Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: mJXLNxjq0yMB5HHwgngbXLtdoz0glsP+x1JRAX7agHs=
Subject key identifier: 79:50:A3:49:8F:2A:37:FC:88:CD:AA:C6:1C:3D:97:C6:8C:64:30:63
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 0194BC04D39FD06189F2E94BABA9F8E981C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: JfeSVJKf/SmQCr5UvKgZu/XZTIMvs/B3G4+vA2z0GQQ=)
2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d3:9f:d0:61:89:f2:e9:4b:ab:a9:f8:e9:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=7950a3498f2a37fc88cdaac61c3d97c68c643063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:71:d9:a6:10:90:38:35:d2:f3:b8:39:84:
75:63:e8:6d:eb:ca:19:b6:c4:d6:dd:e9:66:26:59:
0f:dc:31:8e:75:5a:01:dd:0d:17:6b:d5:9e:4a:c5:
63:f3:75:05:f3:c0:fe:2e:b1:9e:fa:3e:cf:0c:d4:
3c:b2:78:a5:09:39:51:ef:1f:4e:b5:da:9a:ed:ab:
73:0e:bb:a4:9c:6a:93:fa:8e:2e:74:6d:27:a5:5d:
f6:b3:0d:ce:61:05:35:7c:71:48:d3:8f:42:37:fc:
53:bd:3c:ea:e0:aa:79:a9:0c:43:b0:29:61:c4:69:
51:85:ea:7a:0f:3e:e5:46:ec:f5:d4:85:91:02:53:
aa:38:6d:c1:39:1b:fa:89:a3:b3:b0:cd:06:d8:ca:
01:b1:86:d7:75:57:8b:24:cb:0d:37:a5:7d:b9:e4:
91:57:19:7a:b3:58:ef:63:4b:04:8d:d6:91:a2:00:
79:d4:4c:6f:ad:97:30:a1:17:0b:9d:a7:f2:29:96:
0e:12:f4:85:0f:da:61:3d:3e:e9:6a:78:ed:ab:39:
50:36:23:e7:fd:ad:be:72:a6:78:92:01:be:cd:0f:
7c:2e:34:a9:97:fc:75:ca:1e:8d:1e:32:7e:e4:7c:
f4:9a:92:0c:99:99:8c:14:2a:c2:dd:55:44:98:bf:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:50:A3:49:8F:2A:37:FC:88:CD:AA:C6:1C:3D:97:C6:8C:64:30:63
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:19:28:3a:c7:0f:36:46:85:83:36:4e:77:74:a3:c4:10:
4d:cc:2f:be:2b:85:0e:09:34:25:8c:c6:d8:82:d1:52:32:75:
a3:58:c6:3a:bc:2e:4c:35:44:88:48:39:96:33:00:3e:16:f9:
f0:f8:9a:33:98:84:e6:73:b7:42:63:e1:7a:09:36:52:f7:ea:
8e:f8:a8:30:e0:08:33:39:a8:9f:9e:be:bc:47:0f:6f:3c:0f:
83:e0:b4:29:8d:c7:dd:ee:d7:30:94:65:40:20:e5:65:bf:8e:
c2:01:d5:cb:12:06:cf:4e:95:53:9c:27:35:21:af:e2:2a:c2:
87:22:43:a0:ba:3e:76:ee:63:1d:5c:1c:39:89:4b:3d:bb:ba:
3f:17:36:b1:b3:bc:a6:46:b4:1f:46:8b:f7:97:01:39:91:4e:
02:ed:5f:3e:aa:9d:d4:8f:5a:8c:b0:be:b5:6c:4f:19:27:a9:
7d:f7:08:cf:1a:ea:73:17:1a:e1:be:d7:ba:63:57:d3:f9:38:
ce:c4:97:0b:87:10:cc:d8:a1:8c:ff:41:ac:b7:43:b8:11:12:
6c:b9:b8:19:4f:7c:bd:96:bd:65:ed:0f:2f:2a:24:08:2b:52:
1c:ce:7e:42:6b:08:44:6d:ca:f2:19:bc:29:93:d5:37:34:6b:
84:28:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:01 2025 by rpki-client