Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: hHKLBPJ+HGstuq7AkoWK6XHUEg5hWfRD4jY+vwHScuM=
Subject key identifier: 94:0F:55:36:E5:8B:32:12:1A:A4:36:7C:33:26:A6:1A:FB:55:E6:00
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 0194BC04ADF7D7E08908C2E6598D0F07E39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 5XEV-gEMIErGK0axVAW_a3kFgdQ.roa (hash: zrBYoY+XDrWBTYUlEabBJW1Q13TMvp0kauzANBjQtoQ=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: nYlhZXmJ7D3NnkY4sxl1bc+YX8lbKmbNm0kr0CvRey0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:f7:d7:e0:89:08:c2:e6:59:8d:0f:07:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=940f5536e58b32121aa4367c3326a61afb55e600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:01:b9:f1:b7:f4:40:6a:cb:a2:a4:74:70:
90:08:10:e2:ab:2a:ac:04:be:d4:8e:fd:2e:76:54:
bc:2f:1b:0e:c7:af:68:4e:74:ce:3b:32:fa:4a:c5:
0a:b9:e6:07:e4:cc:a2:f0:3b:6c:3d:1d:3f:f9:ac:
33:07:73:d2:32:9c:01:2b:68:93:5e:48:1b:dc:3b:
87:0e:72:29:95:c0:91:37:26:ec:a0:e1:8a:16:41:
22:73:41:4f:d5:14:56:0c:a0:11:f5:23:a9:65:2c:
a2:13:6f:1b:fd:10:51:0d:7d:63:ab:10:86:11:b9:
9c:5f:76:87:94:85:f9:91:47:49:7a:cc:47:05:93:
80:b8:60:1a:8b:b4:f8:3c:90:2b:94:d1:d3:a3:91:
f1:a5:c8:91:12:a5:1c:a3:2e:02:2c:18:89:b1:b6:
cc:2d:2d:48:1e:e4:d4:b1:eb:98:90:10:07:3d:e3:
c1:a4:eb:cc:1f:f9:5f:02:10:fb:4c:7f:d6:95:2f:
6f:15:01:b5:ac:ea:3a:da:02:fc:cd:27:34:03:8f:
e1:88:1e:2a:24:e5:9e:16:d6:65:38:36:51:a0:11:
db:83:5a:03:c6:b5:3c:fb:1e:32:ee:e7:6f:9c:c1:
db:1f:95:bf:f6:98:e1:d2:e5:ce:66:c1:75:8e:63:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:55:36:E5:8B:32:12:1A:A4:36:7C:33:26:A6:1A:FB:55:E6:00
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:4f:a9:25:4e:3f:b7:8f:eb:91:cf:ab:d8:6e:6f:e3:de:
6e:28:e2:56:af:09:ad:d0:30:4d:5e:34:c7:82:67:32:cd:7d:
d0:1b:ed:70:02:e8:18:32:4d:c4:a7:c1:bf:7e:2d:a4:f4:67:
b7:a9:a5:b7:ca:2d:e3:e2:0a:64:0b:de:c9:62:23:cf:65:1e:
29:af:c4:ab:14:08:06:37:01:0b:e6:18:19:57:e8:de:aa:7d:
c4:a2:ef:6a:21:8e:1e:0e:71:5d:8b:f2:94:8a:3c:29:5f:4e:
22:e4:15:1c:2d:41:1d:c1:ef:da:1b:11:de:78:ff:e1:8d:88:
0d:fc:1d:11:13:30:38:21:0c:d4:3a:3b:56:dd:76:84:46:51:
94:09:89:ab:52:e7:e7:89:fc:5e:4f:83:ce:e0:79:88:8b:a0:
ef:62:d1:50:c4:2e:a4:31:8b:af:34:00:0c:ab:ed:1c:e8:4b:
fc:20:a9:c8:25:c3:55:b7:1b:f8:c1:b3:cb:51:1f:ca:bc:f7:
c7:62:16:42:b1:6a:3c:cc:e7:f4:de:72:62:b2:c9:00:fb:de:
dc:ed:73:15:74:18:5b:be:bb:d7:4d:a3:b4:bc:60:c6:6d:ff:
90:ec:bf:68:16:5b:16:5a:6a:81:85:da:86:1f:75:21:5d:20:
e0:86:0a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK331+CJCMLmWY0PB+OaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTZiYTk4YzY3NDVhNjMwMjZkNzhmYzI4NDcyMjM5OWQy
ZWI4NDkwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
Eyg5NDBmNTUzNmU1OGIzMjEyMWFhNDM2N2MzMzI2YTYxYWZiNTVlNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEMBufG39EBqy6KkdHCQCBDiqyqs
BL7Ujv0udlS8LxsOx69oTnTOOzL6SsUKueYH5Myi8DtsPR0/+awzB3PSMpwBK2iT
Xkgb3DuHDnIplcCRNybsoOGKFkEic0FP1RRWDKAR9SOpZSyiE28b/RBRDX1jqxCG
EbmcX3aHlIX5kUdJesxHBZOAuGAai7T4PJArlNHTo5HxpciREqUcoy4CLBiJsbbM
LS1IHuTUseuYkBAHPePBpOvMH/lfAhD7TH/WlS9vFQG1rOo62gL8zSc0A4/hiB4q
JOWeFtZlODZRoBHbg1oDxrU8+x4y7udvnMHbH5W/9pjh0uXOZsF1jmPsuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQPVTblizISGqQ2fDMmphr7VeYAMB8GA1UdIwQY
MBaAFL9WupjGdFpjAm14/ChHIjmdLrhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYt
NTg3ZmM4NGFjZWZlLzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzQzZDItNTI1My00MjQzLWEwMWYtNTg3ZmM4NGFjZWZl
LzEvdjFhNm1NWjBXbU1DYlhqOEtFY2lPWjB1dUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEdPqSVO
P7eP65HPq9hub+PebijiVq8JrdAwTV40x4JnMs190BvtcALoGDJNxKfBv34tpPRn
t6mlt8ot4+IKZAveyWIjz2UeKa/EqxQIBjcBC+YYGVfo3qp9xKLvaiGOHg5xXYvy
lIo8KV9OIuQVHC1BHcHv2hsR3nj/4Y2IDfwdERMwOCEM1Do7Vt12hEZRlAmJq1Ln
54n8Xk+DzuB5iIug72LRUMQupDGLrzQADKvtHOhL/CCpyCXDVbcb+MGzy1Efyrz3
x2IWQrFqPMzn9N5yYrLJAPve3O1zFXQYW767102jtLxgxm3/kOy/aBZbFlpqgYXa
hh91IV0g4IYKQg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:36 2025 by rpki-client