Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: ZK38kT/SsETfDeaDABI0wJJHohLQP8NVGqCPqdBpfJ4=
Subject key identifier: C5:B6:6A:75:D5:38:A2:67:B6:3D:8B:4C:93:23:36:CA:90:D4:A6:DA
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 0194BC04C73C68CE92C6CF7E34974ACC4BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 06E7
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: 7XPnWbeP6DMN6pzg4/0jzfvrgYWLi93pvK5Bvmp47u4=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:3c:68:ce:92:c6:cf:7e:34:97:4a:cc:4b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=c5b66a75d538a267b63d8b4c932336ca90d4a6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:26:bf:fd:ce:58:82:7b:89:5f:f0:c7:87:
7e:0e:c8:c7:cb:c8:2b:a9:97:42:1e:6d:f5:90:41:
9c:88:01:bb:91:61:e1:b8:3a:e3:ff:09:0b:fb:e3:
92:b2:b4:84:22:bb:9b:9f:da:81:c9:8f:e1:b5:d7:
66:9a:ec:9d:d2:93:ee:fa:d2:e1:f7:10:85:00:cb:
9d:7e:d6:66:cf:d8:8b:94:e8:fb:ba:d3:bf:d9:80:
b2:70:03:00:df:6b:db:7e:ef:7c:d7:41:8e:1a:21:
d8:b5:02:53:5e:28:32:56:14:e7:46:11:ad:ad:c5:
0b:db:06:81:a0:dc:d8:c8:09:62:4b:4f:30:16:3b:
8e:e3:70:1d:18:02:75:11:fa:6d:34:1b:3a:4d:4b:
b6:52:1d:7a:93:fa:72:90:18:fb:5a:65:ad:b6:2c:
35:72:3f:36:66:88:23:bf:be:fc:25:c9:a8:dd:db:
8c:94:14:9f:01:3a:a6:3a:4f:e2:b1:f4:d7:60:fb:
8f:71:07:0a:a4:fb:92:1a:71:a7:ef:8d:9b:33:c8:
e9:79:8a:b8:b1:0d:17:ab:35:a2:af:9f:d0:4d:13:
6b:75:a7:17:03:d2:4c:d4:cc:4a:cf:19:3a:8a:03:
9b:0a:1d:cc:2c:c9:2a:8c:0d:b0:2f:64:2a:3f:61:
d3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:6A:75:D5:38:A2:67:B6:3D:8B:4C:93:23:36:CA:90:D4:A6:DA
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:8f:5b:1a:02:97:02:86:83:ce:94:21:7b:f0:05:94:9c:
66:76:a5:f2:a9:cb:c2:da:82:2e:c7:d1:9c:55:74:ac:80:9b:
33:89:a3:dd:df:dc:c5:24:5d:c9:52:bf:d5:a8:23:78:54:53:
75:e4:ae:91:2f:b4:69:73:bb:b2:da:56:f7:e2:44:ab:66:27:
8a:08:d6:67:e8:51:35:05:51:1d:91:63:b2:dc:77:31:8d:3e:
85:c9:91:3b:5b:76:cc:e1:0b:6c:4a:e3:ad:1f:61:de:0b:64:
78:91:80:c2:4c:84:3b:82:a4:f3:32:96:5f:9a:a9:1c:fb:00:
55:c3:71:44:6c:57:78:73:e6:75:05:82:e0:34:f5:68:aa:4e:
6c:75:25:63:4d:cb:17:4e:7e:30:36:ac:41:8e:30:ac:57:57:
8b:b3:a1:5e:6c:1d:fd:cb:c0:31:06:e3:d7:91:8a:13:f9:53:
f6:7f:01:0a:aa:a5:51:43:2d:47:6a:65:fc:1d:26:47:44:ed:
81:36:69:86:26:a5:f0:e8:21:7c:79:b6:ea:32:35:9d:20:0b:
b5:cf:08:56:04:40:5a:69:35:77:32:fd:34:04:43:f4:5d:b2:
b7:bf:5c:7f:95:51:63:a3:19:94:61:5f:e6:35:8e:c8:2c:9c:
e8:3c:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client