Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: AnxMqUNnE8tWmSdKHgh9BXLug48WBY991iXLXM1WuKk=
Subject key identifier: 75:EB:82:93:EE:FD:2D:DE:C4:A9:7F:CE:47:F4:FB:AF:2C:43:62:2E
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 0194BCAA34CEA2214871B23D1F3503F3BC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: IJpq3f9CYkATtloS2p9LNtWio7E8WMNE//CWR9GVfjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:34:ce:a2:21:48:71:b2:3d:1f:35:03:f3:bc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=75eb8293eefd2ddec4a97fce47f4fbaf2c43622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:23:7a:0f:d2:4b:d6:fc:c1:99:fb:f4:e8:
df:3b:29:67:12:69:d8:59:a2:52:d5:0d:62:12:93:
23:ac:a3:9b:02:32:04:3e:67:bd:e9:76:c5:0f:86:
61:32:b9:d4:8b:19:c7:65:00:91:af:2a:c3:fc:4b:
2d:02:93:cb:52:c3:17:62:46:11:57:fc:7e:2d:c4:
56:87:1c:b9:a2:8e:2e:d2:e9:a4:3f:7c:6e:73:4a:
5f:26:4f:f7:db:d1:fa:f3:bc:58:57:d0:d9:ca:cb:
59:5d:d2:03:a3:80:9c:cb:13:73:dd:2e:83:91:9c:
e5:05:49:86:ac:11:75:6d:72:9f:fc:4d:81:93:9c:
12:9b:99:34:e2:0c:35:63:f4:05:89:34:47:c1:a5:
fe:3b:8a:82:57:0b:d0:ed:60:6c:92:dc:13:72:01:
f0:ed:ef:83:27:14:4f:ef:26:dd:ca:07:9f:f9:aa:
cb:15:bb:e4:2f:db:16:2c:ec:c0:53:c3:74:f2:a1:
b2:38:19:53:12:36:b5:25:b0:da:71:77:a5:05:84:
4c:ea:63:36:b2:f8:f6:30:a9:20:1c:e5:e9:11:9b:
88:e7:06:48:f8:0a:6f:49:3d:0a:96:0e:fb:e2:b8:
37:8c:8e:f5:e8:04:59:ea:c2:0c:8a:82:b3:8f:67:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:82:93:EE:FD:2D:DE:C4:A9:7F:CE:47:F4:FB:AF:2C:43:62:2E
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cd:3c:4c:37:56:ec:38:f7:f9:5d:fa:a6:f5:11:5b:f4:ad:
d5:b1:47:fc:e2:53:25:55:91:e3:42:27:04:36:79:5e:a2:b2:
88:b8:74:6d:78:40:46:f4:23:67:99:47:c2:ef:7b:50:c0:b5:
1a:a1:73:5f:ec:9d:d1:b0:42:99:b4:95:78:c0:a5:86:86:95:
6b:50:39:85:fe:08:2b:90:4b:65:03:8e:45:09:27:50:ac:d0:
e9:05:c8:ff:df:73:59:e9:09:63:d5:93:ca:52:41:2b:55:04:
10:76:0d:95:82:f2:c5:53:da:3e:26:17:32:e2:4a:6d:2a:f3:
1d:14:a8:73:16:f8:a8:94:ad:3a:70:ea:38:2c:2e:78:78:8e:
23:53:fe:5c:1f:46:0b:6b:49:d4:0f:2e:08:72:c1:99:d3:b6:
08:50:82:f4:af:84:03:5c:0c:69:58:36:cd:05:87:c3:c7:15:
2a:32:c4:7f:17:9a:85:2f:33:ca:20:7a:3e:38:c5:23:2b:ab:
0d:f9:25:f7:b8:36:91:c7:c9:c1:4f:c9:d6:d9:7d:6e:84:68:
fa:f5:0e:31:e0:3a:c4:c5:a8:2f:ae:23:97:42:3a:d9:d2:f9:
15:b3:51:03:cf:76:08:00:96:b7:86:2e:f3:76:f8:4a:87:be:
ea:0d:ee:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjTOoiFIcbI9HzUD87yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjUwMTMxMTQwMDU4WhcNMjUwMjAxMTQwMDU4WjAzMTEwLwYDVQQD
Eyg3NWViODI5M2VlZmQyZGRlYzRhOTdmY2U0N2Y0ZmJhZjJjNDM2MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCkjeg/SS9b8wZn79OjfOylnEmnY
WaJS1Q1iEpMjrKObAjIEPme96XbFD4ZhMrnUixnHZQCRryrD/EstApPLUsMXYkYR
V/x+LcRWhxy5oo4u0umkP3xuc0pfJk/329H687xYV9DZystZXdIDo4CcyxNz3S6D
kZzlBUmGrBF1bXKf/E2Bk5wSm5k04gw1Y/QFiTRHwaX+O4qCVwvQ7WBsktwTcgHw
7e+DJxRP7ybdygef+arLFbvkL9sWLOzAU8N08qGyOBlTEja1JbDacXelBYRM6mM2
svj2MKkgHOXpEZuI5wZI+ApvST0Klg774rg3jI716ARZ6sIMioKzj2dTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXrgpPu/S3exKl/zkf0+68sQ2IuMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM08TDdW
7Dj3+V36pvURW/St1bFH/OJTJVWR40InBDZ5XqKyiLh0bXhARvQjZ5lHwu97UMC1
GqFzX+yd0bBCmbSVeMClhoaVa1A5hf4IK5BLZQOORQknUKzQ6QXI/99zWekJY9WT
ylJBK1UEEHYNlYLyxVPaPiYXMuJKbSrzHRSocxb4qJStOnDqOCwueHiOI1P+XB9G
C2tJ1A8uCHLBmdO2CFCC9K+EA1wMaVg2zQWHw8cVKjLEfxeahS8zyiB6PjjFIyur
Dfkl97g2kcfJwU/J1tl9boRo+vUOMeA6xMWoL64jl0I62dL5FbNRA892CACWt4Yu
83b4Soe+6g3u3w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:25 2025 by rpki-client