Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier: K7BJUZKu5QFNPEzieWET6amddKQqRHGgUb8+DazeE5I=
Subject key identifier: 3B:01:82:7C:4C:27:1D:81:6F:5E:ED:FF:40:11:77:27:E4:DF:34:06
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial: 0194BBCDF373BDFB789AB39E10158852C791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: BlbZyha25ZzLrESH3yKx11yViBpDcESZgt2pr7mcPZw=)
2: PhqjprJzbWIvvB7osWR9awoye5s.roa (hash: XDqMhieQTxvY+bO6WNn9WVVliXKsbboocVQsGeYD0FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:73:bd:fb:78:9a:b3:9e:10:15:88:52:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=3b01827c4c271d816f5eedff40117727e4df3406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:7c:64:e1:ab:72:c9:27:ae:33:2a:ea:44:
c5:93:01:27:f4:58:0b:8b:3f:20:5c:c4:b3:67:bc:
39:34:a8:ee:bd:c8:ad:98:f3:c6:78:b7:5c:0d:06:
77:72:21:7c:01:67:05:64:21:2a:c0:b6:78:6f:6b:
f7:08:ed:47:b8:e6:0d:f2:f3:fa:6f:98:26:c4:3b:
f1:dc:6e:92:ef:39:48:ae:f8:77:70:7f:99:1c:de:
63:5c:fb:9c:7c:bb:b6:c3:ec:c5:e8:f5:d2:bd:3e:
8c:e3:11:99:68:72:88:c5:b9:4b:84:94:c1:fd:a1:
84:ef:ca:f7:fb:29:c4:66:ad:a5:11:98:2e:0f:8d:
75:c8:67:5c:78:2d:a9:88:54:ea:3b:80:5b:64:84:
5a:c8:5b:49:88:6e:28:e2:4a:48:bd:a1:29:d0:c8:
f8:e3:65:d8:48:62:78:88:d7:6c:a7:1b:26:68:d3:
21:ba:b4:39:dd:7c:f9:68:95:da:e6:06:82:6a:1f:
e8:88:1b:26:bc:17:67:64:5e:10:af:9b:fb:a2:57:
bc:d3:7b:04:2b:fe:de:5b:a0:e7:9f:57:ac:08:25:
d3:ba:5d:05:00:b7:cd:2c:6d:4c:fe:f0:2b:9f:6b:
c6:53:07:73:b1:af:2d:00:4a:b2:7a:aa:b9:70:26:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:82:7C:4C:27:1D:81:6F:5E:ED:FF:40:11:77:27:E4:DF:34:06
X509v3 Authority Key Identifier:
keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:af:a9:7d:ae:ad:a1:43:3c:18:2b:1c:e1:f8:c3:a6:4c:b4:
f1:4f:4c:e6:e4:a6:d5:8b:35:be:f4:50:3f:48:26:c4:ef:5e:
78:8e:a0:40:76:47:e2:09:09:47:b9:4c:b6:0e:f7:f3:c4:6f:
85:12:a0:25:fa:0b:68:f8:33:7b:3c:e5:83:ef:a9:74:4b:7f:
12:16:e4:c9:97:7c:07:ea:ef:de:58:e2:29:e0:0c:e9:51:8a:
2d:46:91:3b:47:d1:df:66:ab:8a:54:55:84:a7:c7:0c:33:cb:
a0:f3:4f:7e:65:51:dd:00:f5:17:c7:2f:68:ba:44:93:d7:a2:
98:3c:da:2f:69:7c:c1:52:87:dc:e4:d2:c5:73:b3:3f:34:98:
1f:bc:99:c3:a6:04:ef:3e:e3:7e:e6:26:09:d7:35:b1:e4:25:
81:b5:e8:97:56:88:44:37:62:74:06:03:60:57:fc:13:4f:42:
a0:65:25:74:8f:df:8f:52:ab:01:b9:0d:10:d1:c9:2c:99:2c:
ed:9c:12:06:ce:2c:78:a0:ba:ef:7b:2c:d0:0e:23:e6:83:01:
16:1f:fb:0b:5e:51:d3:10:27:83:b5:2a:c7:b3:23:23:20:31:
e3:6b:e1:05:1d:88:40:f1:9a:d9:4c:5c:64:b5:e1:b7:f5:eb:
70:54:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client