Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
File: BOUCQK9A6yrWD8MHisM_xTVdRBY.mft (raw, json)
Hash identifier: rt8AdDCdxSRgumy5v8x0Le5F9JrnyV1NMBajJToKq5s=
Subject key identifier: 42:BD:5B:2C:D4:9C:AA:87:F9:81:62:7A:4F:15:05:55:42:30:72:68
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 0194BCE0A3524052718AA22F30E0A60E29EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: BOUCQK9A6yrWD8MHisM_xTVdRBY.crl (hash: WFsNPKVQIIKezjnnhVvUrRzljj3phkz1tecn9AJEXfE=)
2: Ra939hYa4qHS53vnLZC8uQUEM-E.roa (hash: B/7jSSNr2C5FakUSARiA8ySImCt+J6e0YeVP0cyVsSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:52:40:52:71:8a:a2:2f:30:e0:a6:0e:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=42bd5b2cd49caa87f981627a4f15055542307268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:f0:d1:d8:bb:96:f0:1d:b9:09:69:fa:cc:
90:c1:07:40:7c:e9:83:93:21:ec:33:6e:8e:5a:35:
f1:7f:01:4d:b2:c2:84:df:48:6e:07:33:7c:de:67:
ed:0c:72:13:3c:2b:a5:a1:d1:a3:27:e8:46:44:ce:
c6:56:91:0e:f9:c8:85:1a:85:d8:4e:79:ae:ae:1d:
ce:e3:6c:38:3b:3c:8b:d3:83:68:be:e3:1b:fc:a1:
03:1c:44:6d:56:b6:9f:ee:b9:df:e9:3e:fd:b9:93:
6b:82:5f:ae:19:dd:24:b4:67:22:e5:2b:8e:a4:94:
f1:5a:95:1d:79:28:36:a0:dc:44:b0:b1:bc:a5:6a:
93:2c:f8:d3:f9:d8:1d:85:14:d8:cc:26:65:12:e2:
3c:5a:b2:c5:5a:7c:38:31:bb:6e:b4:88:10:01:aa:
02:16:f1:43:10:1e:8d:bf:dc:5b:69:9e:cd:eb:05:
8f:db:9f:c6:81:85:69:39:2a:53:09:ed:be:83:c8:
6d:f0:86:4e:4c:f8:c4:54:db:83:d0:0e:00:2f:bf:
08:37:4d:78:36:e7:04:20:2a:2b:4d:11:5a:30:07:
ed:1f:b2:8a:f5:85:13:cf:40:b0:05:c7:d7:05:ff:
09:38:30:0a:bb:f2:07:e3:92:23:6e:49:82:fa:3a:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:5B:2C:D4:9C:AA:87:F9:81:62:7A:4F:15:05:55:42:30:72:68
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b0:be:f0:88:6e:c3:ee:b8:7f:8f:84:09:0f:ad:05:27:22:
b5:cd:d8:cd:28:2c:95:2d:6d:db:e4:53:06:47:1e:48:29:4a:
31:d1:9e:a7:0e:44:e3:1f:96:90:15:b4:ce:7d:ac:78:e4:9a:
3a:43:3f:64:18:95:be:ce:70:7b:00:56:e2:e4:ee:ca:a7:0d:
ed:78:2d:db:0e:ae:7d:a4:40:70:fe:af:c1:65:4c:8a:1d:14:
17:cf:17:18:86:32:7f:f6:66:0f:92:15:be:1a:b6:e0:40:46:
5b:48:43:c1:bc:1c:ae:e6:a8:5a:b6:b2:b2:c8:bf:f3:6d:32:
51:0b:ee:14:e4:04:3a:fa:c6:60:4f:ad:49:b1:8d:87:1c:5f:
64:50:95:9b:40:eb:09:1d:98:b8:cf:dc:4d:72:0b:70:ea:17:
a9:e1:8c:49:c4:70:e1:0d:98:20:92:89:c1:99:4c:7c:c4:5c:
45:0a:10:d4:1c:e9:f8:6d:03:31:ba:90:d7:92:48:7d:f1:96:
e9:53:72:7b:1e:75:3b:71:ef:8f:02:12:88:ca:d1:f6:b1:8b:
e0:b3:de:75:83:26:f3:5f:1a:d8:c7:32:7b:7c:ab:de:37:7b:
6d:f2:3d:df:8d:22:99:89:4e:ce:9c:4e:e7:6f:10:58:5e:87:
9f:3e:84:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KNSQFJxiqIvMOCmDinsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1
ZDQ0MTYwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
Eyg0MmJkNWIyY2Q0OWNhYTg3Zjk4MTYyN2E0ZjE1MDU1NTQyMzA3MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7w0di7lvAduQlp+syQwQdAfOmD
kyHsM26OWjXxfwFNssKE30huBzN83mftDHITPCulodGjJ+hGRM7GVpEO+ciFGoXY
Tnmurh3O42w4OzyL04NovuMb/KEDHERtVraf7rnf6T79uZNrgl+uGd0ktGci5SuO
pJTxWpUdeSg2oNxEsLG8pWqTLPjT+dgdhRTYzCZlEuI8WrLFWnw4MbtutIgQAaoC
FvFDEB6Nv9xbaZ7N6wWP25/GgYVpOSpTCe2+g8ht8IZOTPjEVNuD0A4AL78IN014
NucEICorTRFaMAftH7KK9YUTz0CwBcfXBf8JODAKu/IH45IjbkmC+jqlYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK9WyzUnKqH+YFiek8VBVVCMHJoMB8GA1UdIwQY
MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt
MzNhOWE2ZjQyZjBjLzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj
LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLC+8Ihu
w+64f4+ECQ+tBScitc3YzSgslS1t2+RTBkceSClKMdGepw5E4x+WkBW0zn2seOSa
OkM/ZBiVvs5wewBW4uTuyqcN7Xgt2w6ufaRAcP6vwWVMih0UF88XGIYyf/ZmD5IV
vhq24EBGW0hDwbwcruaoWrayssi/820yUQvuFOQEOvrGYE+tSbGNhxxfZFCVm0Dr
CR2YuM/cTXILcOoXqeGMScRw4Q2YIJKJwZlMfMRcRQoQ1Bzp+G0DMbqQ15JIffGW
6VNyex51O3HvjwISiMrR9rGL4LPedYMm818a2Mcye3yr3jd7bfI9340imYlOzpxO
528QWF6Hnz6ElQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:39 2025 by rpki-client