Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier: yJB5HLyBzAJAnVSVHDctf5V7riq4DZSTu2pVjkaCL6E=
Subject key identifier: 35:58:82:B5:B6:19:79:D6:71:74:A0:C3:48:60:BF:02:37:45:75:7A
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial: 0194BCA9B3A05760C1892A9E2070465EB7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number: 08E1
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: Ra/rEY98bfDSDbebZZ72kqvMdO7jCcXZBXKF8P/2Cqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b3:a0:57:60:c1:89:2a:9e:20:70:46:5e:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=355882b5b61979d67174a0c34860bf023745757a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2a:63:2b:56:96:c7:75:c5:a0:ae:cc:2c:e9:
81:72:62:f5:24:b1:92:6c:4d:97:50:d5:63:f8:aa:
f9:6f:10:ee:39:ba:3e:b0:a9:56:ed:52:6d:43:fa:
6d:f3:21:a6:09:a7:79:64:b7:66:4f:74:3f:61:3b:
5d:96:b3:bb:71:53:16:79:7d:fc:01:ed:5a:1c:c3:
85:f8:64:1e:ee:2a:77:6a:6c:c8:40:7f:5a:23:d2:
9a:c7:6c:82:91:2a:4c:85:9a:51:25:b8:28:eb:cb:
00:84:cf:b6:70:96:0e:16:5c:78:66:7e:e7:6d:ca:
2f:2e:9d:a4:71:71:6b:e6:10:d7:d3:83:9c:19:1e:
9f:d2:db:04:59:9d:79:88:76:c7:eb:cf:5a:37:de:
11:81:5e:a5:41:2a:95:f4:39:3d:82:9b:0a:cc:ba:
af:f2:85:9f:ef:42:69:72:cc:65:c5:7f:fb:0f:74:
f8:d7:f0:e0:c2:da:a5:0f:0b:32:4a:5c:9d:28:24:
69:98:8b:3d:b8:e6:b5:6b:ef:e3:0f:c9:34:53:a3:
3e:90:b7:aa:20:b9:12:d2:02:e4:65:bb:b3:1b:25:
b5:d8:ad:28:c1:e3:09:61:03:52:9b:51:06:09:09:
38:66:d0:fa:6c:94:2f:98:c1:70:38:12:ee:32:6a:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:58:82:B5:B6:19:79:D6:71:74:A0:C3:48:60:BF:02:37:45:75:7A
X509v3 Authority Key Identifier:
keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9d:15:a9:a5:cb:f5:fb:50:4c:7b:e9:4b:dc:6b:ff:49:53:
a2:e4:61:e3:33:7c:15:ba:3f:9f:ad:d5:b3:27:66:08:78:af:
b3:4f:0d:8a:3f:50:f5:cd:aa:b7:c4:a4:c1:21:e5:36:7a:4a:
3f:f7:7e:61:55:19:66:91:69:3c:e8:5d:e8:ff:9f:cc:5e:bf:
61:c7:de:45:8f:cf:df:b9:d2:55:82:e6:00:20:fa:53:51:23:
55:05:87:60:01:b0:0d:55:a4:b0:e4:02:97:8c:ab:d5:39:f5:
68:76:da:8b:39:bb:9c:8f:24:8d:09:c6:b1:a2:a6:d1:4b:1d:
7c:bc:12:13:cc:f9:1a:36:f5:32:45:a5:be:0b:9e:f5:9e:cc:
68:15:73:d4:6f:77:5e:84:0a:fa:1e:b8:25:3b:bc:b6:e7:5d:
18:b3:87:3c:87:15:58:26:7c:53:af:be:49:7b:0a:60:80:58:
7c:8d:f5:61:46:6d:81:19:4e:f0:d6:84:cf:68:f5:ac:90:d9:
1e:c6:2f:78:00:ec:b7:3f:ba:54:0a:24:3b:26:11:30:72:b5:
60:79:bc:7f:ed:08:a7:5c:8e:d0:14:88:e8:8a:97:df:71:44:
23:f9:f2:be:12:63:d2:fa:da:1e:7c:d7:27:e8:47:10:2b:f7:
74:0f:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:36 2025 by rpki-client