Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File: Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier: 1WUXVouNECxFwBZI6RyVLdIwWWftDiCbsxwkb3YHBqE=
Subject key identifier: D8:CC:70:D3:52:EB:BE:60:4D:36:20:5D:7D:0E:49:CA:89:39:15:A0
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer: /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial: 0194BBCE02660F07BCB84C27204F2B31A0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 0AcnQg8PsVSDva76M5oTjtrGfS3wD5rpO/dCW9X1Gl8=)
2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:66:0f:07:bc:b8:4c:27:20:4f:2b:31:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=d8cc70d352ebbe604d36205d7d0e49ca893915a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:2b:df:e9:45:1f:ac:b7:0f:ba:fb:3a:3e:
87:89:d9:05:9a:54:a8:5f:a5:9f:ec:73:5c:0b:91:
6b:c7:f0:6c:31:27:96:93:1c:97:65:fc:6e:98:1d:
1f:76:03:40:47:6b:4a:5f:4e:b2:87:34:96:25:82:
12:59:7d:3c:a2:ff:41:d4:fa:c5:ad:15:95:05:16:
0f:13:9f:19:75:72:b8:f8:3c:c4:3c:75:56:c6:06:
4d:42:3a:13:7c:fd:eb:ee:b5:10:c5:9a:cd:4c:56:
51:cd:e9:8f:3b:d4:6f:bc:24:a9:95:17:a0:5d:05:
57:0c:3c:fc:94:c3:ef:4b:3a:b2:a1:d4:e2:34:aa:
14:e6:bd:04:3d:5f:18:62:28:27:17:6a:38:46:e4:
7b:d7:48:c4:a4:6f:47:9e:ab:08:3d:55:60:ce:a5:
9b:99:c9:cf:09:48:a0:83:e2:95:a0:4f:ed:2f:08:
eb:24:75:7c:bc:64:34:6f:d5:93:19:f4:c8:f7:ff:
7c:0a:a0:9b:e1:6b:7b:dc:ed:26:6f:1f:f2:72:f1:
ef:7d:51:2d:d2:93:48:1a:e1:75:69:25:bc:95:b0:
6e:42:d8:4f:a0:87:b4:19:19:76:90:2a:63:46:00:
5e:ac:a9:02:38:54:5f:3e:00:48:ec:b1:52:22:59:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:70:D3:52:EB:BE:60:4D:36:20:5D:7D:0E:49:CA:89:39:15:A0
X509v3 Authority Key Identifier:
keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ed:38:68:b6:77:df:a2:b9:26:40:b2:e2:06:a9:be:74:fd:
50:f0:c8:9f:e9:e1:68:7a:c1:db:73:4b:97:cc:0e:88:06:1e:
b7:1c:b1:65:69:bc:97:f4:95:d1:16:b1:5c:33:26:9d:15:82:
04:ef:c3:26:6f:44:ae:c9:eb:d6:b3:8c:75:69:d1:55:8c:65:
5d:2e:94:1f:fc:fd:89:56:af:69:96:b5:40:11:02:5a:6e:02:
c6:81:d3:68:76:86:71:ce:79:05:5c:d1:4c:63:3e:b7:44:5e:
4b:f9:19:d9:42:de:56:56:58:21:2b:f5:06:b9:34:28:85:a0:
ac:ea:d8:ba:4b:ca:b2:84:85:5e:ca:f6:6e:90:50:6e:bf:e2:
5c:d9:ae:33:ba:d9:45:a9:87:e4:14:52:eb:7a:33:12:e0:83:
76:58:e3:99:5e:54:8f:5e:51:8f:8e:87:05:ad:fd:a2:23:dc:
a3:27:25:7f:5b:e2:55:65:02:ba:c3:f8:d6:43:73:63:1b:53:
e7:d2:51:e9:c3:16:4a:39:3c:e4:e1:15:75:01:70:a6:ef:f5:
08:5d:72:a9:d9:70:33:fb:2d:36:d1:5f:1e:2d:eb:c6:97:fe:
48:5f:79:d3:96:a0:8f:73:d5:2d:bc:c2:ba:07:f6:71:b5:2c:
0f:c8:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:32 2025 by rpki-client