Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
File: BcojF2aaRo1QmoqhkGvvp1v5wgE.mft (raw, json)
Hash identifier: 1TeGAYnH1w4vPFK1+b7x4je3x626nyXEFnGssdYells=
Subject key identifier: 1D:D2:10:48:D5:50:DB:EE:25:20:D9:72:A9:9F:EC:B2:6D:EF:A2:F9
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 0194BBCE313A22BD5EB07F24BA0E5D8CFE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
Manifest number: 0B62
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: BcojF2aaRo1QmoqhkGvvp1v5wgE.crl (hash: Te4zK+IpcJemZTwy/eRnSy+iHtke/mcGneI7UCH+qj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:31:3a:22:bd:5e:b0:7f:24:ba:0e:5d:8c:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=1dd21048d550dbee2520d972a99fecb26defa2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:50:a1:03:17:fb:41:4b:0f:6d:b2:76:60:
33:71:07:7a:08:dc:0c:15:64:e3:6c:07:92:d8:5b:
b0:84:5f:7d:7f:ec:7b:01:3b:08:e0:db:af:d5:08:
e8:f6:57:73:04:1e:d4:dd:d2:cc:76:2b:ac:ca:80:
77:1b:bb:59:8e:98:da:d8:d3:a7:98:a0:73:a0:88:
71:6c:95:6f:b6:06:f9:4d:86:e2:f3:64:58:a4:0a:
7b:20:d3:af:51:9a:d7:c1:fc:43:23:ec:69:75:5b:
86:38:8b:ba:7e:eb:6f:05:d3:1c:d9:c8:26:97:9b:
48:95:87:41:88:80:86:a2:66:f0:6d:5d:6b:e0:b4:
d5:8e:65:4c:e6:1a:c7:3f:4d:77:2f:e2:cf:e9:bf:
fe:ab:36:24:af:96:6a:51:45:96:45:1a:b2:14:c4:
4f:a3:2f:ae:ae:41:10:63:c3:ed:99:88:f8:0b:e2:
df:e7:b1:d9:3f:86:5c:c9:a0:40:28:5f:7b:69:0b:
19:66:b7:66:56:32:a1:3e:5b:94:21:81:6e:17:12:
4c:40:e7:3a:61:e3:21:25:b7:22:0c:9e:c6:b1:44:
37:01:08:13:45:30:ae:49:5f:de:9b:f8:84:88:89:
3b:0a:06:9b:55:62:50:bf:5c:b6:85:92:dd:11:b1:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D2:10:48:D5:50:DB:EE:25:20:D9:72:A9:9F:EC:B2:6D:EF:A2:F9
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:10:bb:f6:e5:85:59:f9:1b:ae:d3:ea:1b:95:00:9f:38:bb:
b3:f5:5b:20:2d:ac:64:25:89:ce:31:56:03:7a:52:3a:35:4b:
f9:d1:13:fe:ff:a7:cd:40:2a:11:91:89:13:61:ba:66:ee:b0:
1b:a5:63:0f:29:ef:cc:85:77:9e:5f:36:d8:04:6e:c4:c5:fa:
67:df:2b:be:94:69:a6:f5:fa:3d:91:aa:18:b2:1e:28:ee:97:
a8:9e:7d:77:be:25:14:25:9c:fb:2e:ab:7e:41:5e:85:50:a1:
ac:3c:18:46:80:8d:97:7a:a9:15:54:59:84:19:83:b7:3e:90:
68:1d:ea:c3:47:a6:a3:6d:79:b2:49:60:58:a7:96:ba:3a:f1:
74:9d:58:ef:55:3f:0d:11:8a:31:5e:91:a7:4f:4c:7d:79:22:
c1:08:76:ac:6a:de:01:ed:86:55:16:6e:81:3b:d8:98:6e:e4:
00:40:96:94:9e:61:54:2f:b5:a8:0b:be:b6:78:60:c4:98:cf:
e5:94:6b:f2:7a:0e:da:d4:3c:aa:ee:ce:ad:78:ec:b9:16:dd:
96:db:a9:ff:11:1b:97:56:63:4a:ea:5b:4b:1f:23:2e:d8:09:
50:9b:5f:fd:39:38:5e:32:41:8e:7b:88:73:de:17:d6:b8:27:
e0:8d:25:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjE6Ir1esH8kug5djP54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2EyMzE3NjY5YTQ2OGQ1MDlhOGFhMTkwNmJlZmE3NWJm
OWMyMDEwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
EygxZGQyMTA0OGQ1NTBkYmVlMjUyMGQ5NzJhOTlmZWNiMjZkZWZhMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuItQoQMX+0FLD22ydmAzcQd6CNwM
FWTjbAeS2FuwhF99f+x7ATsI4Nuv1Qjo9ldzBB7U3dLMdiusyoB3G7tZjpja2NOn
mKBzoIhxbJVvtgb5TYbi82RYpAp7INOvUZrXwfxDI+xpdVuGOIu6futvBdMc2cgm
l5tIlYdBiICGombwbV1r4LTVjmVM5hrHP013L+LP6b/+qzYkr5ZqUUWWRRqyFMRP
oy+urkEQY8PtmYj4C+Lf57HZP4ZcyaBAKF97aQsZZrdmVjKhPluUIYFuFxJMQOc6
YeMhJbciDJ7GsUQ3AQgTRTCuSV/em/iEiIk7CgabVWJQv1y2hZLdEbGk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3SEEjVUNvuJSDZcqmf7LJt76L5MB8GA1UdIwQY
MBaAFAXKIxdmmkaNUJqKoZBr76db+cIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAt
MTMzMWU2NTFjNzlmLzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZGVjYWEtZDE0MS00NmIyLTlkNDAtMTMzMWU2NTFjNzlm
LzEvQmNvakYyYWFSbzFRbW9xaGtHdnZwMXY1d2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRC79uWF
WfkbrtPqG5UAnzi7s/VbIC2sZCWJzjFWA3pSOjVL+dET/v+nzUAqEZGJE2G6Zu6w
G6VjDynvzIV3nl822ARuxMX6Z98rvpRppvX6PZGqGLIeKO6XqJ59d74lFCWc+y6r
fkFehVChrDwYRoCNl3qpFVRZhBmDtz6QaB3qw0emo215sklgWKeWujrxdJ1Y71U/
DRGKMV6Rp09MfXkiwQh2rGreAe2GVRZugTvYmG7kAECWlJ5hVC+1qAu+tnhgxJjP
5ZRr8noO2tQ8qu7OrXjsuRbdltup/xEbl1ZjSupbSx8jLtgJUJtf/Tk4XjJBjnuI
c94X1rgn4I0luw==
-----END CERTIFICATE-----
Generated at Thu May 1 13:22:40 2025 by rpki-client