Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: 2YQ//s98SwvmVflnLUmwmPUHIKUr/fCZvqvqVaMAdKs=
Subject key identifier: C8:A9:9A:9E:8F:11:FC:4B:41:B4:FA:49:FE:F7:AC:9B:E8:2A:BA:67
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 0194BCA9ADB74D975CD25D01EDC8DD6A5154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: Zae4u8owwaOMaWwzR5IcWtiGlGawjIGVuxhFPl4hxtw=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:b7:4d:97:5c:d2:5d:01:ed:c8:dd:6a:51:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=c8a99a9e8f11fc4b41b4fa49fef7ac9be82aba67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:39:56:19:26:cc:bc:14:83:72:ce:0f:5f:
4d:9a:92:ca:33:0a:c4:72:20:35:08:86:0f:59:7b:
53:e3:d0:a2:b7:4d:65:47:7c:88:2d:c3:92:17:d5:
f7:e2:dc:ad:3a:55:c0:5a:83:12:3a:ed:4b:b9:c2:
9d:6d:5a:76:9e:e9:d6:83:a7:b0:21:b2:6b:bc:ae:
4d:a8:4e:83:63:7c:50:e4:ba:c5:64:39:4e:84:4f:
86:95:0a:75:3a:fb:9c:86:ce:71:4f:59:cd:0b:1d:
03:12:20:f7:27:5a:f3:66:c2:c4:9a:f0:8a:69:c5:
d3:85:be:cb:09:f5:c8:b4:58:36:68:b2:19:04:45:
3d:dc:62:5d:30:b9:11:ad:fc:0e:f8:5f:45:83:4f:
29:37:17:1b:ec:61:a0:95:ff:23:99:e8:f8:a6:01:
e2:c8:b3:13:77:c5:f6:43:8d:d8:18:d9:dd:b8:d8:
60:90:ff:f2:49:a2:10:0a:a6:1b:35:2b:bc:7d:98:
12:5e:d1:c4:5e:f4:c8:0e:ba:89:89:be:8c:a7:c9:
42:f3:b0:b3:ff:0a:17:b1:65:17:cc:bb:a4:95:38:
23:c1:6a:67:2f:4a:1b:6a:e6:4b:0e:2b:05:32:5e:
28:7b:f2:e6:d6:e2:b2:c1:c2:8b:45:4a:fb:84:51:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:9A:9E:8F:11:FC:4B:41:B4:FA:49:FE:F7:AC:9B:E8:2A:BA:67
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:5a:1d:81:69:3d:e2:07:02:b3:2d:f8:cf:f5:f6:c6:85:
18:37:e5:37:cf:8a:2c:9d:48:ef:82:a6:af:e1:d8:22:e3:0e:
e2:48:ed:f6:7a:08:b8:2d:98:05:a7:4a:f7:9e:5f:87:3a:53:
be:04:b4:d3:5a:2b:b1:ba:b9:67:bd:5c:2a:42:05:47:e1:25:
df:d6:c4:bb:bc:9f:da:9c:6d:44:e0:79:a6:6d:1f:ae:19:a2:
3f:c2:57:be:b9:a8:02:8c:89:23:56:fc:bb:26:c1:53:e1:1c:
3d:11:0a:50:04:4f:f6:e5:9f:35:67:10:16:df:ea:fb:3a:0e:
18:2f:23:eb:bf:7c:41:4d:88:a3:54:38:03:e8:31:e0:1c:6e:
70:5c:71:d9:6f:7f:df:b5:48:69:b0:cb:7c:71:82:ef:d4:14:
ff:ab:33:cf:d4:8d:2e:53:fa:30:05:90:3e:ac:56:e3:1b:18:
db:0e:de:f3:67:cf:a0:5e:64:14:d4:45:0d:e4:f7:1e:83:be:
47:dc:8c:0d:8a:6c:02:32:04:ad:59:56:73:09:f1:2f:3a:cc:
44:33:d5:78:35:81:57:1d:14:f4:05:9a:7c:31:3a:9c:f4:13:
b2:b6:8b:3a:e0:11:7c:c2:c1:05:78:d7:cf:e7:8a:4b:9b:e2:
b3:51:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:56 2025 by rpki-client