Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: M0GBJh3Tox4UvFodRxEsH5nti7HY/Ev1VVSiBTwJyj8=
Subject key identifier: 9B:26:CA:CF:53:AC:CB:5F:7D:F0:24:37:BE:03:B5:93:7A:A5:DE:42
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0195DFD92C04AD6B58032A3FEA252C893D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 03:01:46 +0000
Manifest this update: Sat 29 Mar 2025 03:01:46 +0000
Manifest next update: Sun 30 Mar 2025 03:01:46 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: nNmyuZ2YZpyru7x/2vVpggF71vVQCmQtFvAlcmp47dM=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:2c:04:ad:6b:58:03:2a:3f:ea:25:2c:89:3d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Mar 29 03:01:46 2025 GMT
Not After : Mar 30 03:01:46 2025 GMT
Subject: CN=9b26cacf53accb5f7df02437be03b5937aa5de42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:f9:12:2e:ab:7b:22:d1:f0:98:bc:84:bc:
c4:4c:25:e3:73:19:43:4c:1d:b3:60:0b:21:da:04:
6d:98:fd:81:82:39:3d:a0:bf:12:8e:88:e0:49:09:
fe:08:14:fd:ab:4a:7c:83:67:4f:e7:2d:7d:c6:e9:
8f:71:3a:c6:1d:b4:a4:6e:e8:43:02:ae:2f:1b:6b:
61:49:99:f9:f9:a5:92:bc:41:43:0f:5b:14:af:00:
cc:e3:bf:c8:2d:31:42:0a:1c:e6:3b:6b:24:da:97:
20:82:5d:ad:c2:93:a4:9f:26:54:60:f7:53:2e:c8:
21:4c:53:78:19:ba:f1:dd:b7:b1:5c:72:a5:22:d2:
cc:dc:1a:22:51:00:2c:8d:58:0d:3f:a2:40:8b:c4:
28:c2:56:4e:41:fc:86:35:0b:7d:60:95:8e:c0:7e:
bc:9b:40:e5:ea:74:b8:4d:00:e5:32:86:8f:2f:87:
f5:15:d0:ce:df:3d:a7:e8:f8:67:bb:8d:41:63:08:
ef:9d:86:47:f5:ff:cd:f4:91:39:ae:ea:02:da:86:
ea:18:43:01:b7:01:9b:1b:5c:e6:0c:33:6a:ea:8e:
e7:e8:04:41:5e:1f:be:e0:18:fd:68:be:91:97:bb:
0b:e4:1d:06:93:84:6a:e0:ec:db:54:bb:8d:bb:7a:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:26:CA:CF:53:AC:CB:5F:7D:F0:24:37:BE:03:B5:93:7A:A5:DE:42
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d2:63:3c:f2:cd:80:00:61:c6:a6:f4:c3:75:fd:26:92:14:
a5:40:23:95:92:63:a2:d5:45:a4:6d:3a:33:58:2a:56:da:83:
21:b6:ba:d2:ce:12:91:37:10:44:b0:65:b7:76:36:e7:61:b4:
3f:29:c8:b7:ff:8a:1a:b2:79:04:52:d1:7b:ce:ab:15:6b:6e:
05:1b:2c:f3:e3:3e:88:6f:d8:56:12:52:13:4f:3a:b3:71:42:
5a:8f:e0:18:bd:06:8c:2e:91:38:c9:1d:4a:ee:ff:ee:e7:a8:
4b:ee:ec:fd:9c:3e:95:8c:03:a1:ad:a4:26:08:80:f3:91:33:
46:78:30:ef:3a:1e:25:3d:e3:e4:33:67:0c:45:8d:7f:63:b0:
48:d1:29:07:54:65:75:9d:7e:e1:99:8b:c4:b7:8f:e1:73:1e:
92:73:e0:61:10:24:bb:d3:b3:5f:ce:84:c2:9f:99:cd:e8:7e:
3f:ff:0e:cf:58:20:6e:6f:1f:7f:70:dd:f2:0e:08:f4:50:14:
a1:bf:e9:52:8f:1e:8b:dd:81:1a:0b:56:07:a8:45:d1:cb:6c:
2c:5f:5f:15:2d:fc:a1:42:29:39:a4:c4:6f:67:ba:9e:af:0c:
26:64:45:d5:27:60:31:09:b1:59:9e:0f:1c:18:b8:e3:0f:08:
66:04:5e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:58 2025 by rpki-client