Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File: BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier: Wo5c97jK9671SvCjcUeq7JPxzr86MPOgZ5fIZXBc/YE=
Subject key identifier: 90:BA:92:37:80:CD:54:8B:21:E5:D1:93:4A:54:3B:55:DE:2A:56:FE
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer: /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial: 0194BD17719C8032353D053C5026E745F555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number: 0E20
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: 42SMue8Xl6g15NLWHVXxpZFifGGk9UwF01XeefIrXVc=)
2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:9c:80:32:35:3d:05:3c:50:26:e7:45:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=90ba923780cd548b21e5d1934a543b55de2a56fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:f4:39:ae:89:7f:c1:8a:8e:86:fc:18:d5:
60:70:19:14:1b:49:02:1d:b8:31:4a:c0:33:36:7c:
67:a7:b3:f4:f2:75:25:44:6e:be:ee:b5:41:df:45:
36:32:8e:59:06:e7:72:bc:cb:70:19:ae:99:dc:bf:
e6:5c:a2:f2:24:ef:2d:5a:e9:57:98:14:ac:6e:7b:
5a:72:1c:68:a1:5d:ef:a7:7a:43:1a:71:52:da:0d:
b6:88:8b:d8:2f:ed:7f:f5:60:fa:b6:5f:51:5e:31:
c8:6b:d2:fc:8d:93:5f:69:dd:f7:95:8e:43:ac:d5:
86:e3:7e:38:6d:4f:7f:7d:1d:ea:98:44:e8:06:63:
92:90:47:9e:d3:45:a7:e4:1c:2d:47:fe:1a:14:a4:
0b:3a:06:82:8d:a2:c8:4a:ed:54:c0:69:1a:28:9f:
e0:92:ce:ba:35:15:0f:a3:b3:f5:26:b6:4c:ab:09:
a7:0d:93:24:da:9b:fe:af:96:2e:33:cc:98:1d:00:
f7:0f:a8:10:65:38:b4:13:a9:6a:bd:e9:cc:e4:00:
15:26:d9:e9:4c:26:8b:ef:8c:d6:13:9a:b4:bf:ff:
f0:b9:93:8b:50:23:57:84:f5:d7:37:0c:71:80:68:
69:48:1d:2a:97:a4:56:48:1b:f1:24:19:5e:a1:81:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:92:37:80:CD:54:8B:21:E5:D1:93:4A:54:3B:55:DE:2A:56:FE
X509v3 Authority Key Identifier:
keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:45:cb:7c:a0:3a:5e:01:b1:7e:1b:c6:e8:6a:18:07:f9:
e0:37:47:10:4c:2c:ec:e7:a6:5c:24:15:c4:df:20:6c:29:f8:
4f:5d:a6:85:d7:e3:ee:2b:d4:8d:94:9e:6f:5b:2b:9b:6e:65:
77:33:ab:3f:2d:b6:46:00:50:d5:b8:8d:9d:f8:50:e6:17:e0:
41:5e:23:a1:62:5c:96:31:fe:12:c3:26:f7:3d:66:ee:cb:ae:
cc:b0:9f:75:28:12:a0:03:f5:f8:74:10:ce:9a:c7:0b:1c:07:
eb:de:14:8c:76:8e:39:ec:7f:7a:4d:73:e0:8b:e1:cc:8c:4c:
de:bf:50:81:fd:47:44:6d:4e:8f:2d:9f:c9:01:45:a0:2b:a1:
87:ef:89:6b:33:c1:d9:06:87:46:27:b6:cf:60:39:ed:bb:c9:
8d:3c:68:13:97:f5:f6:5c:3b:e1:97:38:a4:d0:f6:2a:17:0e:
40:af:73:22:a1:e4:a2:66:76:9f:ce:b0:4b:10:1d:85:a2:d6:
7a:1e:cb:bd:91:31:04:8b:95:72:49:70:16:90:45:d0:2c:37:
41:72:e0:ae:67:61:6f:21:87:25:1c:fe:ea:1d:38:f0:9e:49:
7b:6e:50:f0:28:d8:38:36:96:7d:16:0b:a1:90:c8:22:14:62:
d8:56:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:48 2025 by rpki-client