Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
File: Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft (raw, json)
Hash identifier: Vqzz5UrWuyE6Kj9/Zrx22YnDNZaJpIfg663TveimG8o=
Subject key identifier: A2:36:7F:EA:CC:DF:22:AF:C5:1F:3D:EE:1A:37:2C:9F:9D:48:97:0D
Authority key identifier: 0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
Certificate issuer: /CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Certificate serial: 0194BCA970E485774AF65E43CBD807E8ED73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
Manifest number: 12B3
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl (hash: xZuBgDgn2FkT/mBGD7kli10wtSeDRlN2tGrz5O+B74U=)
2: PvWxO00iUa3ctfHwCdtyJD0RWh0.roa (hash: WHY5/KEo1RVdlR9QfwLVXSmW+Ddxfbtak63Ebi49yak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:70:e4:85:77:4a:f6:5e:43:cb:d8:07:e8:ed:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1fdb80eff5bce1654ac8c6b922e781fd2d36a5
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=a2367feaccdf22afc51f3dee1a372c9f9d48970d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:5f:af:17:d9:68:bb:1a:a2:b0:0e:ea:89:
e1:b2:17:9a:d1:7f:ad:ba:24:ba:35:f0:90:9c:02:
98:24:35:06:6b:58:4d:27:a8:fb:71:da:a4:9d:29:
3a:62:b7:fa:17:c9:cd:37:11:78:3a:c4:69:74:f1:
bb:16:bf:3d:8d:02:ce:74:9d:4e:70:b0:3a:c9:7a:
c1:cd:46:77:93:ff:12:b2:8f:fe:20:50:83:b1:10:
68:45:b3:ac:f1:87:f7:a2:33:e1:02:02:16:5f:e1:
6a:1b:20:c5:e0:76:d7:75:b6:94:92:28:a7:18:eb:
7f:b8:cb:e1:21:e2:d5:15:9c:45:2a:31:32:fb:6d:
b4:ae:32:f0:7b:25:b0:c5:47:ef:79:0b:cb:62:5d:
0b:21:29:59:74:9c:31:bb:34:22:1b:ba:16:89:e7:
60:68:ce:21:17:c8:7f:c9:10:98:72:73:9f:03:cd:
56:7c:b1:6c:39:82:3b:ab:39:f7:61:4f:59:da:9f:
e7:6e:b9:cf:39:21:91:2b:96:9e:d2:e7:57:73:b8:
54:54:bc:b6:52:47:a5:f7:65:67:3a:44:61:9d:a2:
03:fe:60:3b:0d:c6:f3:92:70:ca:96:83:fe:90:5d:
66:70:8e:a8:bd:6c:ce:ad:2b:5e:32:75:44:fa:f6:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:7F:EA:CC:DF:22:AF:C5:1F:3D:EE:1A:37:2C:9F:9D:48:97:0D
X509v3 Authority Key Identifier:
keyid:0A:1F:DB:80:EF:F5:BC:E1:65:4A:C8:C6:B9:22:E7:81:FD:2D:36:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch_bgO_1vOFlSsjGuSLngf0tNqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad55e4-c0c9-4319-8bd8-04bc87a29e4d/1/Ch_bgO_1vOFlSsjGuSLngf0tNqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8c:11:d8:e5:29:67:48:cc:42:38:33:5e:45:5e:93:9e:90:
99:35:8a:5e:73:38:ec:34:95:34:cc:36:43:02:6f:56:b2:45:
81:22:fd:06:94:9b:55:c3:95:e5:3d:69:bc:9d:39:91:33:42:
01:75:f8:8e:d2:45:36:72:72:de:93:03:3d:85:69:2b:21:fc:
c1:df:9e:20:ca:ca:a7:ef:97:22:e2:66:bf:df:15:99:f4:dc:
d1:5c:36:51:d7:e0:71:77:81:a9:00:0e:56:f6:c8:86:d4:36:
40:58:0c:9e:b1:06:0d:48:c6:ef:75:24:12:b7:a8:6d:29:8f:
3c:76:a4:2f:51:ed:a9:89:6f:44:b7:34:b9:71:98:d2:45:ea:
ca:72:d3:fa:77:1d:c9:7f:bf:e0:b7:03:15:cc:77:d4:00:c5:
fd:2f:8a:de:96:fc:5e:99:b7:4c:8c:30:4e:54:bd:e1:3a:ba:
d2:ce:7a:29:a9:5d:c4:35:b2:fa:c6:4a:bb:e4:0b:57:89:82:
65:51:a2:f6:be:a2:40:b3:55:f2:6a:61:e5:3b:dc:c0:21:dc:
25:d2:0b:77:9e:6e:2a:34:63:03:5d:de:2f:80:b3:54:55:36:
ec:73:9b:0b:dd:26:d9:71:c0:d4:16:66:65:37:a7:3d:f5:51:
30:4d:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client