Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File: BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier: 80I72KAk+O5rOYBP66GVxI4y9Bp63HrA6aK78k8C2TQ=
Subject key identifier: 5F:09:6F:2D:42:F9:84:E5:ED:6B:F2:B7:E1:7F:3B:E7:77:75:51:03
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 0194BC3BD17571DE9F5CB2038ED7A3A3210A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number: 10ED
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: Fi9PvRHdYSHbUuFrmCOYrzCW7cE429RH4nrQosCjP4M=)
2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:75:71:de:9f:5c:b2:03:8e:d7:a3:a3:21:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=5f096f2d42f984e5ed6bf2b7e17f3be777755103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:55:fa:0e:5d:b4:53:a1:8b:0a:f3:8c:4f:
7b:a3:20:16:7a:d1:86:a6:72:df:ce:98:32:d9:d5:
d9:9e:3f:f7:d2:a1:40:41:86:dc:2a:e2:10:76:0d:
61:ae:ce:2f:67:bd:e0:17:79:0c:ae:ee:c5:78:6e:
b4:fd:46:6f:c6:bc:fb:f5:69:44:72:fd:a9:93:c6:
b3:0a:be:a2:ba:b2:a2:67:fb:2f:d6:09:60:3e:c0:
57:ac:72:80:be:23:bb:8e:3a:06:ec:ad:a4:a6:75:
72:d6:dd:a3:85:61:81:a4:8a:6b:b5:97:c2:79:72:
34:fe:b5:8c:ef:7d:5a:57:1f:e9:24:dc:a6:77:47:
b0:ec:45:ca:af:c8:af:11:c5:77:e5:5a:17:fb:73:
6c:22:07:7d:51:2e:f3:05:82:86:1c:d6:f5:f4:39:
82:33:6e:59:2e:47:e9:59:a4:64:3c:1d:be:47:0f:
23:84:9e:a3:5a:96:4e:c1:6f:a6:d5:10:40:b4:d2:
3f:62:f3:a7:e8:41:1b:0c:27:c6:b7:a8:86:a9:e4:
fe:96:02:46:f1:dc:36:05:a0:52:2b:a5:cd:3d:55:
59:db:19:e6:c9:63:0e:2a:06:a7:07:ce:0b:a3:26:
62:61:54:bd:df:2d:fc:60:0e:88:e3:ef:5f:d7:1f:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:09:6F:2D:42:F9:84:E5:ED:6B:F2:B7:E1:7F:3B:E7:77:75:51:03
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:f8:f6:9b:4f:88:21:33:88:3a:c1:50:68:a0:c4:60:a8:
57:74:08:83:db:37:5c:50:ac:4e:2e:3e:39:ef:28:f3:36:f3:
3f:2d:fe:de:73:27:cd:06:ba:60:25:d3:47:3f:73:f3:17:de:
65:57:f4:18:ca:0a:fb:ca:41:60:0e:9d:09:0e:32:da:4e:35:
62:3e:d0:43:89:d9:b5:cf:ad:4b:64:39:6a:58:f0:87:86:8c:
5e:9a:ba:63:e1:e2:c0:9e:04:8d:b0:99:ef:83:36:b1:11:4c:
c7:6b:a1:93:3a:d6:6a:36:dc:06:9b:c1:d7:df:c6:bd:a2:2d:
be:6c:e5:59:ee:ee:ef:c4:69:de:a0:aa:0d:f7:47:90:97:c0:
c5:9f:75:11:b4:6d:be:12:ed:b5:28:0f:fb:2c:f3:10:ca:7c:
0e:28:fb:12:76:aa:84:d7:2e:3e:ac:fc:a0:34:b8:85:d5:ec:
65:9a:80:67:28:98:a5:6a:ec:be:ac:f2:24:aa:96:ae:6c:60:
50:e9:ed:a8:f5:f8:59:dd:a4:1a:8e:14:21:bf:6c:7a:96:ff:
83:9c:86:6d:85:af:b7:38:1e:38:c6:87:d1:32:07:83:f7:52:
29:94:3c:54:cc:fe:f9:7e:84:0e:35:35:3a:ba:ba:0c:8c:9c:
35:a4:07:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:14 2025 by rpki-client