Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier: RQXH7C10ZYKxcO0GChIYo4bnIpCXl25QbceHZyYDShQ=
Subject key identifier: 29:80:C7:D0:1A:63:A7:2A:38:50:49:AE:01:F2:60:BD:88:04:57:F2
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0195E00FCA165D083AE5C892FBBC4551A729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 04:01:25 +0000
Manifest this update: Sat 29 Mar 2025 04:01:25 +0000
Manifest next update: Sun 30 Mar 2025 04:01:25 +0000
Files and hashes: 1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: ddZ83YIvB9pNXQXHH2QZx8sNxDUnbzGlZgyUYO2Mjko=)
3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ca:16:5d:08:3a:e5:c8:92:fb:bc:45:51:a7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Mar 29 04:01:25 2025 GMT
Not After : Mar 30 04:01:25 2025 GMT
Subject: CN=2980c7d01a63a72a385049ae01f260bd880457f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:8d:2d:72:9b:24:4f:18:c5:0a:09:6d:7e:
4a:8a:e3:81:f6:8e:ce:ac:06:2f:ca:21:43:ff:e0:
c6:07:fc:c6:0a:75:46:b2:9f:c5:ae:cd:58:de:6e:
06:24:34:bd:e8:88:f1:fd:f9:d7:ca:7b:d9:09:b2:
05:68:06:ff:69:9b:09:88:d1:5b:4d:e7:35:15:ec:
b3:7a:12:bb:ef:75:f2:bd:f8:27:6b:85:3e:92:8e:
e6:f5:9d:15:8e:37:df:65:cc:37:52:6b:7c:7d:4a:
63:8d:40:c9:e8:fb:2d:e8:80:36:c0:60:42:aa:76:
98:3b:39:02:09:87:5c:75:eb:02:68:10:ed:ff:51:
f0:a4:2d:01:45:1d:8a:92:a8:d8:db:8a:0b:d1:c9:
7f:03:89:77:ac:24:d3:56:17:b0:c8:17:15:0f:74:
b8:fc:62:22:ca:8b:04:1f:06:75:49:68:03:ae:17:
be:2d:ea:20:e5:28:5a:f0:94:57:95:3c:f0:35:af:
1c:5e:1a:63:c5:10:58:8f:69:e6:8f:b9:1c:16:92:
e5:04:28:08:24:ef:8d:4b:be:7b:da:54:09:98:51:
7c:44:05:7a:f7:7d:a5:84:8f:dd:e6:c4:c1:32:30:
1d:e2:ba:d6:10:af:9a:78:de:c2:38:52:b2:87:f0:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:80:C7:D0:1A:63:A7:2A:38:50:49:AE:01:F2:60:BD:88:04:57:F2
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d1:ee:47:96:96:86:63:f4:6f:19:a1:2f:02:ac:18:e6:71:
b1:1e:b8:e3:55:fe:8a:7a:92:c6:19:12:85:96:00:c8:d7:40:
64:70:87:d3:ed:13:5e:ef:3f:29:6f:9f:e0:ea:d7:53:1e:fb:
03:7c:95:8e:40:77:60:39:df:d3:da:34:da:10:d9:38:53:d6:
74:f0:96:a7:e4:fb:45:93:0b:65:26:e1:e3:b2:35:64:06:57:
e3:07:f2:79:6f:9b:6d:fa:b4:8b:f8:6d:f7:43:70:da:e9:03:
ac:78:59:e8:1c:6c:f2:c3:ae:e3:9a:9c:92:f7:45:ba:3e:85:
a6:30:4a:73:15:47:26:b4:44:b2:9d:0b:8c:75:73:c5:c6:af:
d1:c8:3e:28:70:27:94:4e:2b:2a:12:1e:c8:ba:3e:f2:b6:88:
ac:68:e4:ab:66:ed:58:0d:8b:34:91:d0:90:2b:be:ff:b0:fe:
b8:f3:42:9f:93:d1:54:e9:c8:7d:0e:22:1f:d9:49:59:61:97:
9d:97:03:05:84:ca:41:2f:21:60:52:10:fb:b9:16:4d:97:27:
c2:a7:21:a9:bf:80:5a:5a:e3:06:4a:b4:b9:4f:87:d9:ef:ef:
83:ed:0b:b1:bd:03:6a:13:f9:87:21:07:68:1e:b3:b9:9a:b5:
15:71:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:31:51 2025 by rpki-client