Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: cSL4Y7bUsSUDXg6HJPFHg0m0t5OlXXflgqGFHeVpyzM=
Subject key identifier: 5C:FC:70:6A:AD:4B:C0:2B:3D:36:FD:45:34:1D:96:E3:02:22:07:11
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 0194BC051AF73AC939E33AACA1587CCE90D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: DLXgZkQptxyb0Ri74V0uK3sfdaRkpJ+qQN4c5ZluGX0=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:f7:3a:c9:39:e3:3a:ac:a1:58:7c:ce:90:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=5cfc706aad4bc02b3d36fd45341d96e302220711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:af:bd:6e:9f:92:a8:a1:04:93:1f:6c:6b:
9b:27:45:e6:46:b7:43:2c:9b:bd:d5:63:2f:99:71:
33:19:f7:6a:05:60:5b:5d:6c:97:79:6f:df:6c:39:
16:d3:8f:80:5e:3b:38:83:36:4d:03:2d:d3:ad:20:
c4:6a:2e:e3:5f:67:56:eb:d8:e2:93:63:94:c2:73:
05:53:92:1c:8d:5c:73:d7:b5:e8:ae:28:44:59:8c:
82:3b:ca:82:8b:d1:af:4e:8e:af:87:f4:17:98:a9:
99:7e:30:c9:7b:ee:13:a0:cc:f3:ab:60:a3:6f:19:
6c:d6:33:b0:58:27:30:0c:e8:a8:26:1b:47:a9:c7:
c7:d5:96:38:4f:0d:29:6e:95:00:b9:26:3b:3c:45:
03:ab:db:d2:eb:5c:55:f1:fe:23:12:af:3a:c4:b6:
e1:1f:e0:c5:30:52:30:96:60:66:03:23:4f:38:9b:
35:12:84:97:33:b4:ce:98:c6:ee:cc:aa:16:00:25:
78:e0:d5:48:1b:63:78:75:c4:0a:81:0b:4d:99:e4:
3c:7c:57:6e:99:8c:20:de:78:82:85:fb:53:99:63:
1d:8d:a0:d0:cf:32:fd:52:00:8b:6a:36:ce:c9:81:
7e:b8:82:09:a3:88:6e:69:cf:75:97:d9:d6:d7:77:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:70:6A:AD:4B:C0:2B:3D:36:FD:45:34:1D:96:E3:02:22:07:11
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:b5:82:ce:15:81:4e:b0:46:ea:da:d2:cf:3b:ca:aa:1b:
3c:a1:e8:2c:a8:80:0c:5c:cb:69:02:bc:f5:94:e8:4e:b4:dd:
2e:5a:f4:41:16:db:df:ce:30:49:da:05:f8:ab:90:06:34:cf:
71:80:79:bb:94:33:9c:fc:4d:52:b8:19:b9:69:ec:4d:8d:1e:
f1:c8:f8:00:a7:54:0a:b5:52:7f:ba:25:5d:80:25:a1:69:4e:
80:f7:3f:b9:99:86:8c:54:87:7d:79:1f:06:08:af:6f:56:e5:
98:6c:20:66:38:cd:86:eb:69:ef:b0:b7:cb:57:f0:14:20:19:
7d:0e:11:1e:af:c0:cc:69:62:e0:fe:89:41:98:36:c6:cb:72:
05:93:78:4c:bb:c1:db:d0:a6:0f:43:3a:f0:4e:24:45:3e:d3:
9d:6d:e8:22:01:ee:8b:64:34:47:f0:fc:26:13:ab:71:ae:3e:
a5:36:49:83:50:30:29:d2:cf:3e:09:73:c6:68:e7:f5:67:47:
4e:36:2d:c3:a6:f1:e6:16:4f:82:21:75:4a:e6:e0:96:b3:79:
1b:88:b9:3f:6d:2c:c3:33:0a:16:0e:fd:cb:a2:c2:d2:30:77:
e7:22:b4:8e:e2:69:58:27:a1:b8:02:e3:bd:8f:a5:cc:a1:ed:
76:c8:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:53 2025 by rpki-client