
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: c+IV6sCBfPRUN0yTRqR895jp0RrYALX102iu6xGDyaY=
Subject key identifier: 5C:4D:B1:A7:C8:32:B1:F4:9B:81:EB:21:16:8F:C5:DF:F4:79:25:F5
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 0194BC04B1239D160C52DBCDEBCC513C2E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 1119
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: U1sCyMifwPJGvYNdazwoZ9AlTbyG3dGWoozbijI/H2w=)
2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:23:9d:16:0c:52:db:cd:eb:cc:51:3c:2e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=5c4db1a7c832b1f49b81eb21168fc5dff47925f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:65:b2:cc:64:4a:a1:92:3a:bc:9b:72:58:
e0:ad:33:53:2b:5d:7d:fd:bd:ff:8a:f6:93:8a:25:
0b:19:a9:b0:72:7f:a8:5b:f3:91:b6:80:3d:33:0b:
0e:51:48:48:47:2f:d6:f2:e5:94:f4:9e:05:79:5f:
73:2e:1e:bd:18:83:6c:32:3c:b9:85:67:41:7a:1a:
53:ba:20:a5:4b:9c:ca:0d:eb:80:e7:8e:fb:af:35:
3f:81:3f:a7:f0:28:66:99:df:60:40:07:c5:d2:0f:
d3:82:93:6c:fe:37:e8:ba:ad:39:5d:1f:64:fb:f1:
2d:eb:96:87:38:bd:d1:86:2e:31:27:d6:ca:46:31:
3d:bb:31:95:e9:5a:26:f3:90:79:0d:1d:c8:c2:f1:
95:79:f9:c2:3d:c5:93:7a:4f:5b:3d:0b:3b:fb:bb:
5a:6d:5d:2f:fe:2a:06:fb:d2:e5:51:a2:cd:1e:b2:
45:f4:56:86:9d:a7:79:4c:9c:11:86:65:4f:dd:2d:
a7:9c:df:e4:b8:25:9d:3d:9d:49:b1:ee:27:5b:ac:
c5:69:df:79:6b:4f:e2:96:e8:d6:ea:c8:79:ca:4b:
d2:29:cf:71:bf:c1:1f:ed:3c:fa:e9:b0:b1:0b:64:
f2:cb:5c:e2:75:5b:a6:30:d7:c4:ec:46:9a:8d:ed:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:B1:A7:C8:32:B1:F4:9B:81:EB:21:16:8F:C5:DF:F4:79:25:F5
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:56:ae:98:15:30:9a:39:b8:f3:ec:9d:0b:44:08:5f:57:
88:b6:a6:9e:67:c1:26:49:a5:fc:b9:53:96:8c:e9:6a:fe:9f:
6a:37:1e:d9:81:a6:53:e4:9e:23:ee:16:26:df:08:85:34:21:
57:f3:6b:04:27:3d:df:82:f0:15:ea:a7:38:6a:6b:da:0c:a0:
13:2c:20:82:77:04:e6:a1:af:46:fe:e5:28:0a:17:25:10:bd:
27:69:d2:7d:5a:b1:c4:d8:48:d5:10:a6:3b:64:24:7b:ce:cd:
e6:c0:e9:6d:45:dc:23:35:6b:f3:bd:d3:d8:3a:b4:5d:d0:6a:
14:07:bd:3c:63:19:49:10:f6:6d:38:9a:37:65:a1:fc:21:a4:
23:46:88:23:93:08:ca:12:a6:39:02:cc:f7:ed:3f:3f:d6:6b:
ea:b0:b4:05:14:76:a3:aa:0b:27:e7:1b:8b:7d:20:4b:60:1c:
52:91:69:91:12:5b:1a:89:82:a0:7f:fa:f3:2e:f4:28:36:3a:
21:85:5c:0f:4f:0d:d7:1d:75:b9:37:14:a0:2d:de:22:be:52:
e6:aa:f5:f7:2c:3a:3a:a2:d0:bf:92:6f:91:a9:01:28:c1:82:
00:05:8e:e1:8d:b2:dc:e2:01:8d:c5:5b:98:a5:4b:33:76:f7:
88:f6:4b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLEjnRYMUtvN68xRPC5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTE4MzFjOWVlZjFiNzk1NDM3ZmNiZDQzZTI5NTcwNWEx
YTA1NDcwHhcNMjUwMTMxMTEwMDExWhcNMjUwMjAxMTEwMDExWjAzMTEwLwYDVQQD
Eyg1YzRkYjFhN2M4MzJiMWY0OWI4MWViMjExNjhmYzVkZmY0NzkyNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjONlssxkSqGSOrybcljgrTNTK119
/b3/ivaTiiULGamwcn+oW/ORtoA9MwsOUUhIRy/W8uWU9J4FeV9zLh69GINsMjy5
hWdBehpTuiClS5zKDeuA5477rzU/gT+n8Chmmd9gQAfF0g/TgpNs/jfouq05XR9k
+/Et65aHOL3Rhi4xJ9bKRjE9uzGV6Vom85B5DR3IwvGVefnCPcWTek9bPQs7+7ta
bV0v/ioG+9LlUaLNHrJF9FaGnad5TJwRhmVP3S2nnN/kuCWdPZ1Jse4nW6zFad95
a0/ilujW6sh5ykvSKc9xv8Ef7Tz66bCxC2Tyy1zidVumMNfE7Eaaje2MFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxNsafIMrH0m4HrIRaPxd/0eSX1MB8GA1UdIwQY
MBaAFAThgxye7xt5VDf8vUPilXBaGgVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUt
NzZmYjIwZjQ5NDNkLzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82YTQ4NTgtNDZhZS00ZmIwLWJlZTUtNzZmYjIwZjQ5NDNk
LzEvQk9HREhKN3ZHM2xVTl95OVEtS1ZjRm9hQlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSlWrpgV
MJo5uPPsnQtECF9XiLamnmfBJkml/LlTlozpav6fajce2YGmU+SeI+4WJt8IhTQh
V/NrBCc934LwFeqnOGpr2gygEywggncE5qGvRv7lKAoXJRC9J2nSfVqxxNhI1RCm
O2Qke87N5sDpbUXcIzVr873T2Dq0XdBqFAe9PGMZSRD2bTiaN2Wh/CGkI0aII5MI
yhKmOQLM9+0/P9Zr6rC0BRR2o6oLJ+cbi30gS2AcUpFpkRJbGomCoH/68y70KDY6
IYVcD08N1x11uTcUoC3eIr5S5qr19yw6OqLQv5JvkakBKMGCAAWO4Y2y3OIBjcVb
mKVLM3b3iPZLMA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client