPP9eOLhdBjZgD3e3pk6KV8MB8GA1UdIwQY
MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt
MjdkMDNlMzkzZmI3LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3
LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkObeXRXn
KY38KcV9HoGx+JAMM47Wd2EiAwAvjc0bJTrOyBQOOmayzyOe6kUSfjKynObQfZq+
yLvWQNy26EkOMXTWQJit39/XpwuQphYjl3AqE3Xbq1fFC9EoxvTFWnLxGSBrPK3x
rPoX1ab9cEMOPa5gNGnA+WYJYa2Te15XhhJGgT6IGjIwk7kJD7RyhxYCJu1wS+SE
RU6JzpHL1/31+kaA44sMVK4msEprS/J814FqASBhygCqEZMpSxsqp9ddJaBoBllK
PTZ+kUhEvGqgUYgZ+qmYQAoHHt5dhIogowtzimNjPafFW7mmFiW3RwhWR5I47Fyb
2705sRW5HIGMmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:40 2025 by rpki-client