Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
File: pBJSjGnbX8XLrtdMsi5EorzkRa0.mft (raw, json)
Hash identifier: MQ0pg5KfgZnTEI/Jof/xmB9hKKpaCLzHRwpH/j7dNDM=
Subject key identifier: 1E:7C:03:C3:32:C8:FD:0A:8A:A1:FF:4B:EA:EA:50:07:01:AA:CC:AE
Authority key identifier: A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
Certificate issuer: /CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Certificate serial: 08542A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
Manifest number: 08E0
Signing time: Wed 06 Apr 2022 07:29:41 +0000
Manifest this update: Wed 06 Apr 2022 07:29:41 +0000
Manifest next update: Thu 07 Apr 2022 07:29:41 +0000
Files and hashes: 1: 7BaWAPl1tUdH_l8fakwo6AeO9lI.roa (hash: JoDL/MUfs5QWe3LB4lqvVl3J1Wke4QdFkIJVMpzp4Ws=)
2: 8DkTlraASMCoLZT4sb5RyT_25_8.roa (hash: bBpN11P80K7Dj+6WYz8wa7YLMazDZ46pCD7YjVEebEg=)
3: BWTEUzAuHhqblErD8yx64q9mkvQ.roa (hash: RYYUEkJ5BU2V8fSvdGo9IfTPoI7qDzzZF3W027f9+uk=)
4: SXAe0-njcpesZABdss4vmlLoWR0.roa (hash: Jl+ZfCwDhTvCApI7PWbXFczf5X7TKuRt16GwYHbZva0=)
5: pBJSjGnbX8XLrtdMsi5EorzkRa0.crl (hash: 4Xz0c5XYGui+/ZH3Eww2VDFlWYfO1olcF7XpaRK5k3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139733617 (0x8542a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a412528c69db5fc5cbaed74cb22e44a2bce445ad
Validity
Not Before: Apr 6 07:29:41 2022 GMT
Not After : Apr 7 07:29:41 2022 GMT
Subject: CN=1e7c03c332c8fd0a8aa1ff4beaea500701aaccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:bc:ec:67:b7:ac:04:07:af:38:de:d7:31:
06:90:10:6a:e8:80:ad:50:8a:7a:76:ab:6f:ae:9b:
e9:d2:52:96:27:2b:4c:80:05:3e:92:f2:f0:8f:41:
a8:72:ec:00:d2:68:3f:9d:8d:88:2f:d0:e6:90:4a:
42:a3:b8:24:35:fa:80:d9:d0:27:4d:bb:79:06:57:
0b:d4:bc:1e:ae:6e:90:5b:a9:0b:be:8d:66:73:5a:
ca:1d:89:39:97:9d:07:22:5f:e4:5f:a8:27:20:f6:
1c:38:3f:8f:be:0b:38:ed:f6:88:a5:9f:21:48:3c:
7d:dc:b3:7e:4d:32:cb:79:43:02:e8:6b:6d:f2:3f:
3f:ac:d8:ad:10:01:52:4b:ee:76:a0:84:91:e6:70:
8c:ef:52:c3:e5:bb:7f:c3:f4:65:fd:32:c3:76:81:
5a:4b:73:90:f8:64:99:bd:b9:27:75:20:dd:52:05:
82:ef:0f:28:4b:f2:60:fd:9f:de:3c:21:16:c0:d8:
1c:67:c8:78:7f:50:16:15:21:25:2b:fc:42:d8:c6:
52:f3:46:9e:0f:94:d4:6c:ad:23:15:d0:5a:9b:73:
0e:80:39:84:b6:50:c3:7d:66:13:00:e7:ef:1a:cf:
90:11:89:06:23:71:fb:cd:55:d7:c9:67:eb:1d:d5:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:03:C3:32:C8:FD:0A:8A:A1:FF:4B:EA:EA:50:07:01:AA:CC:AE
X509v3 Authority Key Identifier:
keyid:A4:12:52:8C:69:DB:5F:C5:CB:AE:D7:4C:B2:2E:44:A2:BC:E4:45:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBJSjGnbX8XLrtdMsi5EorzkRa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/eeafdb-4708-409f-a953-24302c556ce9/1/pBJSjGnbX8XLrtdMsi5EorzkRa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:39:2a:50:d1:0c:9f:d4:ac:3c:af:f5:4f:b4:db:41:7b:
13:c9:43:f0:72:14:25:e6:b0:4c:ff:40:66:3c:b0:46:e1:48:
7e:fa:13:45:73:d1:1e:52:f4:f7:a8:71:a5:19:22:13:f1:cf:
40:68:33:c5:2a:e3:f3:ea:fa:3b:63:95:de:51:05:a7:46:91:
16:40:5e:94:22:cc:46:48:33:03:e1:ad:c6:66:8b:2a:ee:8f:
b5:37:b1:e7:97:27:59:82:ac:28:4d:66:44:42:8b:0c:cc:8b:
d4:15:4f:8d:01:fe:09:b5:ab:00:f1:97:bd:c3:4e:74:25:49:
ab:32:3c:01:9e:cf:f9:76:cd:c6:1d:65:77:7a:d1:a0:37:83:
ac:0a:e4:98:c7:50:df:7a:e9:1d:78:79:3c:c3:68:fc:c1:f0:
ab:d8:30:7f:1e:ed:35:2f:d0:7d:2b:2f:32:be:44:4f:1e:b0:
61:24:44:1a:40:1f:db:ef:48:4e:90:2b:8c:8e:70:71:f8:10:
b5:d5:d7:a4:0e:c9:f5:76:18:cf:59:cd:aa:bb:2e:05:db:92:
d9:0c:9a:25:93:99:21:f7:32:f4:be:65:11:39:e3:75:ad:90:
d2:76:90:e9:2d:e6:8c:f5:2c:93:7d:50:d3:a6:87:0e:8c:94:
d7:d1:89:4c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECFQqcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NDEyNTI4YzY5ZGI1ZmM1Y2JhZWQ3NGNiMjJlNDRhMmJjZTQ0NWFkMB4XDTIyMDQw
NjA3Mjk0MVoXDTIyMDQwNzA3Mjk0MVowMzExMC8GA1UEAxMoMWU3YzAzYzMzMmM4
ZmQwYThhYTFmZjRiZWFlYTUwMDcwMWFhY2NhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIdjvOxnt6wEB6843tcxBpAQauiArVCKenarb66b6dJSlicr
TIAFPpLy8I9BqHLsANJoP52NiC/Q5pBKQqO4JDX6gNnQJ027eQZXC9S8Hq5ukFup
C76NZnNayh2JOZedByJf5F+oJyD2HDg/j74LOO32iKWfIUg8fdyzfk0yy3lDAuhr
bfI/P6zYrRABUkvudqCEkeZwjO9Sw+W7f8P0Zf0yw3aBWktzkPhkmb25J3Ug3VIF
gu8PKEvyYP2f3jwhFsDYHGfIeH9QFhUhJSv8QtjGUvNGng+U1GytIxXQWptzDoA5
hLZQw31mEwDn7xrPkBGJBiNx+81V18ln6x3VkQsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQefAPDMsj9Coqh/0vq6lAHAarMrjAfBgNVHSMEGDAWgBSkElKMadtfxcuu
10yyLkSivORFrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BCSlNqR25iWDhYTHJ0ZE1zaTVFb3J6a1JhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvZWVhZmRiLTQ3MDgtNDA5Zi1hOTUzLTI0MzAyYzU1NmNlOS8x
L3BCSlNqR25iWDhYTHJ0ZE1zaTVFb3J6a1JhMC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQv
ZWVhZmRiLTQ3MDgtNDA5Zi1hOTUzLTI0MzAyYzU1NmNlOS8xL3BCSlNqR25iWDhY
THJ0ZE1zaTVFb3J6a1JhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADkFOSpQ0Qyf1Kw8r/VPtNtBexPJ
Q/ByFCXmsEz/QGY8sEbhSH76E0Vz0R5S9PeocaUZIhPxz0BoM8Uq4/Pq+jtjld5R
BadGkRZAXpQizEZIMwPhrcZmiyruj7U3seeXJ1mCrChNZkRCiwzMi9QVT40B/gm1
qwDxl73DTnQlSasyPAGez/l2zcYdZXd60aA3g6wK5JjHUN966R14eTzDaPzB8KvY
MH8e7TUv0H0rLzK+RE8esGEkRBpAH9vvSE6QK4yOcHH4ELXV16QOyfV2GM9Zzaq7
LgXbktkMmiWTmSH3MvS+ZRE543WtkNJ2kOkt5oz1LJN9UNOmhw6MlNfRiUw=
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:54 2025 by rpki-client