Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
File: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft (raw, json)
Hash identifier: QQahyfLt+WUmEYoNUvUOKtmt1Du4WBooAr3XtUWGEBs=
Subject key identifier: CC:22:4F:75:A1:22:17:20:69:D8:A8:37:31:4A:0F:F3:3D:E7:58:EB
Authority key identifier: 6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
Certificate issuer: /CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Certificate serial: 0195E07D39075564737EA04634E677D6F4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 06:00:57 +0000
Manifest this update: Sat 29 Mar 2025 06:00:57 +0000
Manifest next update: Sun 30 Mar 2025 06:00:57 +0000
Files and hashes: 1: b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl (hash: Nfr1jTDeZ8qo7xiLe8JONIvXJlyeAvIClKISl5PYjkQ=)
2: gL_kuMaqCBJwQIMIS7ldG0BgqS0.roa (hash: aP7wklS1c2nj/ZqiWpRJ5vMpKjr7pu6Ax9+m6w/ftd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:39:07:55:64:73:7e:a0:46:34:e6:77:d6:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa104f6a8978bb16cd05314f98a786e0d0d9564
Validity
Not Before: Mar 29 06:00:57 2025 GMT
Not After : Mar 30 06:00:57 2025 GMT
Subject: CN=cc224f75a122172069d8a837314a0ff33de758eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:f4:f3:37:b5:4e:a1:ba:8a:f2:fc:68:c8:
eb:cd:c7:3c:56:e4:05:4f:92:53:83:60:cd:05:26:
74:dc:9d:df:80:d4:86:f1:0a:f7:1e:c5:58:d2:cb:
d0:df:d1:3a:cb:ec:9f:14:6b:e2:8a:d0:a5:55:13:
4c:d1:63:00:14:1c:6f:9e:26:96:2e:92:06:12:9b:
60:a3:de:ad:33:fa:5c:98:23:aa:f6:a4:5b:c8:72:
ff:67:02:8d:ba:d6:93:c9:00:7f:9e:de:de:fa:5b:
01:a3:5e:b2:b7:fb:00:e6:f6:3e:aa:51:a9:8b:9e:
df:73:a6:70:25:f2:ab:9a:08:cd:4b:03:d6:1a:01:
c5:21:e7:32:b7:bf:97:8d:26:4e:74:84:16:af:2e:
21:b7:1c:dc:86:24:b4:3e:a2:7d:cd:e9:fe:65:02:
ed:0d:b6:e4:8a:83:ab:f7:87:58:0e:e1:7f:2c:9b:
13:99:ee:52:b6:6e:cf:e0:88:ef:f4:05:14:2b:d2:
9f:d0:2d:7d:b1:8e:83:78:cf:11:f2:d5:f0:7f:78:
63:1e:56:04:6d:7c:29:7c:df:05:4e:23:c0:07:b1:
89:db:cd:4d:e4:56:86:36:32:1b:c2:df:2c:e2:86:
44:26:02:ac:01:6c:bd:22:df:8b:d7:6e:14:cd:b3:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:4F:75:A1:22:17:20:69:D8:A8:37:31:4A:0F:F3:3D:E7:58:EB
X509v3 Authority Key Identifier:
keyid:6F:A1:04:F6:A8:97:8B:B1:6C:D0:53:14:F9:8A:78:6E:0D:0D:95:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/b6EE9qiXi7Fs0FMU-Yp4bg0NlWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2c:c3:02:d6:95:90:5e:0f:01:77:ab:7b:07:6f:73:f8:b8:
fe:2f:82:46:73:1a:f9:46:fa:73:49:17:59:77:dc:14:2d:a0:
a2:28:84:bb:57:47:b2:f5:cb:93:d4:f9:62:ca:e3:32:e2:02:
e1:93:99:98:dc:23:28:bf:eb:03:5d:22:f5:0f:3e:30:d6:92:
af:17:68:8b:33:9b:a6:a9:ab:ee:de:30:e5:47:c2:c0:12:9d:
8f:e8:ae:fd:d6:55:cf:5b:c3:f2:c5:69:51:67:61:84:f5:ce:
e8:46:ba:77:8c:ab:76:5d:ae:de:5c:6e:07:20:74:c4:4f:f3:
ec:4c:0a:98:6c:75:d5:7c:a6:fe:d8:18:e9:79:9b:ea:18:c0:
ea:b9:38:56:bb:fb:63:2f:26:27:1a:a3:c8:e0:f6:67:af:22:
72:43:4e:83:62:62:6e:fe:66:05:b5:61:2d:12:bd:25:0d:f3:
e1:0c:cb:a6:6b:91:7c:d4:24:59:b6:3a:34:04:b3:5c:66:d7:
db:9d:f9:6a:a0:18:c5:90:e3:ac:4e:87:af:21:be:d0:07:b7:
fe:94:d0:92:55:3b:b6:11:ac:f6:e7:de:67:81:81:df:51:71:
79:4f:d8:27:c1:60:42:1a:ab:7f:09:4b:52:8d:b9:4a:d8:cc:
fb:26:f7:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfTkHVWRzfqBGNOZ31vT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTEwNGY2YTg5NzhiYjE2Y2QwNTMxNGY5OGE3ODZlMGQw
ZDk1NjQwHhcNMjUwMzI5MDYwMDU3WhcNMjUwMzMwMDYwMDU3WjAzMTEwLwYDVQQD
EyhjYzIyNGY3NWExMjIxNzIwNjlkOGE4MzczMTRhMGZmMzNkZTc1OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+b08ze1TqG6ivL8aMjrzcc8VuQF
T5JTg2DNBSZ03J3fgNSG8Qr3HsVY0svQ39E6y+yfFGviitClVRNM0WMAFBxvniaW
LpIGEptgo96tM/pcmCOq9qRbyHL/ZwKNutaTyQB/nt7e+lsBo16yt/sA5vY+qlGp
i57fc6ZwJfKrmgjNSwPWGgHFIecyt7+XjSZOdIQWry4htxzchiS0PqJ9zen+ZQLt
DbbkioOr94dYDuF/LJsTme5Stm7P4Ijv9AUUK9Kf0C19sY6DeM8R8tXwf3hjHlYE
bXwpfN8FTiPAB7GJ281N5FaGNjIbwt8s4oZEJgKsAWy9It+L124UzbOqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwiT3WhIhcgadioNzFKD/M951jrMB8GA1UdIwQY
MBaAFG+hBPaol4uxbNBTFPmKeG4NDZVkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt
NjUwOWNiNWYyN2Y4LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4
LzEvYjZFRTlxaVhpN0ZzMEZNVS1ZcDRiZzBObFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSzDAtaV
kF4PAXerewdvc/i4/i+CRnMa+Ub6c0kXWXfcFC2goiiEu1dHsvXLk9T5YsrjMuIC
4ZOZmNwjKL/rA10i9Q8+MNaSrxdoizObpqmr7t4w5UfCwBKdj+iu/dZVz1vD8sVp
UWdhhPXO6Ea6d4yrdl2u3lxuByB0xE/z7EwKmGx11Xym/tgY6Xmb6hjA6rk4Vrv7
Yy8mJxqjyOD2Z68ickNOg2Jibv5mBbVhLRK9JQ3z4QzLpmuRfNQkWbY6NASzXGbX
2535aqAYxZDjrE6HryG+0Ae3/pTQklU7thGs9ufeZ4GB31FxeU/YJ8FgQhqrfwlL
Uo25StjM+yb3ZA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:51 2025 by rpki-client