Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: 4ViUkag7yxlJ/1c6RgbqnooDznWuGtys/KcSfBbvPZw=
Subject key identifier: A0:78:C5:3B:7E:6A:B6:F9:A8:AA:8A:43:53:9D:55:63:2F:9F:91:1D
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 0194BCA994ACB880DC00B2313600A266F4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: g5SywD2vxHkqf5FBn3QwD2ZD+y2c2ob7kULAO0Np4DQ=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:ac:b8:80:dc:00:b2:31:36:00:a2:66:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=a078c53b7e6ab6f9a8aa8a43539d55632f9f911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:79:ad:93:65:5a:1e:96:87:33:9a:ed:40:
d7:12:e2:b8:31:8b:f3:2e:42:9d:df:b6:d8:2a:83:
39:89:7d:4e:0d:4c:56:1e:f4:b4:6d:e8:f8:7d:1e:
bc:ac:41:95:0b:59:14:c2:90:8e:52:a0:18:19:dd:
11:86:a5:82:7d:c9:40:2f:93:85:7d:13:05:13:6a:
0a:ca:4e:26:a1:f8:cc:7f:ee:8c:a6:d4:87:f6:22:
ce:ab:a2:b4:f3:1b:21:0b:5f:82:60:a5:2d:f3:a9:
c8:82:be:47:74:20:ee:2c:93:32:bb:1e:f5:4e:fe:
9b:15:e7:b2:b0:70:dc:0f:b4:e6:94:d0:8a:59:36:
24:ea:f9:25:02:2a:70:c8:f0:52:9b:0d:84:10:f8:
cc:8b:c4:5d:48:06:8c:51:19:ec:b8:a4:03:22:80:
73:54:8b:a4:9b:89:91:c3:2c:8b:20:29:b6:ba:29:
95:c6:76:bc:88:7c:4f:34:7e:1e:83:0e:c8:75:eb:
b2:a6:15:58:2a:56:91:8a:de:15:7e:2d:ea:e2:93:
f7:21:8c:95:ac:a1:2c:19:f0:1f:b9:46:32:30:80:
5f:6c:74:a5:78:ce:2b:ee:0f:62:6e:96:ec:b1:95:
d3:39:0d:ff:d9:7c:b7:af:8f:31:bf:7d:73:c5:4b:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:C5:3B:7E:6A:B6:F9:A8:AA:8A:43:53:9D:55:63:2F:9F:91:1D
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e6:38:83:eb:42:2b:cd:a4:52:2c:35:93:3a:50:9a:6a:3d:
c5:f2:61:a5:25:c4:aa:46:4d:5f:46:27:2b:9a:51:40:3b:40:
5e:88:ac:7d:22:8a:48:09:b8:04:fe:a3:89:34:82:f0:5c:2b:
4a:69:89:7a:04:3b:b5:25:5c:52:b7:9f:5b:02:46:ab:34:1e:
5a:b4:ae:ce:16:5e:4a:d7:98:21:c4:26:de:fb:01:fc:68:79:
5f:2f:93:38:b3:6d:60:69:5f:a2:eb:93:b8:99:07:9d:82:75:
89:d5:c9:cc:a4:f5:e2:c2:48:ce:84:40:78:60:d0:18:9c:e8:
a6:6c:86:49:23:22:c9:4f:d9:bc:b5:82:be:17:80:e8:2e:bf:
51:a0:00:b1:4e:de:36:d1:36:d8:c3:79:52:29:2f:fb:f1:db:
66:79:6b:98:7f:9f:0e:6b:0a:65:a0:31:ff:69:a5:72:22:ae:
01:6d:5c:82:39:81:95:25:6d:fd:4f:cd:a3:2b:46:b8:b2:9f:
69:87:69:4d:a7:b1:5b:97:5b:33:a9:29:19:3d:6d:92:46:31:
95:63:d3:31:9a:7d:b2:09:7f:75:ef:61:86:35:4a:48:f0:59:
3b:f2:4f:38:69:a7:29:0d:ff:eb:ef:d9:eb:9f:d0:92:51:52:
dc:df:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:00 2025 by rpki-client