Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: sxsCtUP1cZZ5IuI1bFMpWlU4wr80wLXlsPDb9mDMrcA=
Subject key identifier: D7:4F:30:D5:A5:F9:6A:19:96:5C:24:44:41:88:CA:15:62:97:0C:AC
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 0194BC3C37EC13F55FF57975921751C7CD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0675
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: ML6AZsXiXe4OQ3vObcoAXvMKZ/mMXl6aBhBC63Hp4p8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:ec:13:f5:5f:f5:79:75:92:17:51:c7:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=d74f30d5a5f96a19965c24444188ca1562970cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:07:2e:f5:0c:5b:94:d1:92:ee:46:77:fb:
c5:ed:64:8e:4c:77:68:bd:dc:0d:99:d2:89:52:ef:
93:c0:a8:b2:b2:3a:6d:fc:58:4d:49:30:aa:17:6f:
82:d7:06:70:dd:bf:75:da:31:35:34:bb:99:0a:40:
81:8f:fe:39:32:17:93:32:47:31:5e:e8:47:4e:f5:
77:da:ed:df:0d:aa:f1:49:6a:19:65:7b:28:80:b2:
f3:43:bb:ce:76:10:13:6d:78:38:2c:8a:7c:41:44:
f8:bc:9b:0c:ba:2f:a0:a3:64:19:b7:df:f5:b8:fc:
6f:ab:cc:27:da:c3:58:a7:4a:34:88:4c:10:89:1f:
68:04:f9:50:c9:2a:81:9c:48:9d:e7:e2:22:23:35:
29:05:20:9b:0e:75:7c:27:63:1f:0a:84:57:15:46:
ae:d9:37:85:9f:63:75:81:22:c8:30:78:34:a8:4e:
7a:6c:5e:75:25:5a:08:ab:e6:d3:56:d9:88:4c:08:
76:01:2b:7f:2c:66:00:75:0a:8c:02:87:7b:38:cb:
0f:9f:81:2f:95:a7:74:ed:61:48:fc:dc:6d:24:f4:
d6:cf:ab:0d:74:e8:72:eb:00:78:0f:94:b5:23:26:
67:27:d6:a8:ab:6c:4d:87:8a:ee:f6:09:0a:eb:87:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4F:30:D5:A5:F9:6A:19:96:5C:24:44:41:88:CA:15:62:97:0C:AC
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:33:f3:78:92:f9:4d:6f:51:37:db:03:c9:cc:46:fb:e5:
db:06:ca:8e:57:df:25:ef:77:59:22:a8:fc:cc:4f:cd:cc:b4:
68:e4:66:09:c0:70:4a:56:19:b4:19:aa:23:72:c8:c8:08:42:
12:f2:eb:21:4f:0c:b3:0c:86:6f:87:c1:37:a0:de:0f:de:c0:
df:89:6f:b0:ff:ca:19:33:da:73:0d:49:60:c2:47:c6:66:b1:
67:aa:0a:57:b2:81:b4:16:13:c1:54:9f:97:e8:ef:28:9d:66:
f0:4a:2d:e1:15:6c:0c:0c:6d:1e:99:23:54:60:aa:bf:18:48:
8b:c1:eb:44:80:e4:e7:45:86:69:df:22:ce:65:9a:8e:c1:99:
18:dc:c9:a5:4d:45:44:f8:3d:db:db:c0:de:7f:d7:0e:17:9f:
e9:4c:16:e5:38:b8:82:64:4f:1a:89:1f:73:01:82:3c:d4:cf:
51:d5:78:ae:ac:39:95:f1:d1:ee:07:41:b6:a4:75:fb:3a:d8:
46:8c:03:31:5c:3b:2d:6e:aa:1d:f3:3e:11:9a:17:91:04:76:
f6:a6:db:f5:ee:ed:91:81:6c:f4:5e:74:40:80:ad:5b:ff:a3:
27:b7:a2:c8:78:d7:8b:fb:eb:cd:42:75:de:0e:22:1c:9f:a6:
ed:97:55:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDfsE/Vf9Xl1khdRx80EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDNkZjkxNGRmMDRlNDdmNTZiZDk2MmYyZjlkYzNmMDQz
NGE1ZDMwHhcNMjUwMTMxMTIwMDUwWhcNMjUwMjAxMTIwMDUwWjAzMTEwLwYDVQQD
EyhkNzRmMzBkNWE1Zjk2YTE5OTY1YzI0NDQ0MTg4Y2ExNTYyOTcwY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEIHLvUMW5TRku5Gd/vF7WSOTHdo
vdwNmdKJUu+TwKiysjpt/FhNSTCqF2+C1wZw3b912jE1NLuZCkCBj/45MheTMkcx
XuhHTvV32u3fDarxSWoZZXsogLLzQ7vOdhATbXg4LIp8QUT4vJsMui+go2QZt9/1
uPxvq8wn2sNYp0o0iEwQiR9oBPlQySqBnEid5+IiIzUpBSCbDnV8J2MfCoRXFUau
2TeFn2N1gSLIMHg0qE56bF51JVoIq+bTVtmITAh2ASt/LGYAdQqMAod7OMsPn4Ev
lad07WFI/NxtJPTWz6sNdOhy6wB4D5S1IyZnJ9aoq2xNh4ru9gkK64frMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdPMNWl+WoZllwkREGIyhVilwysMB8GA1UdIwQY
MBaAFAYD35FN8E5H9WvZYvL53D8ENKXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEt
YmM4NDI1YzYwNjA0LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85YjVlMjYtMDE0OC00ZjlmLWE0NmEtYmM4NDI1YzYwNjA0
LzEvQmdQZmtVM3dUa2YxYTlsaTh2bmNQd1EwcGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoIz83iS
+U1vUTfbA8nMRvvl2wbKjlffJe93WSKo/MxPzcy0aORmCcBwSlYZtBmqI3LIyAhC
EvLrIU8MswyGb4fBN6DeD97A34lvsP/KGTPacw1JYMJHxmaxZ6oKV7KBtBYTwVSf
l+jvKJ1m8Eot4RVsDAxtHpkjVGCqvxhIi8HrRIDk50WGad8izmWajsGZGNzJpU1F
RPg929vA3n/XDhef6UwW5Ti4gmRPGokfcwGCPNTPUdV4rqw5lfHR7gdBtqR1+zrY
RowDMVw7LW6qHfM+EZoXkQR29qbb9e7tkYFs9F50QICtW/+jJ7eiyHjXi/vrzUJ1
3g4iHJ+m7ZdV3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:26 2025 by rpki-client