Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File: BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier: +hIEMEYg1p8AqNCdzXa9wAyQF3QdQynu29sEOKfI2UU=
Subject key identifier: 40:48:88:52:49:6D:EA:D6:2F:7C:19:F6:A2:0D:84:89:9E:CF:58:AB
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer: /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial: 0194BD17D12EC1B6A463A06CA9486691B2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: ErOe8Qb+It97UtGCI4KqQVzuO3R1+Y4YS/6iXj21YTA=)
2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d1:2e:c1:b6:a4:63:a0:6c:a9:48:66:91:b2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=40488852496dead62f7c19f6a20d84899ecf58ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:21:0e:9d:7b:cb:51:f0:00:9d:eb:ac:2f:
af:19:18:10:b9:be:be:31:ca:73:42:8f:60:96:fb:
3b:cd:9a:3e:75:c2:1b:42:af:63:15:b4:89:5b:ee:
9a:37:7e:78:3a:12:ba:08:27:a9:96:bd:05:95:5c:
0b:c4:5b:7c:3e:12:ec:fa:f0:08:67:77:33:26:04:
18:85:9c:a4:03:fb:43:36:5a:6f:c3:62:78:58:77:
5c:89:74:bc:f4:96:83:19:49:ab:43:b8:ac:48:42:
0b:31:ba:76:a0:71:68:40:2b:1a:2c:21:ac:c9:ad:
86:e9:63:64:14:d2:45:3d:fd:c5:b9:25:f1:45:9a:
ba:e7:5d:9c:70:d3:93:be:03:f6:82:19:c9:e1:7a:
7e:4b:d9:bd:76:ee:98:15:16:18:3e:6a:65:d6:0d:
3b:6f:2c:c3:07:c6:49:b3:14:3b:50:ac:9e:c2:ca:
8d:f8:3c:73:f9:e4:7d:58:b3:5c:db:d2:71:17:30:
4f:60:d5:6d:8a:1a:41:8c:52:02:c6:0d:ae:cc:d5:
54:0e:fc:af:1e:be:41:da:1a:64:b9:57:2f:bb:44:
74:a0:ef:3b:1c:56:ef:4c:db:f2:c8:47:75:40:95:
9b:91:66:3c:ca:06:b8:ea:db:f9:db:b9:69:e8:72:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:88:52:49:6D:EA:D6:2F:7C:19:F6:A2:0D:84:89:9E:CF:58:AB
X509v3 Authority Key Identifier:
keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f2:44:c2:b1:83:10:08:94:ba:f0:f9:d2:62:83:b7:b3:67:
9b:3d:e3:0e:51:7a:35:50:bf:5b:50:17:62:d4:f6:09:44:40:
25:0b:ef:5f:c1:59:ab:d7:25:5d:c3:47:83:8a:df:4f:27:70:
70:c3:67:75:51:13:30:42:bc:ba:63:64:06:5d:85:5b:91:1a:
57:96:1f:10:f6:03:97:eb:a2:a5:96:ff:8b:1c:20:e4:24:95:
a3:92:ba:45:50:c5:79:ba:0d:d0:bb:a1:ed:ab:57:45:db:bf:
39:1c:7f:95:e4:60:78:84:b5:64:fe:a7:51:dd:c5:d7:d5:a9:
0c:47:f3:27:fd:80:69:b1:e2:e3:b7:06:3b:e3:29:55:17:c1:
81:16:bc:1c:31:a2:61:f5:08:03:2a:e1:ed:ef:fb:46:2c:2a:
fc:74:ee:67:32:ff:31:fc:9c:ac:84:ce:b4:6c:0e:a5:af:64:
39:70:1a:10:f4:17:9e:00:d1:36:f4:b6:ae:38:a8:c7:6c:93:
44:32:8e:6a:d4:cc:a8:8d:ca:61:0c:9e:6c:94:19:df:d3:99:
01:0b:3f:51:67:5c:9a:af:62:91:b3:a8:c4:b9:89:50:1d:34:
09:dd:38:ed:53:50:5d:90:52:80:7a:e3:bd:f6:6d:dd:a0:4c:
2e:54:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:15 2025 by rpki-client