Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: APMZrpKSgHzPpJEsPZDMqeDRzeoCv0dYB4kBBt3BUjY=
Subject key identifier: B2:11:E6:7F:CA:F4:03:CE:E1:3F:84:AE:58:BC:06:96:48:FB:59:E1
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 0194BCE0AF012FC08F44AB7C287A67686CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 0FA2
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: RRd7s1KJBB0+gBgq8izQ3CCQfw/nHkNwbARk58bIUtc=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:01:2f:c0:8f:44:ab:7c:28:7a:67:68:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=b211e67fcaf403cee13f84ae58bc069648fb59e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:1e:39:ed:1e:f4:18:e1:36:1f:ea:f1:ef:
e1:40:92:24:c5:88:92:61:01:ae:ed:ab:8f:11:72:
78:31:be:64:2f:5f:e4:b6:f2:2f:74:57:30:a5:87:
00:7e:be:71:28:36:36:cd:92:cc:5c:30:13:2f:ad:
2c:d0:8c:8f:7b:d8:23:86:a3:44:b3:47:9f:20:72:
ca:1a:09:fa:9c:49:52:f9:a4:2a:d5:60:a2:76:16:
fe:49:7e:8c:3a:b7:fd:2d:c0:38:d9:d8:11:2a:c8:
63:d0:a7:4b:c2:c1:89:aa:2e:90:68:ab:44:59:01:
53:93:4a:3b:f8:25:b8:ea:5e:ce:48:50:dc:d7:77:
c3:00:08:1d:bc:26:88:05:b8:47:2b:32:55:56:71:
51:f6:f0:91:17:17:40:86:d7:5f:d3:97:51:35:c9:
0b:ab:8c:83:3a:95:26:60:b7:77:96:2e:15:56:c9:
c3:cc:50:67:39:22:67:cc:74:17:fa:80:fc:b0:e1:
f9:e8:31:e9:4c:dc:d4:7b:be:89:01:82:a3:a4:37:
4d:27:20:b7:a8:a3:d6:fc:82:ac:80:d4:84:66:39:
bf:70:5b:51:bb:d3:da:4f:e8:be:de:8d:39:b6:76:
79:20:ef:3f:87:28:bc:73:e2:85:3f:47:ba:57:75:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:11:E6:7F:CA:F4:03:CE:E1:3F:84:AE:58:BC:06:96:48:FB:59:E1
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a4:1d:3a:11:ae:2f:f8:20:55:88:c6:bd:b1:68:0f:65:ee:
d6:f9:c4:1c:bb:1a:6c:51:60:51:a1:48:5f:af:cd:26:bf:af:
d6:c5:80:d5:22:04:84:51:d2:eb:d3:a4:e1:8d:a9:c9:18:04:
65:35:c6:45:27:d3:68:41:aa:b5:ab:7d:85:65:ca:a7:83:1c:
a3:ca:07:bb:ba:fa:cf:14:7f:54:f7:11:3c:6e:5c:21:14:74:
47:9b:82:79:95:95:8c:f4:c4:4e:29:fb:49:de:6e:fd:fe:84:
cf:82:6b:7f:02:f3:c6:72:20:e6:3d:10:d5:f7:8a:3e:78:dd:
53:7b:66:fe:c0:48:74:e4:50:7d:b5:67:48:64:a0:6b:ef:e0:
cd:30:4d:e5:db:94:79:ae:1e:d6:6f:8a:08:14:70:ef:2c:12:
15:96:f3:2f:00:55:77:dc:28:44:7c:5f:5c:f3:6b:df:b0:53:
c6:e4:7d:be:e5:84:29:99:3d:45:4c:25:d1:bc:c2:60:39:ae:
79:2d:a3:e9:06:79:fa:2b:f3:65:9d:4d:78:5a:b3:bd:c5:3c:
1b:50:89:8f:e8:63:4d:2f:ec:c1:67:fb:00:90:bf:b5:2c:b0:
35:7b:9a:6e:ec:66:aa:3e:b9:2c:bc:3a:85:06:d2:be:b1:ba:
af:bc:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:22 2025 by rpki-client