Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File: BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier: x6nGmPeeIW9D79VOgyytm7a32wsam+E+rOYTbtC/oWU=
Subject key identifier: 63:06:27:F9:2F:0C:23:31:D5:6F:C4:C8:75:2B:2D:1A:63:9D:60:21
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer: /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial: 0194BC3C39C90B272C803A588CA8F8A6F960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: iE2tnLgr9NEgyUTjM2jCyKnQVERvRMZs84K1BWwwVOw=)
2: lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa (hash: haGiRVIYQql14DyAfU+5XwsD5ECg69Kir2HoWSWwiFo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:c9:0b:27:2c:80:3a:58:8c:a8:f8:a6:f9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=630627f92f0c2331d56fc4c8752b2d1a639d6021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:25:57:45:04:56:fb:bd:53:3e:d6:d9:9a:
be:bb:d2:3e:14:cb:30:3d:89:b8:e5:3f:2c:99:96:
1f:ed:91:f6:81:2b:b7:c6:ca:96:34:7e:7f:8b:48:
f9:53:46:e7:4f:6d:28:a9:7c:89:de:ce:71:7b:19:
2f:e8:c4:c4:09:a5:fe:fa:74:5a:27:38:f0:67:53:
47:c1:23:aa:e9:3f:68:12:a0:5e:df:eb:1f:db:7d:
c7:45:b3:4a:87:3f:b5:bf:1e:2f:15:06:fb:7e:f9:
39:38:3e:78:be:30:d7:25:8d:4e:05:80:61:8f:69:
65:c2:4a:c8:a3:c6:64:97:3b:bf:f8:99:7c:14:22:
75:66:bf:af:a8:c6:77:d8:7e:64:07:4d:6b:7d:70:
ec:cf:6b:73:26:85:63:89:7b:7c:f5:ee:2b:d8:03:
8b:a3:99:d5:34:68:10:3f:44:1f:b2:b4:22:ed:ef:
ea:c7:cd:64:29:33:97:28:4c:80:66:66:6c:fa:39:
29:c7:89:71:f4:c0:23:ae:fe:ee:c4:82:6e:76:b2:
f3:fa:50:da:a3:dd:00:87:e2:1f:b3:71:83:e7:fe:
87:ee:08:68:d7:de:16:a9:c3:fc:44:2d:7a:35:3d:
ca:ae:55:2b:86:85:dc:e2:10:cb:fd:a9:d6:6f:1b:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:27:F9:2F:0C:23:31:D5:6F:C4:C8:75:2B:2D:1A:63:9D:60:21
X509v3 Authority Key Identifier:
keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:cb:43:de:40:95:43:89:a1:e5:3f:ff:e0:b9:0f:92:e0:
c4:a8:47:f0:fd:78:4e:94:ee:44:b9:89:7f:98:66:f9:7c:a2:
8e:c8:d6:28:a0:ca:50:d5:ab:00:25:81:22:57:d4:0d:92:1b:
e3:b1:e7:61:03:19:f4:8f:09:fc:9b:53:87:df:30:5d:2c:e5:
2c:b0:96:ac:8a:79:75:f8:95:37:1c:9c:b7:a0:e3:49:c4:cc:
41:ce:e9:a6:92:7a:85:d2:54:70:b6:9e:13:84:9e:4e:ab:18:
9d:c6:37:14:96:df:d6:ef:b7:4d:14:50:ac:73:c2:52:7e:fb:
0e:02:a3:98:bc:87:8f:97:90:04:b5:29:8a:f0:70:80:6f:07:
a6:34:9c:b8:43:59:db:e0:22:77:c3:bf:8c:6e:84:e7:48:12:
6b:86:0d:f5:d0:4a:f9:30:15:10:3d:9f:ad:7f:b6:fa:c5:a9:
3d:9c:58:20:25:87:3e:cc:b3:ba:c4:b9:35:90:85:1d:3e:ea:
8b:ef:61:d7:2e:ef:ab:22:9c:e4:24:b4:ba:ae:e4:42:1c:00:
0f:cb:dd:06:91:46:87:3e:40:44:11:6e:76:31:a8:dc:28:5f:
d7:14:6d:88:bb:02:50:a7:56:02:61:aa:86:d0:55:da:d8:aa:
0d:ea:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:44 2025 by rpki-client