Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
File: BCSFBLVFValEOwKjPTUakChju5k.mft (raw, json)
Hash identifier: pCVJ9d9fMcAs7tdTbx913bIo+QzSY8wO7zTughmbF1k=
Subject key identifier: 29:F8:A8:63:1E:78:FF:BA:BD:66:AB:15:10:0A:AA:C6:EB:29:0E:0D
Authority key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Certificate issuer: /CN=04248504b54555a9443b02a33d351a902863bb99
Certificate serial: 0194BCE0CDD5C0AF418141A6DEA3621889D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: BCSFBLVFValEOwKjPTUakChju5k.crl (hash: 3qWbaswFK3GceOxJh4iluRJSTvbud9pzhiWlpMPM0WY=)
2: b8vdOmpolmwnMi7asOpMYmI4_jA.roa (hash: 9A3fwbUf06Rc6Df5WmKqMxfDfFV1g3qJ0g03eRw6WqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:d5:c0:af:41:81:41:a6:de:a3:62:18:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04248504b54555a9443b02a33d351a902863bb99
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=29f8a8631e78ffbabd66ab15100aaac6eb290e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:cb:46:d3:e6:cd:64:79:87:f0:de:80:31:
55:ee:f8:0b:71:1b:9f:76:fa:d4:60:38:d5:07:87:
6c:88:69:6e:4a:93:fd:97:49:10:9d:e6:15:d5:6a:
e7:72:9b:08:1b:e6:55:29:d5:d2:9a:9c:9c:e0:30:
ab:4c:f4:12:44:bf:38:d6:25:ae:3f:5d:d9:9d:4e:
86:9a:0c:ff:49:45:af:a2:d2:26:16:22:fa:41:31:
1d:4c:75:36:95:08:89:24:82:ff:90:03:cc:82:09:
1e:40:2e:8d:95:21:6c:d7:0f:29:3b:98:1e:c1:26:
db:46:5b:c0:4f:c0:fe:63:ea:16:81:74:4f:33:36:
8b:2c:2b:a8:39:07:47:32:20:c3:dc:bb:f9:2f:64:
e9:11:46:c6:10:b8:3d:f5:1a:b8:b5:4d:ac:ad:8e:
61:75:aa:5a:d9:9e:35:98:c4:48:25:ef:f2:07:e2:
1f:17:e7:f9:60:2d:f4:a4:3d:8e:f1:66:f6:55:21:
12:a0:cb:84:a9:cc:7f:87:d9:e7:7b:a3:46:a6:cd:
d3:e1:db:63:ab:69:03:96:04:23:22:46:95:e2:1d:
b9:35:0f:c0:71:de:98:6b:81:d8:a6:83:27:d9:75:
dc:d9:ca:58:67:5a:f2:49:2c:7b:3b:74:e9:9e:c8:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:A8:63:1E:78:FF:BA:BD:66:AB:15:10:0A:AA:C6:EB:29:0E:0D
X509v3 Authority Key Identifier:
keyid:04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:77:77:e6:ce:f7:3f:b9:af:85:f3:db:3a:e9:06:4c:e4:7a:
73:c6:0d:8c:fe:88:6c:75:2e:47:06:1b:ee:a5:50:e4:b2:76:
71:9e:f1:c2:a2:ae:8b:18:72:05:00:8e:fd:0c:e4:bc:6f:84:
02:3a:1b:5d:d0:88:3a:d7:10:37:8b:a8:d9:5a:07:d5:9b:e2:
d0:05:7c:ff:1b:56:7a:c1:2c:5f:13:41:e3:b7:2d:0f:b6:d5:
e8:e6:d5:03:6d:8b:c8:65:eb:f5:6d:00:be:a1:b7:e1:c3:13:
fd:fa:b4:21:66:cd:f0:a9:ba:d4:6e:f6:bd:88:e3:75:fe:78:
a5:d0:64:08:3f:f9:c1:fb:ce:38:dd:34:39:28:b2:c8:c8:7d:
f5:57:50:af:4c:96:36:1e:57:01:99:82:47:1b:f0:60:91:12:
96:84:5c:ff:8c:c1:b1:7d:dc:af:a8:63:3c:ce:11:a8:6f:fd:
8e:7b:08:98:09:d2:d7:d0:37:65:f2:90:a8:d3:2d:00:7b:53:
d9:26:73:3d:06:cb:44:56:af:41:8f:9b:8a:6e:93:c9:03:20:
3e:4f:26:14:1e:3f:ae:d3:ef:53:87:f0:c2:03:a4:74:a4:13:
ed:13:c8:2f:39:a9:67:61:77:a6:fc:92:04:ea:eb:08:5f:d7:
23:0d:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:25 2025 by rpki-client