Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier: 71rLRiVL3Gk8+0GaZ3XLiuXoKDLd6lfcVRhmAoIqMyQ=
Subject key identifier: AD:2E:65:A5:86:58:5C:EA:BD:96:EB:0D:0A:07:4D:B0:45:CB:2C:19
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial: 0194BC3BFCCF1DB23C16311FBA50C8EF4D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: gI/J3l9CfqJJjML/z1ELSW1pIE3KpWJLYXH5JM12Jtw=)
2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:cf:1d:b2:3c:16:31:1f:ba:50:c8:ef:4d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=ad2e65a586585ceabd96eb0d0a074db045cb2c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:66:c9:9a:ea:b3:43:bc:6e:5b:8b:7d:4b:
95:94:df:dd:c6:45:b4:28:9b:a2:f0:13:4e:03:53:
ed:78:89:dc:fd:77:a9:94:59:8a:95:9a:85:fa:fa:
bb:19:d8:b7:c3:40:92:f1:43:7f:b8:1f:ad:94:cc:
d9:50:b9:53:64:a5:3b:ae:55:70:ca:ec:b8:f5:cf:
a7:fd:77:13:a7:1b:fa:e9:b7:81:9d:e4:f6:c0:bf:
52:c5:bc:7d:25:04:69:74:f7:71:61:a6:17:dd:c6:
22:66:22:84:77:df:9b:12:88:43:87:05:91:cf:5d:
ad:dd:eb:64:ba:61:49:77:d7:4d:40:c2:2f:b1:09:
41:4c:22:58:ee:6f:e2:82:cd:bf:53:fe:81:df:22:
30:ce:65:f7:65:2a:66:94:6d:d1:b1:04:d7:fd:24:
83:ee:e1:1d:dd:84:1d:01:00:18:e4:b3:eb:cb:fc:
b1:f2:31:7b:38:1f:d8:c0:ce:8f:a3:7f:bf:dc:54:
00:96:2d:82:82:06:c2:09:47:64:53:66:85:b4:de:
0e:a1:de:cf:95:65:2b:02:b2:62:50:4e:47:bf:c3:
19:17:06:cf:f7:ff:54:1e:19:9c:9c:42:b1:49:40:
11:ce:a3:02:92:ac:1c:f4:04:1c:98:96:d1:8d:af:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2E:65:A5:86:58:5C:EA:BD:96:EB:0D:0A:07:4D:B0:45:CB:2C:19
X509v3 Authority Key Identifier:
keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:11:6e:08:f2:2d:8e:2f:68:d9:fd:3e:2a:64:16:73:a6:1e:
6e:4a:ef:cd:71:a2:54:a1:59:b3:c2:17:2e:41:d3:8c:0e:85:
34:52:58:59:ed:04:c7:46:c5:b7:f2:9c:a9:15:d2:ae:65:c7:
f4:ae:bc:93:88:b2:e9:1f:ab:0e:b9:8d:07:fb:8c:6a:61:91:
66:73:22:67:69:b0:67:37:de:80:f2:b1:73:05:03:95:e2:d7:
a8:dc:5d:c4:64:fe:00:5b:e5:65:53:6f:fe:58:e8:3a:1b:6f:
5f:ea:51:43:a2:ee:fa:66:b8:b6:61:e0:90:68:a6:e5:6b:cf:
a9:a2:9b:94:30:b4:43:30:c6:ab:a9:e0:80:08:e0:40:3e:f2:
95:f3:c5:ee:a8:c5:f1:e1:77:99:9d:e5:3f:be:11:70:63:9c:
02:d3:7d:f3:6e:42:77:9c:50:89:f8:ca:69:5e:58:71:f9:6e:
a0:18:f9:3e:27:0d:b0:d2:08:33:a9:a5:01:e9:fb:8b:d9:98:
ba:63:52:89:59:12:01:ed:ca:aa:66:23:14:b1:75:e4:a4:1d:
fd:d2:d0:1e:1f:97:6e:54:6c:c7:88:8c:e3:56:68:72:60:eb:
c8:98:e5:2d:fd:d1:4b:25:ae:a5:15:54:69:f7:6e:64:ec:ee:
32:54:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:03 2025 by rpki-client