Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: Tm8u4CLUBhP53HJgzS43bwdIrGWc9cKomdyH4S+k+oQ=
Subject key identifier: 0C:9C:15:4B:D3:3D:33:62:8F:2F:1D:B3:95:75:13:0D:38:68:36:58
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0195DFD970270D34FC1D33257285CBDCEE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0DCF
Signing time: Sat 29 Mar 2025 03:02:03 +0000
Manifest this update: Sat 29 Mar 2025 03:02:03 +0000
Manifest next update: Sun 30 Mar 2025 03:02:03 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: bLclNBsuF2oQiimCjgonH3oYDu2VMXc18l35mdqLCTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:70:27:0d:34:fc:1d:33:25:72:85:cb:dc:ee:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Mar 29 03:02:03 2025 GMT
Not After : Mar 30 03:02:03 2025 GMT
Subject: CN=0c9c154bd33d33628f2f1db39575130d38683658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:f8:38:60:38:a4:c5:9a:ed:45:54:e2:4e:
a8:95:92:62:5f:d0:c4:22:f6:c9:b4:19:06:d0:fc:
0f:17:c0:6c:93:86:9a:89:62:f1:ef:c2:4c:09:70:
86:5c:de:7f:2c:fd:52:d5:ce:1b:b8:ed:5f:2c:8e:
ee:4a:91:f4:3e:5f:94:bf:65:05:b8:0c:89:fa:6f:
e0:37:41:37:36:2e:38:65:c7:b3:7d:ea:3c:73:54:
15:e5:c6:83:7a:00:16:70:ba:a9:d3:5d:25:94:46:
81:fd:9b:ef:c9:9c:6f:1d:1c:d8:60:be:7e:a3:64:
82:f2:5e:f7:88:80:23:45:42:81:cb:c4:44:fd:a8:
96:96:a6:d4:1e:4e:93:6e:c5:63:1c:bb:83:af:3b:
fc:3b:56:be:3c:8b:88:49:6f:83:44:a2:d4:d1:92:
a5:60:fd:bf:c2:cf:4b:5e:97:c1:51:1c:e1:5c:9b:
db:87:77:49:39:da:e7:c3:f3:17:48:c5:f8:80:c0:
9b:22:92:2a:9f:ac:bd:0b:e8:83:be:b2:a1:cd:b1:
99:ef:ab:e1:10:91:42:47:c4:4b:6f:c9:6e:bd:27:
19:53:12:97:03:55:b8:11:52:6a:55:f2:e3:06:f4:
e9:cf:5a:93:f8:40:4d:7e:33:6f:af:b3:5b:2a:4c:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9C:15:4B:D3:3D:33:62:8F:2F:1D:B3:95:75:13:0D:38:68:36:58
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:32:00:09:81:3e:92:d2:f7:bf:75:9d:23:29:9b:d1:05:
bb:bb:46:9c:4d:19:ce:f2:3e:fc:a9:da:f5:82:b7:9a:13:4e:
b8:0c:e7:75:21:d3:20:1a:ae:3f:0e:24:d6:87:5c:9e:b9:7a:
2b:68:44:07:8c:9e:9c:e9:ff:ef:59:5a:54:25:77:42:06:92:
8b:48:71:4b:f4:ec:e8:0d:4c:8d:75:d5:b8:a4:f7:a8:e4:fa:
3c:c9:23:0c:31:c6:1d:ce:be:6f:c6:98:b4:b3:7e:93:88:7a:
6b:70:7e:e1:23:2d:b0:4b:0f:3e:4f:62:ec:15:f7:f5:75:03:
7a:0d:0f:f7:cb:c9:c4:28:d5:9d:9f:07:91:be:c0:79:68:54:
9f:ad:c1:db:e4:a0:f1:df:dc:3e:95:f2:59:63:c1:f9:f9:3a:
64:bd:70:48:b5:18:3c:85:70:d4:f9:77:c0:3a:79:dd:f4:bc:
90:5b:b7:ea:bd:80:eb:4c:1d:45:7a:8c:67:b5:f7:eb:df:6d:
d5:5c:dc:4d:22:00:c4:f0:bd:a2:29:83:16:40:b9:63:e7:aa:
59:77:1d:58:09:39:87:d8:7f:86:0a:26:3d:0b:87:c6:71:b0:
49:96:c6:51:11:34:bb:4d:c8:8b:f3:58:0f:11:29:9a:d3:9d:
30:54:bd:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2XAnDTT8HTMlcoXL3O5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5
ZjdjZTcwHhcNMjUwMzI5MDMwMjAzWhcNMjUwMzMwMDMwMjAzWjAzMTEwLwYDVQQD
EygwYzljMTU0YmQzM2QzMzYyOGYyZjFkYjM5NTc1MTMwZDM4NjgzNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxT4OGA4pMWa7UVU4k6olZJiX9DE
IvbJtBkG0PwPF8Bsk4aaiWLx78JMCXCGXN5/LP1S1c4buO1fLI7uSpH0Pl+Uv2UF
uAyJ+m/gN0E3Ni44Zcezfeo8c1QV5caDegAWcLqp010llEaB/ZvvyZxvHRzYYL5+
o2SC8l73iIAjRUKBy8RE/aiWlqbUHk6TbsVjHLuDrzv8O1a+PIuISW+DRKLU0ZKl
YP2/ws9LXpfBURzhXJvbh3dJOdrnw/MXSMX4gMCbIpIqn6y9C+iDvrKhzbGZ76vh
EJFCR8RLb8luvScZUxKXA1W4EVJqVfLjBvTpz1qT+EBNfjNvr7NbKkxVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAycFUvTPTNijy8ds5V1Ew04aDZYMB8GA1UdIwQY
MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt
MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk
LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8IyAAmB
PpLS9791nSMpm9EFu7tGnE0ZzvI+/Kna9YK3mhNOuAzndSHTIBquPw4k1odcnrl6
K2hEB4yenOn/71laVCV3QgaSi0hxS/Ts6A1MjXXVuKT3qOT6PMkjDDHGHc6+b8aY
tLN+k4h6a3B+4SMtsEsPPk9i7BX39XUDeg0P98vJxCjVnZ8Hkb7AeWhUn63B2+Sg
8d/cPpXyWWPB+fk6ZL1wSLUYPIVw1Pl3wDp53fS8kFu36r2A60wdRXqMZ7X3699t
1VzcTSIAxPC9oimDFkC5Y+eqWXcdWAk5h9h/hgomPQuHxnGwSZbGURE0u03Ii/NY
DxEpmtOdMFS9+A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:34:12 2025 by rpki-client