Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: LXUbMM+uLzAVQMcfwlUkEAsVWTYlHei5DtBLK/pv1kQ=
Subject key identifier: AC:85:F1:82:FC:48:E2:CB:AA:86:25:77:19:05:FB:05:ED:A3:60:46
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0194BC7301595E0C18B21C61BD3BE1BAAF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: iTRyWcvePkWYCf15zacDTOyyDV2WLN3w3FiGmb3qlkc=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:01:59:5e:0c:18:b2:1c:61:bd:3b:e1:ba:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=ac85f182fc48e2cbaa8625771905fb05eda36046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:7b:ab:e9:03:aa:76:d7:5c:e2:c1:36:2d:
49:d3:44:bf:17:a4:78:fc:fb:6f:5f:6e:f6:5b:25:
62:2b:2a:9c:c1:c6:ed:d9:17:c8:c7:6a:ce:6d:0d:
60:13:1a:ca:87:f2:cc:b5:9f:a8:cf:87:f4:b1:0a:
05:c4:75:88:7b:fe:cc:c3:11:09:13:98:28:dc:78:
b8:5c:c4:ad:6a:10:a0:1c:e1:f4:dd:d9:48:e2:05:
b6:37:f4:af:1b:e0:d7:bc:c7:b7:7c:3d:52:fb:4a:
b4:65:d7:8a:a3:36:8f:1b:f6:c6:99:23:a8:a6:24:
9b:af:f2:5a:b5:ab:db:d5:bf:5d:2f:ce:fc:8b:11:
c3:b6:59:0e:97:b7:6b:73:e8:f7:c5:0f:21:93:e7:
fa:e0:d0:1e:70:71:b5:c0:54:aa:6a:b0:a9:41:8a:
be:d8:e4:60:19:d3:8d:96:98:33:15:e6:20:ab:5e:
d5:65:ba:9e:41:f7:61:f4:28:38:6b:4a:09:6b:34:
38:68:de:6b:5f:d3:bb:b6:72:09:be:19:b3:09:ed:
b4:bc:72:aa:f2:eb:a0:2f:b3:8d:10:d6:e5:97:6e:
b8:57:3a:c8:67:8a:56:ad:07:d7:a9:91:bf:de:ae:
07:a9:b3:6d:11:94:bb:a7:19:3a:4d:e0:be:66:28:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:F1:82:FC:48:E2:CB:AA:86:25:77:19:05:FB:05:ED:A3:60:46
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:3c:47:2e:38:3f:30:52:8d:b4:09:cf:33:8d:db:71:cd:
58:3e:ef:25:a8:60:10:f2:97:58:9d:5e:24:5d:91:ed:d5:51:
bf:14:5f:78:ba:6e:04:1e:4b:bc:02:bf:c4:1b:be:7a:34:3e:
61:91:46:dd:7e:ff:4b:35:31:92:7a:7a:b2:b5:67:db:7b:d6:
0b:40:ed:6d:61:46:04:8b:55:b1:ef:01:88:3c:ee:a9:4d:a3:
ff:53:7a:b1:c8:6d:f3:31:4f:a1:bb:73:29:ce:03:c3:93:a1:
46:d9:f9:6b:ed:16:9e:cf:e4:49:31:98:b0:41:91:c8:77:50:
22:97:64:0a:4a:51:95:6e:e3:54:65:90:4b:d6:a6:88:a2:76:
53:15:33:24:10:73:63:a1:b6:02:1d:b7:d1:4f:7e:ab:ed:ee:
d4:c8:38:f1:da:ed:32:bb:e7:5e:1f:0b:88:af:46:39:08:5e:
b4:14:bd:24:d8:c5:71:ec:38:92:aa:ce:5d:18:c3:dc:eb:fc:
98:50:b1:31:17:49:85:e8:50:01:4b:82:eb:57:98:dd:ec:83:
37:58:50:66:e2:9c:a8:94:4c:63:76:72:d3:34:9a:34:d9:a6:
35:e8:3b:64:d3:77:57:16:c3:a0:85:48:01:16:f2:12:98:c9:
c8:f7:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:38 2025 by rpki-client