Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/bbf319-15a9-40d9-beec-36a86f0d0e13/1/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.mft
File: 1bbSoKjFOOkX-5SqlnkaO-e4Bjo.mft (raw, json)
Hash identifier: 6DAAWRiQEDiIoeTJJJUimg6nGtBVJcf2H0MEIrXWjSg=
Subject key identifier: CB:54:53:C0:D9:DD:81:E3:2F:37:3D:5C:D4:19:64:55:56:48:F4:CD
Authority key identifier: D5:B6:D2:A0:A8:C5:38:E9:17:FB:94:AA:96:79:1A:3B:E7:B8:06:3A
Certificate issuer: /CN=d5b6d2a0a8c538e917fb94aa96791a3be7b8063a
Certificate serial: 0193E3F1460B2476D263F98DEC805D3B6005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/bbf319-15a9-40d9-beec-36a86f0d0e13/1/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.mft
Manifest number: 13B8
Signing time: Fri 20 Dec 2024 12:01:00 +0000
Manifest this update: Fri 20 Dec 2024 12:01:00 +0000
Manifest next update: Sat 21 Dec 2024 12:01:00 +0000
Files and hashes: 1: 1bbSoKjFOOkX-5SqlnkaO-e4Bjo.crl (hash: Ft+br3Q189VxROsp54+Ua2ifMIhUECE47z62nu5Nfd0=)
2: aqGG_EN8mx1SLaqzQYKKNy4ORm4.roa (hash: 9ycGkLi9zUex8ehHxcpydNEfJkWE8DzipYMIVVmp5tg=)
3: vfJBN6YAJ9E5jrFPbYOGoSp5GU8.roa (hash: Ov7BVgCwX/dG7TW+x2Byr6NrR8itL7FnYiz6IOzEA0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:f1:46:0b:24:76:d2:63:f9:8d:ec:80:5d:3b:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6d2a0a8c538e917fb94aa96791a3be7b8063a
Validity
Not Before: Dec 20 12:01:00 2024 GMT
Not After : Dec 21 12:01:00 2024 GMT
Subject: CN=cb5453c0d9dd81e32f373d5cd41964555648f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:35:0d:f3:5e:c5:d5:67:33:c1:22:3f:dd:
0a:15:0e:2f:4f:09:1d:40:17:4f:97:3e:f9:66:bd:
72:9d:43:f7:b6:6c:4e:bf:f0:45:d4:ca:2f:9d:ec:
5e:f9:cd:44:4e:69:d6:c7:6d:eb:c6:ce:87:0a:10:
2e:9e:45:29:63:2c:98:fb:1a:aa:70:98:22:b3:aa:
5d:13:ff:a9:dc:dd:c4:28:7a:97:39:df:65:ac:2b:
56:1c:bc:05:4d:e9:99:9d:6e:76:ff:96:d4:ad:8a:
af:2d:73:de:13:45:8c:95:fc:0f:81:43:2e:f7:27:
ea:f2:15:8b:5b:f6:5d:5b:b8:16:cf:2c:13:26:8c:
36:e7:81:7f:c2:4d:68:11:56:df:a2:c7:fb:fd:95:
54:2f:17:cd:9d:eb:a8:7c:dd:b8:3c:41:8f:67:a4:
5a:bd:71:2b:bf:48:45:7e:26:fc:04:26:89:a3:8e:
04:7c:52:22:16:39:71:8f:f8:8c:19:5b:65:0c:03:
97:e7:81:0d:7f:f3:3a:44:fd:83:53:c0:a4:d4:a3:
f7:3c:f0:e6:bb:44:dd:ea:48:6e:12:af:78:b4:c1:
1d:1d:c3:d9:83:89:79:c3:e8:bc:47:d7:0c:ce:78:
48:11:e9:8d:4d:c7:d9:b0:27:8b:c9:f7:3c:1e:d4:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:53:C0:D9:DD:81:E3:2F:37:3D:5C:D4:19:64:55:56:48:F4:CD
X509v3 Authority Key Identifier:
keyid:D5:B6:D2:A0:A8:C5:38:E9:17:FB:94:AA:96:79:1A:3B:E7:B8:06:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/bbf319-15a9-40d9-beec-36a86f0d0e13/1/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/bbf319-15a9-40d9-beec-36a86f0d0e13/1/1bbSoKjFOOkX-5SqlnkaO-e4Bjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:71:4f:e5:74:c2:99:f2:53:17:98:e3:f6:de:df:30:aa:3c:
a8:90:df:22:78:3d:a2:d5:4f:48:74:d3:b5:fa:95:dd:84:13:
fd:49:2b:ed:eb:cf:62:d1:ea:74:22:33:81:0b:2d:61:82:21:
62:23:71:03:78:91:88:20:53:a2:22:93:94:cc:76:f9:fd:97:
ec:fd:aa:6e:27:10:1c:52:bf:76:da:13:5b:fc:be:b7:d1:20:
c0:09:e3:a0:ee:78:cd:01:7b:20:46:02:ee:18:fe:20:45:69:
33:fa:34:67:06:12:87:3b:bb:54:77:4b:39:1a:61:1c:21:90:
8e:55:81:a5:c5:7c:c8:29:ff:d8:32:ac:f4:8d:bf:a2:41:c9:
97:a6:9e:0f:b5:ba:50:c8:e3:88:ae:23:cf:89:53:76:6a:be:
e2:41:a2:af:80:ad:ea:5f:0e:31:d7:0d:05:01:f1:63:f5:f4:
74:4d:b4:7e:34:09:d4:5b:03:e4:a7:1a:c2:33:df:6d:a2:32:
cd:69:df:e8:40:e7:d5:f3:80:57:f8:df:2f:9f:81:b8:26:a5:
3b:c3:6e:ee:1a:22:c6:40:f1:9b:f1:a7:09:2c:f2:19:b2:e3:
e9:b5:01:0a:cf:d0:3b:d5:15:2a:61:20:53:55:06:c1:1d:e1:
2d:c6:02:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPj8UYLJHbSY/mN7IBdO2AFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjZkMmEwYThjNTM4ZTkxN2ZiOTRhYTk2NzkxYTNiZTdi
ODA2M2EwHhcNMjQxMjIwMTIwMTAwWhcNMjQxMjIxMTIwMTAwWjAzMTEwLwYDVQQD
EyhjYjU0NTNjMGQ5ZGQ4MWUzMmYzNzNkNWNkNDE5NjQ1NTU2NDhmNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJw1DfNexdVnM8EiP90KFQ4vTwkd
QBdPlz75Zr1ynUP3tmxOv/BF1Movnexe+c1ETmnWx23rxs6HChAunkUpYyyY+xqq
cJgis6pdE/+p3N3EKHqXOd9lrCtWHLwFTemZnW52/5bUrYqvLXPeE0WMlfwPgUMu
9yfq8hWLW/ZdW7gWzywTJow254F/wk1oEVbfosf7/ZVULxfNneuofN24PEGPZ6Ra
vXErv0hFfib8BCaJo44EfFIiFjlxj/iMGVtlDAOX54ENf/M6RP2DU8Ck1KP3PPDm
u0Td6khuEq94tMEdHcPZg4l5w+i8R9cMznhIEemNTcfZsCeLyfc8HtTxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtUU8DZ3YHjLzc9XNQZZFVWSPTNMB8GA1UdIwQY
MBaAFNW20qCoxTjpF/uUqpZ5GjvnuAY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJiU29LakZPT2tYLTVTcWxua2FPLWU0QmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iYmYzMTktMTVhOS00MGQ5LWJlZWMt
MzZhODZmMGQwZTEzLzEvMWJiU29LakZPT2tYLTVTcWxua2FPLWU0QmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iYmYzMTktMTVhOS00MGQ5LWJlZWMtMzZhODZmMGQwZTEz
LzEvMWJiU29LakZPT2tYLTVTcWxua2FPLWU0QmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnFP5XTC
mfJTF5jj9t7fMKo8qJDfIng9otVPSHTTtfqV3YQT/Ukr7evPYtHqdCIzgQstYYIh
YiNxA3iRiCBToiKTlMx2+f2X7P2qbicQHFK/dtoTW/y+t9EgwAnjoO54zQF7IEYC
7hj+IEVpM/o0ZwYShzu7VHdLORphHCGQjlWBpcV8yCn/2DKs9I2/okHJl6aeD7W6
UMjjiK4jz4lTdmq+4kGir4Ct6l8OMdcNBQHxY/X0dE20fjQJ1FsD5KcawjPfbaIy
zWnf6EDn1fOAV/jfL5+BuCalO8Nu7hoixkDxm/GnCSzyGbLj6bUBCs/QO9UVKmEg
U1UGwR3hLcYClA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:22 2025 by rpki-client