Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: WjDbomprXooHScRXSFCONNO7CgdLxZCf0xk5XPz2Vho=
Subject key identifier: 85:BE:C0:A9:4D:BE:E4:1D:FB:80:9D:EE:8F:DA:E0:36:6B:4F:21:8E
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 0195E159D9BB640ADC50B86CAD5E08A3B317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1411
Signing time: Sat 29 Mar 2025 10:01:56 +0000
Manifest this update: Sat 29 Mar 2025 10:01:56 +0000
Manifest next update: Sun 30 Mar 2025 10:01:56 +0000
Files and hashes: 1: 5fp4REhZrqUt_jGwUghdFogNJ4s.roa (hash: XHIsP9GAsLpSqaROasGsDdk80cNjcNRUOKOHhRVGrsU=)
2: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: IRi95LDcyj5XeUrAiR9QJDpBq8SWndvc7djAYrObSN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:d9:bb:64:0a:dc:50:b8:6c:ad:5e:08:a3:b3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Mar 29 10:01:56 2025 GMT
Not After : Mar 30 10:01:56 2025 GMT
Subject: CN=85bec0a94dbee41dfb809dee8fdae0366b4f218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:98:ee:ca:aa:d8:60:a9:fb:c2:57:ae:73:
d7:2d:7f:c9:5a:4d:71:40:e0:59:f1:80:b8:37:43:
3b:73:df:3b:07:66:5d:30:2a:02:df:d0:ed:b5:41:
2e:19:8a:e1:6b:b8:c6:2f:5e:c0:95:0d:91:d5:01:
b9:69:c5:bd:e8:8d:ea:4e:98:05:7e:21:35:0d:f3:
bd:15:dc:bf:a7:8b:a9:09:64:9f:af:ac:e0:68:45:
8f:4c:9d:61:5f:37:e8:93:3f:54:bb:37:6a:22:d6:
77:04:31:b7:bc:cb:69:66:67:50:0f:b0:c3:bf:d4:
76:5c:ea:05:16:71:e5:45:cd:ad:71:31:37:65:ad:
17:ee:85:45:b4:3d:a2:0f:7f:7b:23:de:59:b3:c6:
f2:90:60:73:53:89:b0:bf:48:4e:95:b2:bd:66:81:
ab:19:7d:10:0e:ae:5c:f3:e8:b4:7c:08:2c:f8:53:
fd:53:47:10:51:03:5d:c7:fa:6e:44:bc:50:b0:23:
96:fd:db:18:71:2f:b6:67:26:e6:c4:ec:f5:4c:a0:
62:29:15:a4:4a:84:4a:b2:06:b1:32:d3:5a:ba:5c:
9f:93:eb:29:35:24:97:fe:57:15:a9:98:90:e9:1e:
16:05:40:62:82:1a:05:06:44:84:5e:66:82:6c:60:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:C0:A9:4D:BE:E4:1D:FB:80:9D:EE:8F:DA:E0:36:6B:4F:21:8E
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:4c:42:b4:0d:4a:d4:85:d5:8e:c2:6a:80:bf:f8:d7:43:
43:5c:b8:fe:15:63:cd:1f:50:95:af:6e:af:fa:73:4c:51:0c:
df:78:ef:04:ee:4e:82:43:92:69:ff:e2:53:e3:40:89:7a:df:
aa:0a:9b:9f:40:54:26:8c:5a:5a:21:5a:47:3d:32:ca:07:fc:
ec:e4:f0:8d:3b:c4:3f:a2:61:e3:78:69:a6:3c:3f:e5:82:dd:
44:99:3a:1e:bd:4d:b9:a4:6e:4c:77:47:ad:59:3b:2a:12:52:
fc:28:9c:6f:90:70:55:ba:f3:04:0b:30:72:8b:7a:dc:fd:10:
82:aa:91:ee:e7:d6:e6:b3:25:54:87:8e:f2:78:14:53:b2:4e:
c0:67:1e:dc:12:96:bb:3b:a8:62:83:88:11:a3:27:00:f6:96:
37:fe:21:18:5c:a7:82:0b:e0:0a:97:2d:bc:98:12:fc:0a:ef:
f3:7a:26:eb:40:d0:c7:db:b0:71:09:65:5f:f8:2e:02:43:62:
16:d4:2a:35:cd:f1:8c:04:45:2d:76:af:2a:7b:30:ec:27:bd:
5d:ec:b4:e5:34:93:95:86:07:d7:c9:90:2a:c4:d5:37:51:cb:
f8:cd:4e:57:28:10:21:19:d7:41:38:85:94:a0:45:d2:2e:fd:
a4:67:89:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWdm7ZArcULhsrV4Io7MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2
OWE0NWYwHhcNMjUwMzI5MTAwMTU2WhcNMjUwMzMwMTAwMTU2WjAzMTEwLwYDVQQD
Eyg4NWJlYzBhOTRkYmVlNDFkZmI4MDlkZWU4ZmRhZTAzNjZiNGYyMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusOY7sqq2GCp+8JXrnPXLX/JWk1x
QOBZ8YC4N0M7c987B2ZdMCoC39DttUEuGYrha7jGL17AlQ2R1QG5acW96I3qTpgF
fiE1DfO9Fdy/p4upCWSfr6zgaEWPTJ1hXzfokz9UuzdqItZ3BDG3vMtpZmdQD7DD
v9R2XOoFFnHlRc2tcTE3Za0X7oVFtD2iD397I95Zs8bykGBzU4mwv0hOlbK9ZoGr
GX0QDq5c8+i0fAgs+FP9U0cQUQNdx/puRLxQsCOW/dsYcS+2ZybmxOz1TKBiKRWk
SoRKsgaxMtNaulyfk+spNSSX/lcVqZiQ6R4WBUBighoFBkSEXmaCbGACXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW+wKlNvuQd+4Cd7o/a4DZrTyGOMB8GA1UdIwQY
MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt
YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw
LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgFMQrQN
StSF1Y7CaoC/+NdDQ1y4/hVjzR9Qla9ur/pzTFEM33jvBO5OgkOSaf/iU+NAiXrf
qgqbn0BUJoxaWiFaRz0yygf87OTwjTvEP6Jh43hppjw/5YLdRJk6Hr1NuaRuTHdH
rVk7KhJS/Cicb5BwVbrzBAswcot63P0QgqqR7ufW5rMlVIeO8ngUU7JOwGce3BKW
uzuoYoOIEaMnAPaWN/4hGFynggvgCpctvJgS/Arv83om60DQx9uwcQllX/guAkNi
FtQqNc3xjARFLXavKnsw7Ce9Xey05TSTlYYH18mQKsTVN1HL+M1OVygQIRnXQTiF
lKBF0i79pGeJOw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:12:19 2025 by rpki-client