Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
File: BEa-UW6gc36m5j75WD884qcNtBI.mft (raw, json)
Hash identifier: vgb09pYmLZohy5hZl6lT11jz130W5i2oYXuAzjPyzNw=
Subject key identifier: E9:C8:63:3E:8C:60:C7:D4:5A:59:31:83:38:A3:E9:AE:2D:F2:F8:3F
Authority key identifier: 04:46:BE:51:6E:A0:73:7E:A6:E6:3E:F9:58:3F:3C:E2:A7:0D:B4:12
Certificate issuer: /CN=0446be516ea0737ea6e63ef9583f3ce2a70db412
Certificate serial: 0194BBCED02C70F27741961B4888108304A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEa-UW6gc36m5j75WD884qcNtBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
Manifest number: 0A0F
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: BEa-UW6gc36m5j75WD884qcNtBI.crl (hash: R7tft5U6lKvvXKvEPKAOohzmTou/gkAx2IkSj5XsBJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d0:2c:70:f2:77:41:96:1b:48:88:10:83:04:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0446be516ea0737ea6e63ef9583f3ce2a70db412
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=e9c8633e8c60c7d45a59318338a3e9ae2df2f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:f2:9b:2d:73:92:c0:70:d2:81:fe:6e:1d:
e4:7e:db:73:8f:58:9b:e8:f9:c4:30:0e:4a:ca:10:
f6:21:25:de:da:c8:a6:7d:11:b1:5b:70:1e:00:1d:
f6:a2:e1:b8:24:fe:13:d2:d6:00:1c:ae:06:21:30:
e3:90:9a:a4:7a:4c:a1:c9:78:1f:9a:52:a8:ed:6e:
0e:26:e3:eb:46:13:13:eb:04:47:89:9e:b0:7a:4e:
de:61:93:5b:98:fb:d9:4f:3f:ce:5c:37:af:ee:59:
45:43:b8:63:da:04:f3:d4:28:aa:d0:f4:2f:db:90:
f6:6d:66:97:3d:88:6b:2e:3c:67:23:a3:a3:0c:81:
93:10:0f:7c:82:86:10:5f:41:fe:a7:47:65:66:e0:
be:6e:91:4f:08:b3:00:b1:f9:4e:c9:ec:5d:d8:33:
b1:f0:6b:a5:40:3b:d2:4b:83:a8:9f:d6:58:4d:46:
8b:67:eb:ee:b0:06:62:9f:ef:52:56:0c:01:b2:03:
c6:e7:98:27:07:2a:7a:61:97:89:a3:6d:7b:06:79:
3b:76:65:51:ee:0f:26:7c:46:20:d4:97:da:32:87:
e2:90:96:78:94:1d:a8:b2:d0:d4:10:c5:c5:c6:c6:
71:d5:ad:87:e2:ec:bd:84:20:3b:6d:f8:1c:b4:6f:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:63:3E:8C:60:C7:D4:5A:59:31:83:38:A3:E9:AE:2D:F2:F8:3F
X509v3 Authority Key Identifier:
keyid:04:46:BE:51:6E:A0:73:7E:A6:E6:3E:F9:58:3F:3C:E2:A7:0D:B4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEa-UW6gc36m5j75WD884qcNtBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1696f1-9fc7-463a-857e-dc4b6bb5e813/1/BEa-UW6gc36m5j75WD884qcNtBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:d4:dd:41:2c:9f:ea:af:cd:34:e5:1c:ba:66:1b:64:bd:
05:16:d3:38:c2:38:21:c4:ed:0a:fc:cf:df:23:c0:01:46:7a:
65:eb:a9:d5:8f:ef:77:96:cf:64:43:35:6e:5f:bc:3b:ed:15:
9d:ca:5b:0f:af:29:94:ee:ca:66:34:ac:b2:32:c6:14:da:ee:
4a:5d:11:50:3f:30:fe:71:a2:b4:54:03:bb:21:71:af:8c:57:
03:63:30:fd:32:05:89:a0:30:d7:87:9a:f2:f5:ce:5f:f4:b2:
a8:c0:fd:0b:b5:fa:7d:d3:23:0f:da:96:f4:4d:06:50:bd:48:
b7:8e:51:24:40:9c:b2:72:03:71:96:80:08:8d:3c:c8:64:ac:
38:28:4d:7e:aa:f8:4f:8b:73:53:e2:2e:27:08:2c:c3:ba:94:
e1:fc:00:8f:68:ab:ed:78:0e:fd:03:d3:11:96:91:10:12:cb:
e2:1c:42:e9:e6:da:6c:80:c4:67:79:bb:92:91:b3:ae:93:28:
0b:35:44:e4:3e:e8:ee:f3:18:fa:b2:03:63:4f:98:b9:87:68:
3d:99:82:e2:ac:ba:e9:56:91:fe:d7:60:ff:d7:d5:85:69:22:
b5:ae:e8:02:a8:40:c6:51:b3:af:aa:54:b5:f4:8a:d9:ed:9d:
df:79:a9:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztAscPJ3QZYbSIgQgwSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NDZiZTUxNmVhMDczN2VhNmU2M2VmOTU4M2YzY2UyYTcw
ZGI0MTIwHhcNMjUwMTMxMTAwMTIwWhcNMjUwMjAxMTAwMTIwWjAzMTEwLwYDVQQD
EyhlOWM4NjMzZThjNjBjN2Q0NWE1OTMxODMzOGEzZTlhZTJkZjJmODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Pymy1zksBw0oH+bh3kfttzj1ib
6PnEMA5KyhD2ISXe2simfRGxW3AeAB32ouG4JP4T0tYAHK4GITDjkJqkekyhyXgf
mlKo7W4OJuPrRhMT6wRHiZ6wek7eYZNbmPvZTz/OXDev7llFQ7hj2gTz1Ciq0PQv
25D2bWaXPYhrLjxnI6OjDIGTEA98goYQX0H+p0dlZuC+bpFPCLMAsflOyexd2DOx
8GulQDvSS4Oon9ZYTUaLZ+vusAZin+9SVgwBsgPG55gnByp6YZeJo217Bnk7dmVR
7g8mfEYg1JfaMofikJZ4lB2ostDUEMXFxsZx1a2H4uy9hCA7bfgctG9RcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnIYz6MYMfUWlkxgzij6a4t8vg/MB8GA1UdIwQY
MBaAFARGvlFuoHN+puY++Vg/POKnDbQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkVhLVVXNmdjMzZtNWo3NVdEODg0cWNOdEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8xNjk2ZjEtOWZjNy00NjNhLTg1N2Ut
ZGM0YjZiYjVlODEzLzEvQkVhLVVXNmdjMzZtNWo3NVdEODg0cWNOdEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8xNjk2ZjEtOWZjNy00NjNhLTg1N2UtZGM0YjZiYjVlODEz
LzEvQkVhLVVXNmdjMzZtNWo3NVdEODg0cWNOdEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKPU3UEs
n+qvzTTlHLpmG2S9BRbTOMI4IcTtCvzP3yPAAUZ6Zeup1Y/vd5bPZEM1bl+8O+0V
ncpbD68plO7KZjSssjLGFNruSl0RUD8w/nGitFQDuyFxr4xXA2Mw/TIFiaAw14ea
8vXOX/SyqMD9C7X6fdMjD9qW9E0GUL1It45RJECcsnIDcZaACI08yGSsOChNfqr4
T4tzU+IuJwgsw7qU4fwAj2ir7XgO/QPTEZaREBLL4hxC6ebabIDEZ3m7kpGzrpMo
CzVE5D7o7vMY+rIDY0+YuYdoPZmC4qy66VaR/tdg/9fVhWkita7oAqhAxlGzr6pU
tfSK2e2d33mpoA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:03 2025 by rpki-client