Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: 8w9vkUTeA/SWXKsTI4MmF4nfpWfskjaerlYUDk59f1s=
Subject key identifier: BA:5B:CC:99:78:DD:AA:1A:E1:58:0B:3D:DA:3F:DF:E4:C9:29:D4:01
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 01962E2AE75B1AA48B197763EEE2308F5DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 0DF9
Signing time: Sun 13 Apr 2025 08:01:25 +0000
Manifest this update: Sun 13 Apr 2025 08:01:25 +0000
Manifest next update: Mon 14 Apr 2025 08:01:25 +0000
Files and hashes: 1: PBeiTxVVl13KulRPara1RXYVicA.roa (hash: RXsTBTBPcZfgBdF/8hAfnipircCVtF7KKV+ZAN7eFr0=)
2: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: +P8E/4fcvHML9L8nfucnXXHFoyl693aihPV4hZ+HJ8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:e7:5b:1a:a4:8b:19:77:63:ee:e2:30:8f:5d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Apr 13 08:01:25 2025 GMT
Not After : Apr 14 08:01:25 2025 GMT
Subject: CN=ba5bcc9978ddaa1ae1580b3dda3fdfe4c929d401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:14:26:bd:37:73:c0:a4:de:75:c6:7c:b9:
6a:e7:2e:55:3e:51:07:00:70:20:c3:7b:f7:50:34:
2c:1a:29:a6:de:51:a8:fa:3b:8a:58:6e:85:92:c1:
b5:fe:8f:b2:b5:24:e0:a0:f8:46:d2:87:c9:90:2f:
eb:33:60:08:57:6a:83:fe:77:ec:61:06:3f:98:87:
6a:02:79:06:85:06:14:e5:a4:9e:ee:9e:3e:5c:7c:
51:95:33:4c:7b:49:82:91:95:85:32:97:9b:36:c8:
ed:37:fc:94:19:c8:86:c0:e8:b0:1e:3c:c3:e3:f0:
89:b6:f7:c4:60:57:0c:ed:25:90:63:6e:f3:74:7e:
1e:c1:43:41:8a:bd:51:06:cb:24:6a:b1:01:7b:72:
b4:7b:f8:82:9d:9a:70:52:3b:00:a1:52:42:29:e9:
a8:ff:30:f8:7a:75:e2:ba:4f:3d:9c:e2:52:41:5a:
9a:bb:4a:04:20:63:23:c4:74:05:41:c6:16:a9:a1:
6f:ac:01:72:f7:41:d3:86:b6:9e:3a:e5:0f:55:3f:
71:88:5f:3b:43:fd:3f:24:8c:77:61:d5:45:22:c7:
7f:dd:06:85:97:e4:69:07:03:9b:2b:d8:b5:d4:e0:
c3:c5:c8:20:18:3f:61:e8:6b:47:71:58:72:38:74:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:CC:99:78:DD:AA:1A:E1:58:0B:3D:DA:3F:DF:E4:C9:29:D4:01
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:db:b8:a2:f1:18:cb:c8:11:99:75:20:c0:99:70:e2:78:ff:
79:e2:89:58:09:18:12:c8:1d:1d:e1:ec:5a:7c:61:0a:cc:61:
c1:a1:98:69:0e:39:74:a9:43:f1:ee:45:a4:da:c9:47:23:16:
9b:07:6f:8e:ee:a1:37:ed:38:74:8e:9c:68:d0:44:f6:8f:94:
4c:4e:c2:9e:e6:65:db:20:72:fd:4d:aa:d4:f1:06:3b:c1:77:
8b:50:a8:5c:ba:bc:bb:af:81:a9:a8:c1:27:f8:f6:98:71:18:
cb:31:5d:e3:a6:5f:b6:87:62:27:15:e9:d7:2a:d8:1e:fc:05:
20:e5:81:fd:f4:b3:c5:86:29:58:a6:0e:bb:e3:0e:35:e8:81:
92:5f:2e:c6:4c:e4:de:77:5a:d6:ee:80:a1:e0:b0:c0:de:d8:
6c:bd:80:12:4e:48:e0:0d:4d:93:e4:99:32:b9:67:d7:53:6c:
9b:b9:ea:91:34:37:a5:84:18:75:c0:6b:21:8c:4a:3c:c6:24:
1e:5d:ba:ca:4a:ba:18:51:bd:3f:16:0a:45:3c:fd:45:7d:44:
57:92:bf:fa:cd:0a:75:d3:6f:b5:85:06:30:3d:2c:bc:9e:11:
7c:0a:11:6d:47:5b:16:3e:5c:d3:7c:89:65:05:a0:e9:74:c9:
d1:0c:b1:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKudbGqSLGXdj7uIwj13rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGQ0MDUyZTBmYzc2NTM2MzYxY2JiZGM3NzUwODc3ZGRm
MzYwYWQwHhcNMjUwNDEzMDgwMTI1WhcNMjUwNDE0MDgwMTI1WjAzMTEwLwYDVQQD
EyhiYTViY2M5OTc4ZGRhYTFhZTE1ODBiM2RkYTNmZGZlNGM5MjlkNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSIUJr03c8Ck3nXGfLlq5y5VPlEH
AHAgw3v3UDQsGimm3lGo+juKWG6FksG1/o+ytSTgoPhG0ofJkC/rM2AIV2qD/nfs
YQY/mIdqAnkGhQYU5aSe7p4+XHxRlTNMe0mCkZWFMpebNsjtN/yUGciGwOiwHjzD
4/CJtvfEYFcM7SWQY27zdH4ewUNBir1RBsskarEBe3K0e/iCnZpwUjsAoVJCKemo
/zD4enXiuk89nOJSQVqau0oEIGMjxHQFQcYWqaFvrAFy90HThraeOuUPVT9xiF87
Q/0/JIx3YdVFIsd/3QaFl+RpBwObK9i11ODDxcggGD9h6GtHcVhyOHTdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpbzJl43aoa4VgLPdo/3+TJKdQBMB8GA1UdIwQY
MBaAFG3dQFLg/HZTY2HLvcd1CHfd82CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQt
YmE3YjFmMzc2OWUzLzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85MjM0NDgtMzAyNy00OTQxLTk4YTQtYmE3YjFmMzc2OWUz
LzEvYmQxQVV1RDhkbE5qWWN1OXgzVUlkOTN6WUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotu4ovEY
y8gRmXUgwJlw4nj/eeKJWAkYEsgdHeHsWnxhCsxhwaGYaQ45dKlD8e5FpNrJRyMW
mwdvju6hN+04dI6caNBE9o+UTE7CnuZl2yBy/U2q1PEGO8F3i1CoXLq8u6+BqajB
J/j2mHEYyzFd46ZftodiJxXp1yrYHvwFIOWB/fSzxYYpWKYOu+MONeiBkl8uxkzk
3nda1u6AoeCwwN7YbL2AEk5I4A1Nk+SZMrln11Nsm7nqkTQ3pYQYdcBrIYxKPMYk
Hl26ykq6GFG9PxYKRTz9RX1EV5K/+s0KddNvtYUGMD0svJ4RfAoRbUdbFj5c03yJ
ZQWg6XTJ0QyxDg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:34 2025 by rpki-client on console.sobornost.net