Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier: nrExQlJxHthtZfgCssM/URDTw5mH5FtL3clHMhykgRM=
Subject key identifier: 69:A4:E2:73:D9:AE:05:07:40:FB:CA:64:A9:85:BB:CF:74:1F:9B:D2
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial: 0194BC3C0FDF19B4FEDA5BFBE3710C819823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: fjhvzzBR5AcYQTHqtJJ41P19Z4bIF1WQds7918gScoE=)
2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:df:19:b4:fe:da:5b:fb:e3:71:0c:81:98:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=69a4e273d9ae050740fbca64a985bbcf741f9bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:ac:dd:01:b8:7d:df:b9:bc:f8:73:27:79:
59:28:93:6b:65:71:c6:aa:cb:0b:6b:64:5e:97:c0:
a3:89:20:b7:57:9f:0c:a3:1a:5b:a5:95:99:3b:7e:
66:66:ac:b9:d3:e2:df:1a:de:96:ad:ea:c7:fd:57:
5b:7f:5a:1c:6b:ba:4a:fc:e2:b2:a3:f2:8b:87:9a:
75:71:55:3c:4f:cb:6c:12:df:bb:43:bd:98:ec:cd:
b3:ca:a8:77:41:1b:b8:fe:be:03:50:29:1b:83:ed:
16:03:22:76:54:f9:2f:a2:d7:7e:d2:3f:5b:3a:36:
43:12:74:6d:cf:46:07:1c:97:b9:16:2a:a2:5f:54:
06:cd:36:6b:71:f2:93:40:f3:da:f7:6c:2b:8d:b3:
a2:b6:11:99:2b:9c:33:fc:29:54:89:59:9d:eb:27:
c9:b9:7e:25:85:f8:d1:0f:56:8c:97:f4:36:6f:b0:
f4:65:86:b7:08:e9:35:1c:6c:3c:b8:e5:e2:b0:d0:
2e:6b:dc:7e:17:a1:3c:be:93:7a:6f:93:4d:59:f2:
30:7b:e5:d9:1b:14:36:c9:03:ad:83:55:38:7b:5e:
55:4c:ec:95:4a:c6:03:98:d9:79:5c:17:0a:6d:84:
b2:21:82:9c:16:3e:9e:af:6b:0f:38:69:c4:34:86:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:E2:73:D9:AE:05:07:40:FB:CA:64:A9:85:BB:CF:74:1F:9B:D2
X509v3 Authority Key Identifier:
keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:77:08:d5:30:b2:d8:fa:1b:95:6a:a2:22:08:df:8e:81:4c:
76:fe:d0:e8:7e:bd:58:66:75:d8:1c:49:cc:99:f5:6f:6b:2c:
7d:36:62:64:d0:b3:ba:cd:78:0d:41:51:29:25:17:3c:52:66:
a2:8b:76:d0:9a:6f:38:0f:d0:7e:e7:d8:74:33:3a:dc:2a:f8:
ba:c5:e9:74:0a:17:f3:7c:ff:e9:e2:f1:45:6a:69:a4:b7:5d:
80:ec:3f:6a:4a:1a:d6:14:ab:38:9a:e3:bd:65:2a:17:b4:e9:
c4:b8:2d:d7:d5:0b:c6:57:ca:4d:36:e3:85:ee:e5:77:43:d0:
5c:cb:7c:e1:db:25:72:7c:2d:64:7a:d7:dc:9f:8d:4b:db:0c:
e3:f8:65:cb:b7:16:29:26:6b:a3:c0:18:e9:27:6c:5d:14:d6:
15:48:43:ee:a7:9b:4f:f1:83:c7:6a:24:0a:02:19:66:34:22:
33:2d:a4:5a:95:13:49:ff:55:4d:c4:4e:b4:9a:ad:53:bc:1d:
86:69:5a:e1:2b:b0:4c:13:9b:64:7b:e4:be:39:3e:b8:87:06:
3a:55:df:2e:eb:c6:ae:fc:e8:9a:5f:0c:9d:cd:d5:56:02:2b:
4c:18:02:c4:a4:df:6b:40:a0:05:bb:70:a0:4f:70:0d:4d:b1:
05:e0:b0:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PA/fGbT+2lv743EMgZgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz
NzJmM2UwHhcNMjUwMTMxMTIwMDQwWhcNMjUwMjAxMTIwMDQwWjAzMTEwLwYDVQQD
Eyg2OWE0ZTI3M2Q5YWUwNTA3NDBmYmNhNjRhOTg1YmJjZjc0MWY5YmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxys3QG4fd+5vPhzJ3lZKJNrZXHG
qssLa2Rel8CjiSC3V58MoxpbpZWZO35mZqy50+LfGt6WrerH/Vdbf1oca7pK/OKy
o/KLh5p1cVU8T8tsEt+7Q72Y7M2zyqh3QRu4/r4DUCkbg+0WAyJ2VPkvotd+0j9b
OjZDEnRtz0YHHJe5FiqiX1QGzTZrcfKTQPPa92wrjbOithGZK5wz/ClUiVmd6yfJ
uX4lhfjRD1aMl/Q2b7D0ZYa3COk1HGw8uOXisNAua9x+F6E8vpN6b5NNWfIwe+XZ
GxQ2yQOtg1U4e15VTOyVSsYDmNl5XBcKbYSyIYKcFj6er2sPOGnENIbNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmk4nPZrgUHQPvKZKmFu890H5vSMB8GA1UdIwQY
MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3cI1TCy
2PoblWqiIgjfjoFMdv7Q6H69WGZ12BxJzJn1b2ssfTZiZNCzus14DUFRKSUXPFJm
oot20JpvOA/QfufYdDM63Cr4usXpdAoX83z/6eLxRWpppLddgOw/akoa1hSrOJrj
vWUqF7TpxLgt19ULxlfKTTbjhe7ld0PQXMt84dslcnwtZHrX3J+NS9sM4/hly7cW
KSZro8AY6SdsXRTWFUhD7qebT/GDx2okCgIZZjQiMy2kWpUTSf9VTcROtJqtU7wd
hmla4SuwTBObZHvkvjk+uIcGOlXfLuvGrvzoml8Mnc3VVgIrTBgCxKTfa0CgBbtw
oE9wDU2xBeCwzg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:09:55 2025 by rpki-client