Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: GOcXUS6Vu1uFD4r7ncXYRwbKjqeIsWCjCXX6YwwMeXU=
Subject key identifier: 9E:F3:0E:6F:64:6D:0F:5B:29:2E:C8:5F:66:F3:85:11:64:D8:5D:56
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 0194BCE0868642224DE26D0AF1A0C67219F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 08B8
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: KlYCkq2xhXOTlb/ODf6aM0HjIbQR454apGPLgyvYaHM=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:86:86:42:22:4d:e2:6d:0a:f1:a0:c6:72:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=9ef30e6f646d0f5b292ec85f66f3851164d85d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:28:ff:50:6a:98:98:ba:dc:7c:be:1d:56:
26:1a:d9:06:8e:d0:f1:5e:80:38:27:83:ab:a8:5d:
cd:12:25:b1:8d:c6:88:d4:3d:f3:7b:e1:e7:e2:26:
4c:95:2b:1f:bc:93:5d:0e:e3:ef:ae:68:a4:5a:50:
06:bb:22:bc:aa:08:4e:fc:81:02:46:7b:49:20:94:
87:64:ac:1d:3d:6a:a1:f3:0c:6d:85:2e:98:46:f7:
2f:12:f3:96:fd:30:b2:76:c0:c3:ba:f5:84:06:a4:
e9:cc:11:3f:f1:40:f1:35:11:d3:36:b0:b0:06:b3:
e4:98:2c:a5:66:51:02:bd:7b:78:97:ff:5b:6d:d9:
27:90:3c:f9:b3:1b:da:6c:9e:0b:e5:60:27:d9:e6:
32:fc:11:1d:ed:ff:56:9a:0b:3b:bf:6d:06:d1:a3:
fb:c0:f5:50:f7:4c:fe:85:a3:16:64:f4:de:a0:2d:
0d:72:26:c0:1c:1e:17:45:d6:cb:99:61:99:f0:9c:
52:b6:08:f2:4e:a3:b8:5b:02:ab:4e:c7:34:89:1c:
34:f0:7f:f9:30:bc:2d:ec:47:6d:31:7e:45:1a:62:
56:91:7b:3b:d4:2a:8e:f0:c8:59:8b:1a:d0:4c:58:
ec:18:b1:21:6c:ca:be:66:31:40:3b:f5:21:4c:3b:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:0E:6F:64:6D:0F:5B:29:2E:C8:5F:66:F3:85:11:64:D8:5D:56
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:53:10:94:2f:03:0f:3d:04:20:34:5f:62:2f:9b:dd:f7:
c6:cc:9f:28:bc:43:76:06:d1:51:87:7e:8b:02:be:3a:4d:07:
67:04:09:44:cb:08:3b:a5:51:13:ca:d6:7a:c5:53:6f:de:78:
92:ae:10:b1:33:a2:d6:7d:9a:f5:3d:fc:1f:c7:76:95:9c:90:
9d:df:42:26:2b:d9:28:da:97:37:32:55:13:a4:a3:44:90:8f:
8a:8f:60:44:0b:75:df:66:1d:02:11:fa:5c:50:60:6b:78:e6:
6c:e5:09:e4:b7:6c:7b:0b:54:bf:d1:23:24:e1:07:2b:ab:64:
51:82:cf:e4:c3:62:ec:ce:e1:9a:06:d7:17:69:12:ac:a3:72:
86:01:97:4e:1e:f5:2e:ed:18:e6:02:57:5e:b7:35:78:68:d2:
a8:2f:61:d9:ef:7e:d4:f3:f2:2e:33:fc:e3:6d:3b:98:54:af:
e5:53:85:3f:b9:0e:9b:1f:5a:77:ab:ba:33:93:e2:43:71:01:
28:71:3f:c8:da:04:79:43:97:a3:4f:a7:b5:c1:2f:13:d1:94:
db:bf:26:6c:f1:e3:b5:45:fd:22:6d:11:b5:1c:59:a7:c3:1d:
56:96:0e:40:3d:7f:26:09:f6:2f:e2:b1:bc:4d:da:3b:92:55:
e0:31:0e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IaGQiJN4m0K8aDGchnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk
ZGI0OTYwHhcNMjUwMTMxMTUwMDE4WhcNMjUwMjAxMTUwMDE4WjAzMTEwLwYDVQQD
Eyg5ZWYzMGU2ZjY0NmQwZjViMjkyZWM4NWY2NmYzODUxMTY0ZDg1ZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNco/1BqmJi63Hy+HVYmGtkGjtDx
XoA4J4OrqF3NEiWxjcaI1D3ze+Hn4iZMlSsfvJNdDuPvrmikWlAGuyK8qghO/IEC
RntJIJSHZKwdPWqh8wxthS6YRvcvEvOW/TCydsDDuvWEBqTpzBE/8UDxNRHTNrCw
BrPkmCylZlECvXt4l/9bbdknkDz5sxvabJ4L5WAn2eYy/BEd7f9Wmgs7v20G0aP7
wPVQ90z+haMWZPTeoC0NcibAHB4XRdbLmWGZ8JxStgjyTqO4WwKrTsc0iRw08H/5
MLwt7EdtMX5FGmJWkXs71CqO8MhZixrQTFjsGLEhbMq+ZjFAO/UhTDtNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7zDm9kbQ9bKS7IX2bzhRFk2F1WMB8GA1UdIwQY
MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt
NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4
LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde9TEJQv
Aw89BCA0X2Ivm933xsyfKLxDdgbRUYd+iwK+Ok0HZwQJRMsIO6VRE8rWesVTb954
kq4QsTOi1n2a9T38H8d2lZyQnd9CJivZKNqXNzJVE6SjRJCPio9gRAt132YdAhH6
XFBga3jmbOUJ5LdsewtUv9EjJOEHK6tkUYLP5MNi7M7hmgbXF2kSrKNyhgGXTh71
Lu0Y5gJXXrc1eGjSqC9h2e9+1PPyLjP84207mFSv5VOFP7kOmx9ad6u6M5PiQ3EB
KHE/yNoEeUOXo0+ntcEvE9GU278mbPHjtUX9Im0RtRxZp8MdVpYOQD1/Jgn2L+Kx
vE3aO5JV4DEOsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:00 2025 by rpki-client