Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier: mQTMBwDMnRd8rW0KM+ruVFLXAUXYc1Oo0h6gEoSfFeM=
Subject key identifier: A3:0A:D6:83:6D:0A:82:C9:D3:8C:EA:6D:9F:62:9A:9E:36:C5:4E:4E
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial: 0194BD4EC41FB0E1216D337981CECA65FEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number: 0B28
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: 65/FA+qeF861bZ65oQoU2xZ0GUOJc+xg+/65bydceGI=)
2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c4:1f:b0:e1:21:6d:33:79:81:ce:ca:65:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=a30ad6836d0a82c9d38cea6d9f629a9e36c54e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:6c:a7:43:0d:91:a8:66:bf:9a:c0:db:13:
64:74:07:74:46:94:63:60:aa:a0:36:fc:cc:0f:8d:
73:6b:1d:5b:15:b0:4f:47:cd:16:34:2e:be:10:9c:
c4:37:d8:2a:58:90:26:fe:61:cd:60:d2:7e:ed:fb:
0f:f0:4f:24:d3:0d:a0:0a:e6:c4:cc:b1:3e:74:96:
c8:11:64:c6:af:63:ce:12:e3:e4:77:ae:40:32:50:
21:eb:44:74:e8:2e:91:56:a5:84:c1:bb:e4:17:61:
ca:b8:6c:9c:9b:fd:ef:ff:9a:0b:51:1c:21:ea:a7:
c7:7c:fc:85:20:a0:36:86:7f:40:ba:16:47:01:d3:
35:d3:62:8c:2e:1b:5d:63:df:2e:f3:8b:07:35:6c:
73:0a:78:8d:f0:cf:a6:23:0f:1e:b8:04:d5:07:63:
6d:f5:96:3e:78:0b:60:0e:77:91:f7:1d:35:81:18:
49:8b:fa:2c:8a:f0:41:c4:46:39:b8:5f:22:14:bd:
d7:76:3c:11:d6:9c:d5:3f:79:a3:6e:03:90:69:58:
99:a3:50:4c:0c:35:d7:63:6e:c7:2b:e0:65:72:e0:
f8:ac:0d:0e:48:37:c4:6d:29:20:af:c0:ad:01:79:
03:5e:b9:da:d6:3c:68:cb:b3:a5:9b:31:e5:a9:9f:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:D6:83:6D:0A:82:C9:D3:8C:EA:6D:9F:62:9A:9E:36:C5:4E:4E
X509v3 Authority Key Identifier:
keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2d:6b:b7:32:3c:91:75:88:18:b0:6e:4f:db:74:32:cf:76:
75:86:1a:2a:41:56:bf:d3:7b:32:8f:75:10:7f:4f:c6:34:d6:
e1:5a:3b:20:e7:e9:6b:a2:9c:67:d2:d4:dc:d3:ac:0f:8f:a4:
58:e2:c2:69:48:41:4b:1c:f6:eb:cc:e9:2b:f2:2f:31:d9:5b:
54:7d:62:df:ff:82:11:5e:3f:4a:de:d4:99:ff:42:dd:54:39:
bb:d0:5c:76:17:69:df:b5:8f:c1:b5:0d:a8:fe:dd:d7:71:c4:
ab:63:da:bd:51:d9:89:b4:83:15:d5:50:ae:21:33:47:c7:17:
17:9d:66:7e:36:06:33:c0:41:a4:4c:05:f4:03:97:3c:a3:56:
e7:48:35:53:b0:ca:8c:bd:0b:df:59:b7:bd:b9:68:54:57:b5:
ac:16:90:b0:b5:08:9a:30:30:0d:50:77:26:74:8d:a9:97:85:
46:64:20:b1:e8:77:28:ae:a3:b3:90:f3:6c:66:ac:10:4c:6a:
c9:11:43:33:58:a8:b9:cc:f5:32:45:a6:7d:67:be:29:af:4f:
0a:4f:e5:06:71:88:52:93:ab:06:5f:0f:7d:63:de:58:b3:1c:
d0:12:5d:46:93:a9:fd:30:07:10:99:e6:f9:80:75:97:f9:23:
e7:05:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:03 2025 by rpki-client