Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File: BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier: bk/dFjipEOsdyMSRPndwbeHX/55RogSvrP/QM2RyFdE=
Subject key identifier: A7:F1:13:AD:B4:24:F2:15:BB:D0:09:2E:49:1E:99:44:16:48:B1:DB
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 0194BCE06D91BE6250BA00634E04DEBF3045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: /EdD+aUy+0Wotu5VGZadTJRyj/jvvT1efBHDUV31pJA=)
2: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6d:91:be:62:50:ba:00:63:4e:04:de:bf:30:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=a7f113adb424f215bbd0092e491e99441648b1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:93:d5:48:cf:07:17:d1:40:99:3c:ee:fd:
af:ac:9e:09:6f:d5:1c:8f:23:db:c5:ae:87:0f:09:
ab:5e:2d:64:30:e3:ae:d0:de:64:46:30:60:55:9a:
bb:c9:06:29:53:05:93:21:cc:0d:ba:20:2d:42:ab:
55:83:b3:f2:64:d2:47:b9:c4:b8:85:31:e7:95:e0:
49:d0:5b:a9:ae:73:80:43:74:7b:20:0f:16:63:dc:
c5:ff:e1:63:4c:5d:05:b4:de:ed:0d:af:6a:02:c8:
01:9c:0d:a0:81:b4:f1:b1:07:a9:6f:8d:59:f1:70:
4b:8f:79:f4:bc:3a:da:b6:38:47:38:7c:9b:1f:b9:
b0:ba:a6:1b:05:73:6b:c5:60:5f:b3:38:59:a4:03:
5f:d2:d7:f9:0c:5f:e8:db:48:e1:03:3a:b3:a0:84:
e2:90:39:da:40:4a:d8:a2:56:ba:20:a4:a5:d0:2b:
fd:e6:da:a5:94:5b:05:28:b1:d8:6b:45:61:ad:ab:
3a:a3:0f:eb:ca:5c:8f:27:3a:e7:7f:26:25:a1:a2:
a9:42:cf:77:15:9b:a8:2d:c3:de:92:d6:02:88:60:
73:4b:4f:d4:04:79:da:88:43:0c:3e:34:b1:86:0c:
6a:58:80:cd:79:21:32:a9:ef:73:78:24:86:49:46:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:13:AD:B4:24:F2:15:BB:D0:09:2E:49:1E:99:44:16:48:B1:DB
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0f:84:b0:68:b3:50:05:c7:03:42:60:50:3c:b2:82:90:42:
93:3b:d0:f0:b2:1b:81:f5:a5:d3:19:68:f6:99:11:6a:71:fe:
ba:fb:8a:41:40:bd:e1:d0:8f:63:13:11:7e:44:2f:37:2f:3d:
d3:1f:3d:4b:2e:e8:b5:de:30:66:44:ee:8a:7f:6c:7f:c2:66:
c0:fd:6c:f4:60:b5:b5:24:33:ce:01:c1:5c:4a:cd:f9:d0:bf:
f8:fe:3f:dd:f3:ec:a4:0b:65:a7:d3:2d:41:14:6d:65:bb:90:
f0:e9:3b:9d:00:0b:a9:f3:92:01:56:d2:8b:6a:bb:f5:0c:a6:
f1:8e:a5:6b:b6:58:16:8b:31:f7:97:22:57:00:cf:8a:66:c8:
89:08:4d:9b:13:49:bd:20:d6:99:50:e9:2e:43:42:e9:3f:57:
5b:88:5c:9e:f7:38:4e:33:30:a7:35:10:0e:c0:a7:83:13:4d:
b4:7d:1c:29:64:27:5b:8f:42:3c:cc:26:f7:18:10:1a:7f:9d:
5b:1a:08:f6:36:97:5c:5d:7f:f9:47:da:73:ae:3d:64:2d:be:
92:82:6f:ed:a3:12:07:c6:1d:e3:e8:ea:af:d9:e4:f4:8d:fb:
29:27:a5:b0:57:b0:69:2f:2f:9d:1e:a8:47:45:ee:10:42:08:
45:4f:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:47:13 2025 by rpki-client