Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: SFhvadbE9FHDRdHzXBlTiYb2ujA3qq7rcYqMb3reaRo=
Subject key identifier: 4A:A9:AC:9A:32:83:32:82:67:09:75:B2:35:F3:B3:5C:34:36:8F:5B
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 0194BC0516A480B4D0C1BA12ECCED77D06BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 06FB
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: af4STqgkhLA4RSjXwEzFDo6AEl9w28D2ZWwpHYR+rzo=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:a4:80:b4:d0:c1:ba:12:ec:ce:d7:7d:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=4aa9ac9a32833282670975b235f3b35c34368f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:e9:6a:c8:90:a8:bd:5d:19:25:b8:da:ce:
c1:7d:39:21:59:a1:db:ea:5a:dc:a5:cc:7b:cf:5c:
90:79:37:f3:32:8e:1b:e6:22:f5:4c:8d:33:86:8e:
cf:b0:7e:9a:85:93:cd:9c:b4:7e:23:79:ed:ab:49:
c7:c7:8b:b2:ec:37:c6:cf:6d:7c:c6:c0:cf:f2:02:
bb:c4:5f:33:a4:e7:03:cb:7e:4e:89:26:8d:41:48:
31:e6:05:71:fc:1f:77:fb:24:b8:86:16:64:82:9b:
a6:bf:1d:3a:b5:91:0c:08:e6:7d:27:95:cf:08:84:
49:46:ee:01:21:32:03:2d:4e:15:e0:a8:11:99:7a:
d1:9d:5c:4a:eb:63:3a:e8:96:92:c9:2e:51:90:a8:
54:85:67:37:51:81:52:93:8d:44:b0:49:36:fa:a0:
a3:85:3f:5b:f8:61:78:97:11:37:31:5a:d5:45:bd:
71:a1:db:75:da:0d:63:53:75:31:8f:fe:3c:c5:09:
8a:34:dc:12:37:96:b4:9d:0b:ab:64:29:be:90:57:
e5:79:78:40:3b:e8:51:1f:d8:bb:14:21:45:6a:b0:
67:dc:bb:2d:8c:1d:61:43:ad:b0:8a:9f:7b:a7:85:
55:6b:17:4b:c4:3f:da:6c:16:62:8b:f9:46:b5:85:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A9:AC:9A:32:83:32:82:67:09:75:B2:35:F3:B3:5C:34:36:8F:5B
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:03:16:ac:78:b7:59:6c:c7:d6:10:7e:32:64:6e:a7:24:
d3:0a:e4:fc:6c:e4:37:f3:a7:10:66:5a:77:a7:0e:36:2c:6f:
3a:d0:e9:44:90:8d:74:b6:b9:3b:67:29:5d:25:73:99:96:68:
f2:b9:d6:b0:ea:a1:b1:f7:d7:99:a7:a7:91:73:0e:a0:8d:bb:
69:14:10:7a:f2:97:ae:b6:49:c4:b9:85:dd:c2:ca:97:85:c5:
4e:45:b4:fd:13:6e:59:ae:2e:5c:fc:1a:c1:0a:98:f9:38:2c:
e6:a1:91:02:75:f2:a1:b1:d8:fc:5c:0d:f2:66:b3:bd:3b:04:
ca:c0:14:2d:06:55:6a:03:61:20:1e:65:f7:c8:7a:b5:2f:a5:
23:05:3d:db:5e:ef:81:f2:9d:f2:c1:ac:fb:b7:fb:e8:8a:47:
7e:d9:a5:01:2c:c3:a4:d3:98:32:f0:c0:fa:cc:1a:d4:b7:a8:
78:bb:47:b2:6b:5d:d1:5b:09:04:0f:c7:69:18:ec:d6:94:f2:
32:1a:1a:dd:33:f2:96:60:f3:be:34:e6:8d:f0:c8:a1:cf:11:
e4:2e:45:3f:9a:80:70:75:ff:67:d4:d4:c9:c7:11:6e:56:f6:
0b:8c:4e:ea:b4:d8:42:b9:22:e0:13:6a:09:04:d5:4a:b3:9c:
8f:a3:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:47 2025 by rpki-client