Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
File: CByzM5E89BO7r9kneTezBhphgXw.mft (raw, json)
Hash identifier: 8aBQc8VaToLXc5pNxEx6TpjAw+/zlvvqi4TtkQ+Moys=
Subject key identifier: 59:A6:D1:64:EC:BB:CD:AE:B8:42:A0:E2:9B:49:77:D2:F4:15:B3:B0
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 0194BC729170371E7848D161492D2A8C45DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: CByzM5E89BO7r9kneTezBhphgXw.crl (hash: u09h7XxvjM3MnJk+hmucPnpNZT4V5q+MtEfSWNU4zHw=)
2: NtH1vO7ll_U5_pqKHtqzA0Hc2jg.roa (hash: HhdnUZonzxIQju7AN7jqFbyBFzlOs+8aln7of8ZODwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:91:70:37:1e:78:48:d1:61:49:2d:2a:8c:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=59a6d164ecbbcdaeb842a0e29b4977d2f415b3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:ed:33:c2:8e:ff:e3:64:26:2c:90:74:52:
22:3d:ee:f5:b8:87:4f:75:d7:2a:42:44:98:8f:f9:
75:47:1b:b9:28:c2:cc:c4:ab:4b:fd:88:a6:c9:92:
a6:6b:fd:a1:11:f0:67:b7:05:36:40:63:6d:5b:92:
c2:76:b4:f2:1f:3c:f5:7a:65:d3:17:8c:e2:30:27:
ee:fd:20:58:3e:7a:78:df:58:d3:9c:09:2f:f8:cc:
70:51:f5:3c:26:60:64:ef:e5:ac:9c:09:9d:26:08:
90:26:07:39:8c:1a:d4:40:68:1a:45:2c:42:44:ab:
94:a4:84:90:ee:d8:91:12:97:4f:5f:22:b7:25:24:
9c:c9:70:6b:0d:51:59:8f:6e:8a:bc:14:88:08:e4:
09:f6:da:86:20:64:e7:0f:5e:aa:0c:d4:b0:c4:79:
a2:b0:4c:8e:1f:3c:35:03:cc:70:bb:8d:1b:a1:89:
72:3f:c3:e9:9a:81:64:a0:27:2e:83:b6:3d:2d:75:
97:09:f4:46:32:52:66:39:bd:9f:c5:f9:5c:fe:b5:
38:d7:ec:2a:9a:3a:06:fa:27:e3:69:14:b2:69:3d:
0e:f0:69:09:b5:10:a7:d2:f8:89:f1:cc:59:9b:21:
de:ff:4d:7e:8c:84:35:ec:23:ab:8d:06:4e:40:e8:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:D1:64:EC:BB:CD:AE:B8:42:A0:E2:9B:49:77:D2:F4:15:B3:B0
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:24:c5:e6:0e:b6:03:d4:96:d2:a9:c9:cc:20:78:7f:e9:36:
83:82:76:9f:89:a0:66:bd:b4:7b:58:43:c8:9e:ff:06:70:6f:
b0:cb:5c:16:66:69:1d:67:36:e2:74:7d:4d:a2:15:75:48:85:
e7:46:fd:c9:bf:32:83:08:71:be:2e:0a:c4:d8:1d:a7:72:09:
28:71:e6:8f:83:9a:f0:33:3d:5c:9a:2c:0a:ce:9c:9c:61:bb:
8b:04:26:69:c2:99:ed:11:f0:70:69:be:43:ff:d4:af:b4:3a:
05:82:f4:da:b7:04:e5:73:c4:da:c4:57:c0:02:08:35:a2:1a:
3b:71:18:ad:6f:73:f8:39:65:6d:8b:f7:73:cd:5d:5b:a1:94:
97:74:a7:71:25:92:4e:59:14:b2:bf:6a:d2:8c:6f:a5:19:e3:
c0:d3:55:25:17:33:22:7f:57:32:99:62:e3:0a:e0:2f:a2:0c:
d4:05:ce:22:7b:d1:98:e4:13:3a:8b:a8:c9:ca:fb:0f:9d:ab:
99:b8:ff:e5:14:79:fd:27:05:7f:24:3f:93:95:86:b8:9d:a5:
02:2d:44:b6:5c:cb:31:56:00:d6:78:78:9e:78:e1:5e:12:77:
76:b7:20:0a:54:f8:e8:c4:13:f1:be:5e:17:0e:47:c6:54:4a:
50:28:01:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpFwNx54SNFhSS0qjEXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNiMzMzOTEzY2Y0MTNiYmFmZDkyNzc5MzdiMzA2MWE2
MTgxN2MwHhcNMjUwMTMxMTMwMDEyWhcNMjUwMjAxMTMwMDEyWjAzMTEwLwYDVQQD
Eyg1OWE2ZDE2NGVjYmJjZGFlYjg0MmEwZTI5YjQ5NzdkMmY0MTViM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywXtM8KO/+NkJiyQdFIiPe71uIdP
ddcqQkSYj/l1Rxu5KMLMxKtL/YimyZKma/2hEfBntwU2QGNtW5LCdrTyHzz1emXT
F4ziMCfu/SBYPnp431jTnAkv+MxwUfU8JmBk7+WsnAmdJgiQJgc5jBrUQGgaRSxC
RKuUpISQ7tiREpdPXyK3JSScyXBrDVFZj26KvBSICOQJ9tqGIGTnD16qDNSwxHmi
sEyOHzw1A8xwu40boYlyP8PpmoFkoCcug7Y9LXWXCfRGMlJmOb2fxflc/rU41+wq
mjoG+ifjaRSyaT0O8GkJtRCn0viJ8cxZmyHe/01+jIQ17COrjQZOQOjOHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmm0WTsu82uuEKg4ptJd9L0FbOwMB8GA1UdIwQY
MBaAFAgcszORPPQTu6/ZJ3k3swYaYYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMt
MzI0NzFjNTkwOGEyLzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yMDg0YzUtNGViYS00NDU3LWE4ZWMtMzI0NzFjNTkwOGEy
LzEvQ0J5ek01RTg5Qk83cjlrbmVUZXpCaHBoZ1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCTF5g62
A9SW0qnJzCB4f+k2g4J2n4mgZr20e1hDyJ7/BnBvsMtcFmZpHWc24nR9TaIVdUiF
50b9yb8ygwhxvi4KxNgdp3IJKHHmj4Oa8DM9XJosCs6cnGG7iwQmacKZ7RHwcGm+
Q//Ur7Q6BYL02rcE5XPE2sRXwAIINaIaO3EYrW9z+DllbYv3c81dW6GUl3SncSWS
TlkUsr9q0oxvpRnjwNNVJRczIn9XMpli4wrgL6IM1AXOInvRmOQTOouoycr7D52r
mbj/5RR5/ScFfyQ/k5WGuJ2lAi1EtlzLMVYA1nh4nnjhXhJ3drcgClT46MQT8b5e
Fw5HxlRKUCgB7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:13 2025 by rpki-client