Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: lzwkPO2Nj6ERTh2Gsiomx1+G5wEZIFUP/XAvY3wxKjM=
Subject key identifier: C7:BE:BD:A4:2F:43:9A:E1:B5:BF:B7:9F:16:42:5E:D1:8F:DE:3F:BA
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 0194BC05229C88EEF152EB17BEFAE57BF862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: KBja2wK/VBc9e2+3yNp2XTeVH1aijhe5aFLoA/NI6p8=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:9c:88:ee:f1:52:eb:17:be:fa:e5:7b:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=c7bebda42f439ae1b5bfb79f16425ed18fde3fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:6f:74:d0:1b:2a:5f:e3:0e:a2:5f:20:fa:
57:cd:73:b0:15:92:93:db:64:42:72:b9:6f:08:04:
f1:58:bc:85:27:89:01:38:de:03:a9:c9:66:3d:f7:
13:91:74:ea:3d:3d:28:78:06:15:3a:a6:69:d8:4c:
3b:a9:b6:ec:c4:5a:9d:f7:bb:49:84:92:ee:fb:51:
86:8f:1d:4c:8c:c6:3f:8c:8d:ea:7f:1a:e6:e4:21:
d9:0c:72:f4:77:69:51:b5:7c:e2:d0:1b:4d:7a:a0:
d7:39:bd:4a:47:5a:1c:ce:55:0d:91:c0:35:43:7d:
f3:4f:3a:05:13:c3:69:4b:5f:9a:63:af:78:9d:e9:
ac:62:63:f0:77:8d:17:d7:cd:ce:70:ad:73:3e:fe:
bf:8e:82:cb:24:68:2d:03:4f:a7:f1:1a:36:90:e6:
3f:32:b9:3e:47:e8:63:91:a2:b4:76:b9:48:4b:00:
09:24:63:b9:6a:71:a8:d3:1f:df:b0:23:2b:04:86:
70:8d:81:52:21:7a:9a:79:0b:a5:9a:de:80:46:a0:
cc:02:a9:3e:d2:df:fb:72:09:92:87:a7:50:9c:54:
ba:6d:e2:90:f5:cc:86:92:37:5e:ad:71:e2:d3:c5:
7e:2f:50:6d:9e:67:b9:f5:07:32:65:17:fd:06:b4:
5b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:BD:A4:2F:43:9A:E1:B5:BF:B7:9F:16:42:5E:D1:8F:DE:3F:BA
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:6a:76:af:b0:d4:d8:30:de:c7:b5:61:86:14:67:40:78:
0f:01:8e:0e:b1:02:aa:7e:d9:10:e7:2e:9e:6e:ca:04:ff:c8:
72:f1:8f:e8:1a:b3:61:1f:c5:3f:b3:cc:fb:ab:90:17:f3:98:
be:e9:a1:80:f9:13:10:80:07:79:2f:84:e4:3a:31:42:1b:4d:
17:52:45:ed:e2:5f:51:08:8d:26:ba:77:f9:ab:0d:2a:51:8d:
41:10:48:8b:f0:01:ab:cd:db:d1:6f:16:50:14:ec:28:d2:8d:
29:c5:b2:b8:9b:23:5e:b3:d8:b7:1d:ef:1f:26:7d:0a:3c:88:
58:6d:67:88:9d:25:ff:23:15:8b:ce:fd:a8:22:c2:7a:21:64:
8a:e7:ea:29:e9:4e:8f:76:f7:2e:b8:9a:e7:e5:4a:08:66:dc:
8c:0e:4a:3e:cc:dd:1c:b7:29:c0:8e:14:8c:f9:c7:5b:5f:bb:
70:2c:b0:86:61:82:0f:da:0d:e9:48:6c:e4:8f:17:6a:33:e1:
80:8b:a8:2a:51:c4:de:86:c7:32:78:19:29:aa:42:89:51:d7:
66:42:4f:85:bd:85:f0:d2:cc:4c:cd:37:60:d1:42:ee:69:41:
67:a4:51:d2:e6:f6:8b:38:73:e5:44:5e:f5:45:d5:f1:79:6d:
00:b4:2f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSKciO7xUusXvvrle/hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTA5MTNkYmJlZWRhZGRlOTVkY2U0NzA0NTI2Mjg0ZTdh
ZTdjY2EwHhcNMjUwMTMxMTEwMDQwWhcNMjUwMjAxMTEwMDQwWjAzMTEwLwYDVQQD
EyhjN2JlYmRhNDJmNDM5YWUxYjViZmI3OWYxNjQyNWVkMThmZGUzZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx41vdNAbKl/jDqJfIPpXzXOwFZKT
22RCcrlvCATxWLyFJ4kBON4DqclmPfcTkXTqPT0oeAYVOqZp2Ew7qbbsxFqd97tJ
hJLu+1GGjx1MjMY/jI3qfxrm5CHZDHL0d2lRtXzi0BtNeqDXOb1KR1oczlUNkcA1
Q33zTzoFE8NpS1+aY694nemsYmPwd40X183OcK1zPv6/joLLJGgtA0+n8Ro2kOY/
Mrk+R+hjkaK0drlISwAJJGO5anGo0x/fsCMrBIZwjYFSIXqaeQulmt6ARqDMAqk+
0t/7cgmSh6dQnFS6beKQ9cyGkjderXHi08V+L1Btnme59QcyZRf9BrRb/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe+vaQvQ5rhtb+3nxZCXtGP3j+6MB8GA1UdIwQY
MBaAFAaQkT277trd6V3ORwRSYoTnrnzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEt
MzFiOTUwMjcwNTM2LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mYWI5MTgtOGY0ZC00ZWRlLWJhZDEtMzFiOTUwMjcwNTM2
LzEvQnBDUlBidnUydDNwWGM1SEJGSmloT2V1Zk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4Jqdq+w
1Ngw3se1YYYUZ0B4DwGODrECqn7ZEOcunm7KBP/IcvGP6BqzYR/FP7PM+6uQF/OY
vumhgPkTEIAHeS+E5DoxQhtNF1JF7eJfUQiNJrp3+asNKlGNQRBIi/ABq83b0W8W
UBTsKNKNKcWyuJsjXrPYtx3vHyZ9CjyIWG1niJ0l/yMVi879qCLCeiFkiufqKelO
j3b3Lria5+VKCGbcjA5KPszdHLcpwI4UjPnHW1+7cCywhmGCD9oN6Uhs5I8XajPh
gIuoKlHE3obHMngZKapCiVHXZkJPhb2F8NLMTM03YNFC7mlBZ6RR0ub2izhz5URe
9UXV8XltALQviw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:37:39 2025 by rpki-client