Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: ybg1PZXjSxXTctaeAGQxg5e2uFyYxg3RpwHfbyhvBL4=
Subject key identifier: AC:09:67:7C:C7:34:EB:47:48:31:76:B1:1A:DA:15:DB:73:30:43:32
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 0195E00F92E611E4D9D87127D77068D3A2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 14C6
Signing time: Sat 29 Mar 2025 04:01:11 +0000
Manifest this update: Sat 29 Mar 2025 04:01:11 +0000
Manifest next update: Sun 30 Mar 2025 04:01:11 +0000
Files and hashes: 1: KQDDkHaA80uZQn_bdkK5WtuD5ZQ.roa (hash: ogrDXmEHfH4q5fsZNMO7u3kh012u4hUryS0Qq72aka0=)
2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: PJ6TAgxS+Mo8dfhUxDJYk22/yEYtVntjdd+ITCAEwiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:92:e6:11:e4:d9:d8:71:27:d7:70:68:d3:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Mar 29 04:01:11 2025 GMT
Not After : Mar 30 04:01:11 2025 GMT
Subject: CN=ac09677cc734eb47483176b11ada15db73304332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:05:99:11:f5:87:db:62:64:56:15:07:f3:
0f:1c:97:07:84:76:fe:d5:5f:bd:7e:69:aa:05:b4:
bb:59:6c:f9:45:dc:fc:d5:5d:e0:75:b4:94:fc:56:
0d:60:a8:21:cc:4e:9c:9b:22:3b:ee:00:d2:3a:ba:
64:00:5a:8f:34:b9:72:bf:8f:36:5b:3e:ae:c8:36:
b7:04:91:77:b7:fa:db:4d:5c:ae:3b:7c:ed:7d:ef:
00:23:0c:9a:4c:fd:54:cc:40:2c:92:e7:a4:76:5a:
eb:fc:9f:9c:ba:b3:dd:98:36:9b:ba:fa:a7:ec:0c:
c3:4e:3a:4a:7d:1b:b6:09:19:ca:d8:c6:b6:d4:d4:
3b:39:91:b9:4e:1c:7e:4c:8b:7c:67:82:0f:26:70:
43:73:2e:39:ed:2c:21:ca:ad:d0:47:76:30:82:0c:
7e:70:b1:43:e4:36:3e:19:d3:a8:2f:e3:0e:e9:f9:
55:0f:ad:99:b7:fc:48:06:79:c8:ab:35:30:91:99:
7b:71:15:0f:99:19:22:45:c9:c4:8a:56:ae:a8:f8:
73:8d:a6:d3:d1:75:56:03:67:af:ca:44:cf:a8:66:
1b:2c:2e:0c:18:08:ea:3f:2e:93:c3:f9:9b:c9:d8:
6e:81:92:f2:9c:2f:d8:aa:8b:cf:47:3f:de:01:2c:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:67:7C:C7:34:EB:47:48:31:76:B1:1A:DA:15:DB:73:30:43:32
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:e0:44:76:c8:21:2d:6a:98:53:c3:60:9e:cd:cb:61:bb:
ac:fb:1a:9a:92:19:ec:98:66:2d:6b:df:97:0b:25:52:1f:2b:
91:07:c5:07:00:ac:02:bc:ac:9d:02:37:e7:d9:1a:c9:db:af:
f7:d5:cb:cb:05:4c:b6:e2:d6:1b:8d:26:90:e5:05:33:04:70:
10:f1:21:c9:a4:97:a2:97:a2:62:5b:49:d3:14:7f:7f:4b:66:
9d:47:77:9a:c5:a1:f1:01:0a:06:b0:0a:c0:f5:55:72:d8:b8:
95:11:a1:4d:35:2f:ae:d8:8c:18:05:75:d7:15:bc:e9:eb:64:
d2:ea:bf:a0:14:2e:76:5a:6f:32:25:6a:72:83:56:48:6c:d8:
a8:b4:45:5c:74:2e:9a:93:a2:43:87:ac:0b:6f:89:2f:e6:23:
2d:af:e8:87:86:e7:e6:1a:bb:4a:f2:fd:ec:3c:ef:9c:ff:84:
90:56:8e:d3:5a:93:16:7b:4f:46:df:d2:d7:08:7a:04:4c:3e:
70:eb:13:24:98:99:9a:51:cd:46:7a:1c:68:59:45:0f:f6:50:
fc:03:15:ee:89:95:7f:08:03:34:b6:90:20:34:31:a7:38:94:
a7:e6:d4:dc:aa:6f:c5:5a:68:16:02:4f:65:4a:4e:22:fe:5d:
fd:84:77:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5LmEeTZ2HEn13Bo06LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0
M2YxYjYwHhcNMjUwMzI5MDQwMTExWhcNMjUwMzMwMDQwMTExWjAzMTEwLwYDVQQD
EyhhYzA5Njc3Y2M3MzRlYjQ3NDgzMTc2YjExYWRhMTVkYjczMzA0MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQUFmRH1h9tiZFYVB/MPHJcHhHb+
1V+9fmmqBbS7WWz5Rdz81V3gdbSU/FYNYKghzE6cmyI77gDSOrpkAFqPNLlyv482
Wz6uyDa3BJF3t/rbTVyuO3ztfe8AIwyaTP1UzEAskuekdlrr/J+curPdmDabuvqn
7AzDTjpKfRu2CRnK2Ma21NQ7OZG5Thx+TIt8Z4IPJnBDcy457Swhyq3QR3Ywggx+
cLFD5DY+GdOoL+MO6flVD62Zt/xIBnnIqzUwkZl7cRUPmRkiRcnEilauqPhzjabT
0XVWA2evykTPqGYbLC4MGAjqPy6Tw/mbydhugZLynC/YqovPRz/eASxhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwJZ3zHNOtHSDF2sRraFdtzMEMyMB8GA1UdIwQY
MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt
Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi
LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwXgRHbI
IS1qmFPDYJ7Ny2G7rPsampIZ7JhmLWvflwslUh8rkQfFBwCsArysnQI359kayduv
99XLywVMtuLWG40mkOUFMwRwEPEhyaSXopeiYltJ0xR/f0tmnUd3msWh8QEKBrAK
wPVVcti4lRGhTTUvrtiMGAV11xW86etk0uq/oBQudlpvMiVqcoNWSGzYqLRFXHQu
mpOiQ4esC2+JL+YjLa/oh4bn5hq7SvL97DzvnP+EkFaO01qTFntPRt/S1wh6BEw+
cOsTJJiZmlHNRnocaFlFD/ZQ/AMV7omVfwgDNLaQIDQxpziUp+bU3KpvxVpoFgJP
ZUpOIv5d/YR3YA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:35 2025 by rpki-client