Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: 3QfC9m9tzaHTHjKn24wT1WIPVYZrU0W5O++gLjuem00=
Subject key identifier: ED:EE:B7:54:5D:F0:EF:95:63:65:99:28:95:87:8B:F4:B0:74:BD:F8
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 0194BC731F0ECCA1F8CFB759231A91AD5E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: NtEgIkDAj1aAC9Us3L8PuAS6h2b8DN8IMxkBwRY0dZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:0e:cc:a1:f8:cf:b7:59:23:1a:91:ad:5e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=edeeb7545df0ef956365992895878bf4b074bdf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:ac:2c:dc:f1:4f:93:db:68:2a:c4:97:3d:
51:05:28:b6:87:7d:3d:02:25:88:e9:ce:fd:e3:a8:
46:63:2c:d0:f0:8a:c6:70:a7:0e:48:9c:85:9f:d4:
1e:68:4b:0a:be:df:6a:3e:02:e5:b5:65:01:c4:02:
b7:48:d9:2a:18:77:47:74:c3:8f:9e:04:4f:ac:fd:
91:83:48:e2:aa:90:7e:94:5e:86:77:aa:c2:bd:3e:
3b:7f:1e:48:60:7d:54:b1:2e:5e:43:e9:b5:03:69:
a6:84:4e:5b:d1:7c:71:e1:fd:ec:d1:35:69:14:81:
c3:0e:80:06:3f:d9:8a:74:79:0f:11:c2:d4:ac:c2:
88:37:98:66:03:ac:40:34:4c:38:4e:c5:ca:13:5c:
2d:83:2c:f2:62:7c:8e:22:3f:4c:46:07:b6:73:da:
f3:ed:58:49:9e:50:65:98:81:04:7d:b6:b2:af:d4:
e8:46:3f:96:ba:4e:ec:b6:8b:d9:30:1f:05:3d:1b:
3f:c3:de:7f:05:da:fa:64:23:63:57:9e:bb:16:1c:
cb:f1:6b:ba:c9:43:c9:8d:12:26:8b:25:68:98:46:
06:41:db:52:d6:32:95:5f:3b:99:31:52:c6:e9:37:
e2:f1:15:68:e1:e2:cf:b4:33:87:ef:4b:14:88:13:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EE:B7:54:5D:F0:EF:95:63:65:99:28:95:87:8B:F4:B0:74:BD:F8
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:af:c5:bd:49:3d:fe:21:71:bb:46:5e:2e:a6:84:2c:ce:
52:83:ad:28:50:18:c5:8c:11:2c:f8:7c:c9:30:53:33:dd:a1:
d4:86:d1:d4:cf:61:9e:7c:2e:77:f1:1a:30:f0:04:69:4d:4d:
4c:fc:7a:52:ac:2e:b2:c5:9a:02:53:9f:f5:6a:b5:34:5a:72:
24:ec:bc:c4:71:30:2c:19:08:2e:6b:69:f3:ff:45:6b:b9:a8:
ba:ba:17:65:77:8a:82:ee:11:18:ee:91:e9:ec:b3:9c:d8:58:
e6:21:c7:d7:d6:a5:16:c1:0c:b8:1c:09:4f:53:b7:44:48:74:
4d:52:fd:78:7e:90:28:7b:ff:8f:61:f9:73:87:89:6f:1b:d1:
48:b1:04:51:48:d2:9e:9d:5e:79:ec:56:e3:ff:44:1d:05:e0:
9d:db:50:85:c6:cb:1a:d0:23:79:fc:2c:cc:86:47:90:a8:44:
20:6a:d2:25:0a:37:f0:7c:d0:70:df:d4:ad:79:1d:ee:1f:9c:
4b:31:02:79:e8:ef:37:a5:4b:cd:24:4e:a4:60:ec:8a:fc:1c:
44:ad:64:ef:ba:d7:81:6f:f0:35:c3:8c:ca:79:4d:ea:e8:1a:
bd:e1:d4:66:5b:24:68:ed:8f:7c:bd:ab:e5:0c:94:18:0a:0f:
0b:5d:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:58 2025 by rpki-client