Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: fQBwP27bmpTkO5fwygxabC8FkO633rB4x2cXabb7dhk=
Subject key identifier: A8:5C:95:E0:7E:4C:39:9C:2A:18:00:34:14:AD:21:A0:82:2B:20:95
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 0195E1903B85967FBC4359DE576CB74ED2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 11:01:20 +0000
Manifest this update: Sat 29 Mar 2025 11:01:20 +0000
Manifest next update: Sun 30 Mar 2025 11:01:20 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: Eg5lVj8k2kVs3aSVf8XjoLq94dkWIvIOxQD1mlClhm0=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:3b:85:96:7f:bc:43:59:de:57:6c:b7:4e:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Mar 29 11:01:20 2025 GMT
Not After : Mar 30 11:01:20 2025 GMT
Subject: CN=a85c95e07e4c399c2a18003414ad21a0822b2095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:92:bb:72:3b:4a:09:2c:45:57:ad:5c:7a:
07:d1:6d:60:c4:99:11:6c:aa:75:32:d8:ba:fa:86:
32:e5:f7:85:70:e7:73:45:f7:e0:64:b5:6d:07:85:
eb:49:8d:a7:18:d7:65:e8:ff:67:66:17:d6:22:f2:
84:85:a4:c2:ab:e3:a2:27:f8:da:46:af:96:bc:e9:
f5:e9:35:0f:07:39:3b:23:97:53:c0:a1:be:73:b2:
e7:92:90:d0:c8:79:75:53:6f:f7:4d:7e:f8:4a:97:
bf:57:a5:f6:aa:b9:a3:02:c5:5d:a9:95:b1:ec:ea:
b0:e9:fd:69:f4:00:00:46:79:c8:64:a8:99:08:a5:
21:1d:1c:49:30:b0:28:bc:5b:f6:d3:10:3c:a2:87:
ea:e5:74:a0:27:07:95:5c:ba:ea:fe:d4:07:33:5e:
17:4a:3d:19:2e:13:78:ba:73:66:3a:c6:0f:c6:ad:
94:83:09:bc:bd:6f:81:89:4e:4a:0a:e6:f2:d7:9d:
87:2e:57:1a:f0:e0:ac:de:d1:70:f3:b3:df:f5:cd:
90:8e:46:11:4f:aa:d5:6f:5b:2b:c8:af:24:b7:87:
08:f5:36:63:ff:7e:bf:4e:00:cd:95:72:87:9f:5e:
fe:07:c2:d1:31:5d:58:8e:98:a7:75:f3:a7:ff:aa:
ac:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5C:95:E0:7E:4C:39:9C:2A:18:00:34:14:AD:21:A0:82:2B:20:95
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:0a:9b:6c:8a:e7:c4:df:23:48:85:64:52:12:6e:95:df:
d8:d8:df:5d:84:3b:db:49:4d:13:ce:50:36:7b:86:ea:d9:e5:
1f:34:ae:cd:1e:3b:95:c8:ed:9b:c6:56:cc:4a:ab:3a:a5:c9:
5c:cc:76:a5:9f:86:31:28:55:81:57:15:69:69:5a:16:f3:9b:
99:9f:6f:c7:9b:07:07:29:e5:24:fe:3a:2c:5a:f0:9a:20:e5:
67:d7:a7:66:b4:ac:8b:ff:ab:e1:e8:f9:e9:70:6e:3e:f4:ef:
c5:d0:49:de:4e:72:6a:d8:8b:3c:77:65:45:3c:aa:84:ed:59:
33:6e:7f:d4:36:df:08:dd:f0:4e:f1:fe:17:0c:e8:27:ee:9e:
f1:df:cd:8d:b2:42:2e:5e:56:48:95:77:4d:b5:7e:47:cb:96:
be:25:5a:af:9f:74:38:98:d5:d6:b8:89:d9:9a:58:b7:c2:12:
72:0f:8e:75:74:87:01:f6:08:c4:08:55:05:dd:1d:6b:6a:3d:
e0:3b:71:cf:1e:50:7b:69:b9:45:f8:5f:3c:0f:e1:81:e5:92:
ef:19:33:9a:fd:0e:09:ca:6f:9a:92:e0:37:ca:63:a0:af:59:
26:0f:0b:aa:88:87:fc:6d:4d:54:ef:5d:cd:0c:f1:ef:d5:06:
ab:f8:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:39 2025 by rpki-client