Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: Ov1x2RLVaQ9XllUt5t+I6D7gLoVi67Po3QbksDFvL5k=
Subject key identifier: FC:44:2F:1D:61:D3:BC:0E:A6:97:27:75:8F:D1:77:7B:6D:1A:3B:2B
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 0194BC72CC13EC3FA0617EF6A620F2238101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: G84uhb9Rd5ts2Z5IU2FwWEmfr5/it/TQY4/OMCMhqtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:13:ec:3f:a0:61:7e:f6:a6:20:f2:23:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=fc442f1d61d3bc0ea69727758fd1777b6d1a3b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:ac:c7:af:b3:eb:35:b4:46:97:fb:51:ed:
f3:96:94:a0:28:75:7a:e2:ce:85:0c:31:ac:15:14:
96:a6:b4:4e:e1:ce:58:60:01:e8:8d:17:91:0d:22:
b3:ee:f6:16:69:36:70:86:cd:57:de:dc:13:58:f4:
2e:61:4d:5f:19:98:3d:1c:7f:06:c2:96:90:7e:e1:
da:b8:cb:64:1b:a2:46:06:88:79:ec:d7:2f:e3:69:
d5:16:0f:4c:15:13:98:81:a2:2b:a9:67:19:bd:6f:
17:58:a9:97:d5:48:1f:f6:84:58:ca:bc:8f:f3:88:
ea:74:1c:38:fc:ba:71:c1:85:61:ef:12:17:f9:ee:
11:ad:04:3f:59:fb:a3:4e:38:2f:80:8d:db:ea:04:
f3:06:0c:9e:c0:1c:64:8d:c8:46:d7:55:e9:87:1c:
dc:bc:8f:f6:72:38:a8:b4:52:e7:a6:d1:e9:b3:12:
8f:d4:39:b9:5c:cf:d6:c9:0c:3c:fa:db:13:f7:96:
5d:e4:84:be:47:29:c3:64:e4:6b:2a:37:84:a7:87:
d5:c5:56:3c:1c:f7:20:d8:33:95:e5:2f:28:04:2d:
9e:54:71:a1:ff:d6:27:e1:76:59:dd:13:f9:23:77:
c4:bf:67:f0:fb:dc:96:0f:9b:e5:fa:44:d4:1d:ed:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:2F:1D:61:D3:BC:0E:A6:97:27:75:8F:D1:77:7B:6D:1A:3B:2B
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:eb:c6:a3:d8:83:5e:eb:0c:ba:0b:43:81:03:4b:7c:15:
dd:63:10:72:c3:88:11:0e:d0:1b:4a:4b:8c:35:e3:8d:a8:56:
56:7c:9f:f7:21:74:b1:48:cb:dd:f1:fe:fa:d9:bf:e3:a8:d2:
d7:95:6f:5b:a9:24:2a:67:50:b6:67:b7:e7:84:3a:5e:35:5b:
7e:a5:0f:33:d5:39:1c:55:90:0d:1b:c0:2e:b8:76:04:f9:d1:
be:94:b6:a0:97:db:e1:48:9e:e3:24:b4:94:f7:8f:65:23:ac:
df:f9:7d:6f:40:c8:a8:9f:3d:ff:b1:64:e6:d0:bc:0a:ba:dc:
23:97:09:7c:9a:21:79:b1:82:a9:cd:e3:fa:f4:c8:82:57:fb:
8d:a1:b2:18:6e:da:33:a8:87:53:12:7f:9a:24:0b:3c:7b:13:
d7:bb:34:10:56:ae:ec:fe:b8:24:4e:d5:33:d2:2e:e1:1a:31:
2a:0d:05:83:6d:65:8d:b7:9b:68:49:fc:c6:b9:b2:66:b2:1e:
fb:48:0b:da:91:b4:a1:87:95:8f:50:6e:6b:9d:14:14:50:33:
99:d8:e1:a5:fa:66:c7:8c:04:5a:38:50:1b:83:fb:11:09:2a:
58:e8:2c:5b:81:75:0b:94:72:71:66:46:f8:be:95:29:dc:1d:
cb:a5:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:55 2025 by rpki-client