Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier: DSgtTnVaR6PJoYGKZB6UnuTqIN83FT4kmix0EET9ZZQ=
Subject key identifier: AA:D4:C7:25:C2:E7:2A:A8:D5:8C:42:5E:60:59:91:0A:A8:E3:A4:7D
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial: 0194BCE09908DD4CBAF8D0344075BAABDCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number: 4D
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: InUA4XkqrnxyPVAniqrJinx905S+OJR/zR1MrHd8pEU=)
2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:08:dd:4c:ba:f8:d0:34:40:75:ba:ab:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=aad4c725c2e72aa8d58c425e6059910aa8e3a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:79:db:aa:fe:c2:1d:20:42:e8:88:70:c3:f3:
81:67:4f:cc:80:b9:5b:56:a8:84:fd:ca:a9:5c:5d:
4e:37:a3:97:66:06:e5:07:46:f9:7b:db:5e:1a:3f:
dc:7a:81:97:c2:ae:af:e6:60:0e:5b:74:99:29:71:
88:b6:f6:4d:d6:91:db:44:56:3e:d7:de:4d:e5:90:
8d:33:d3:be:3e:55:dc:41:b6:eb:a9:f0:e0:78:9a:
fb:b2:45:67:62:8a:f7:df:d3:fe:58:71:f9:37:11:
30:b6:87:61:99:15:00:ef:80:35:e5:b1:5c:ca:af:
a8:bd:3e:3c:0f:ce:35:af:ef:72:8d:89:83:8f:a9:
b9:5d:3b:0e:c9:9a:75:77:20:bf:17:94:ac:a6:24:
36:68:09:9f:70:39:5c:c3:3d:90:9a:0f:41:d9:35:
4b:9c:d9:5c:f7:f2:cc:cf:07:8c:87:5c:2e:82:09:
b0:25:cf:3f:29:09:1c:e1:4f:92:95:80:65:49:dd:
ff:c2:38:f1:65:06:eb:d9:49:2a:01:74:fa:be:2e:
d9:23:40:49:d3:e4:cb:f9:35:11:85:3d:53:55:29:
4f:4d:09:2b:41:d5:5b:93:d3:f0:cb:86:18:8f:c1:
7a:2d:4a:8a:8f:a0:67:20:d2:d3:a9:03:d5:fd:0d:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:C7:25:C2:E7:2A:A8:D5:8C:42:5E:60:59:91:0A:A8:E3:A4:7D
X509v3 Authority Key Identifier:
keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:8a:8c:c5:7c:38:7e:aa:6a:72:a4:57:50:7e:4a:5c:1b:97:
30:c8:5a:85:be:c3:dc:77:08:8f:1e:bf:dd:8d:84:c0:dd:07:
21:4e:76:05:47:09:e4:af:87:b4:c4:fe:6c:15:ac:f2:d1:06:
19:ed:58:93:df:c8:0c:5c:73:cb:23:d3:69:23:22:cf:23:cd:
72:fd:42:53:b8:26:71:5f:01:ad:ad:90:54:39:ba:86:99:23:
f5:50:22:ba:dc:ff:db:ab:40:28:73:fa:71:3a:9c:d0:df:57:
f6:99:e7:82:59:ee:ff:19:d5:96:7c:27:b0:b6:dd:8f:ea:ef:
bd:82:34:6c:47:80:36:1f:0c:6d:03:8b:4d:4a:d1:3a:bf:ed:
ee:34:76:80:09:7b:5e:32:dd:bc:6a:e6:e5:06:e4:dd:01:44:
e2:bf:08:76:09:7f:91:8e:28:c4:72:bd:65:4c:52:fb:5d:ea:
8d:fb:6c:e0:5b:63:b7:72:d3:47:98:59:35:e8:11:a6:78:7b:
b8:12:21:dd:00:a5:2d:38:cd:54:ac:b6:ae:d3:df:d3:e0:09:
23:ee:2e:c3:5a:19:7f:7a:3a:32:cf:ea:0f:46:89:05:3e:d3:
93:63:dc:89:02:f0:6d:2d:f0:cd:12:02:da:c7:88:66:2f:55:
3f:97:c7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:59 2025 by rpki-client