Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File: BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier: mN9OBzyfmexD6VYQ5Xx8rD+SyGvQCKNT7XcRspcPI78=
Subject key identifier: C7:1D:69:DC:34:45:BB:F9:4E:DF:F5:E3:0B:E7:A6:96:36:3A:91:46
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 0194BCE0C004DA250A3B4D293FD39E574359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number: 090F
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: iLBYwGk1zqLkfjE2Jrqljtn6fU5xWCEyrRKBzkxNf2Y=)
2: dShe1ipT6-Y_-edVr4eNtxtPKAo.roa (hash: 34QucPlafnV+iMZk3j4FDiUJFtGuS1f17YL6xBvVoIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:04:da:25:0a:3b:4d:29:3f:d3:9e:57:43:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=c71d69dc3445bbf94edff5e30be7a696363a9146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:aa:94:18:ba:eb:17:02:ba:69:f5:de:3f:
a2:00:42:b8:55:a0:fa:8a:4d:f3:6a:7b:23:c9:bc:
29:69:e3:64:9c:81:5c:ad:c8:01:8d:db:bb:70:7b:
61:50:3e:8e:4f:59:f3:67:f2:b6:ba:36:a4:d6:22:
ec:9b:7d:de:d4:49:59:ae:ff:52:72:b7:b1:13:ec:
dd:63:c7:ff:c2:bf:5a:23:80:38:81:2f:de:a2:5f:
b8:44:c5:ca:f2:7a:a7:b7:2c:39:6b:fd:35:1c:b6:
ff:90:56:66:8b:8c:2c:4c:6e:58:fb:b3:89:8c:c9:
54:29:43:cd:34:b5:90:2a:8e:51:0e:2d:14:5a:30:
90:8a:18:ba:23:27:2a:5c:c7:1f:53:53:80:2e:77:
6d:e5:22:fa:8a:8a:8a:69:1b:ea:56:96:37:dc:72:
e5:bc:ee:da:d7:03:8a:d7:9d:69:4a:c3:05:de:82:
dd:fe:64:20:29:59:9a:8a:b4:5e:a2:46:11:19:72:
a8:70:00:4a:bb:28:1e:13:55:28:b7:5b:0a:df:51:
8c:fc:f5:59:a0:5d:66:a9:7a:55:35:9f:62:c7:7e:
6c:8b:99:85:db:d6:d5:32:b5:8c:a3:40:62:64:c0:
ab:86:31:b9:f4:51:1f:eb:f5:62:57:5e:05:38:23:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:69:DC:34:45:BB:F9:4E:DF:F5:E3:0B:E7:A6:96:36:3A:91:46
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8e:fd:de:7c:e2:d5:61:14:ab:4a:4e:e4:eb:32:d9:95:ca:
41:d4:2c:e7:6e:b1:68:f4:e9:42:e1:e1:5d:ba:5e:48:ee:c5:
35:15:36:d5:64:a6:ec:df:e3:d5:d2:01:5f:a8:cb:42:7f:54:
8a:e9:fe:a9:3d:e9:25:13:76:da:f4:4e:11:47:99:d0:71:e4:
44:88:74:71:41:c0:94:77:46:bd:d3:ae:0c:28:f7:2b:e4:4a:
50:90:19:13:4c:2c:7b:65:8e:3e:c9:b6:59:cd:70:b5:90:1f:
34:a7:95:3c:1f:f1:a0:16:b7:ef:b6:06:31:8f:04:48:b3:d1:
94:c6:dc:d6:f6:b7:ed:f7:49:bb:08:f2:2e:06:eb:33:9d:86:
ca:3c:d3:ca:d1:cb:c8:db:31:f7:54:a7:10:42:ed:63:8f:19:
51:7b:76:c5:06:89:3f:5e:45:bd:ad:18:06:45:a1:fe:1b:20:
f2:ca:b0:98:3a:63:ff:bc:55:36:c7:ea:08:5b:d1:55:35:9f:
2c:da:cb:99:c4:bf:95:94:4d:47:61:22:77:08:e3:29:ec:a9:
46:63:bb:4e:fd:80:5d:56:8e:c8:27:ef:ec:53:0d:9f:3b:43:
24:29:85:64:c5:6c:dd:05:15:cc:27:25:c5:c8:36:2e:13:89:
e4:08:72:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MAE2iUKO00pP9OeV0NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZDI5MjExZjkyZTU2MGYwYjc4MzRiYjI5MzJhYzYzY2Fi
ZmExNGEwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
EyhjNzFkNjlkYzM0NDViYmY5NGVkZmY1ZTMwYmU3YTY5NjM2M2E5MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzuqlBi66xcCumn13j+iAEK4VaD6
ik3zansjybwpaeNknIFcrcgBjdu7cHthUD6OT1nzZ/K2ujak1iLsm33e1ElZrv9S
crexE+zdY8f/wr9aI4A4gS/eol+4RMXK8nqntyw5a/01HLb/kFZmi4wsTG5Y+7OJ
jMlUKUPNNLWQKo5RDi0UWjCQihi6IycqXMcfU1OALndt5SL6ioqKaRvqVpY33HLl
vO7a1wOK151pSsMF3oLd/mQgKVmairReokYRGXKocABKuygeE1Uot1sK31GM/PVZ
oF1mqXpVNZ9ix35si5mF29bVMrWMo0BiZMCrhjG59FEf6/ViV14FOCNlHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcdadw0Rbv5Tt/14wvnppY2OpFGMB8GA1UdIwQY
MBaAFATSkhH5LlYPC3g0uykyrGPKv6FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQt
ZThkMTkyOTYzOTVjLzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mNmFjMzQtNmJjMy00MTdiLTgxNGQtZThkMTkyOTYzOTVj
LzEvQk5LU0Vma3VWZzhMZURTN0tUS3NZOHFfb1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmY793nzi
1WEUq0pO5Osy2ZXKQdQs526xaPTpQuHhXbpeSO7FNRU21WSm7N/j1dIBX6jLQn9U
iun+qT3pJRN22vROEUeZ0HHkRIh0cUHAlHdGvdOuDCj3K+RKUJAZE0wse2WOPsm2
Wc1wtZAfNKeVPB/xoBa377YGMY8ESLPRlMbc1va37fdJuwjyLgbrM52GyjzTytHL
yNsx91SnEELtY48ZUXt2xQaJP15Fva0YBkWh/hsg8sqwmDpj/7xVNsfqCFvRVTWf
LNrLmcS/lZRNR2EidwjjKeypRmO7Tv2AXVaOyCfv7FMNnztDJCmFZMVs3QUVzCcl
xcg2LhOJ5Ahymg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:26 2025 by rpki-client