Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier: qpl2uRT5EwJda+DHPzK9W1bdnU6iNoe0T9TwibFou84=
Subject key identifier: 3A:79:41:FE:20:4F:0F:2D:03:E1:9A:07:26:9F:F6:07:35:AE:6F:2E
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial: 0194BD4EA1AB4C007DAB206059574F0AC31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number: 0FDC
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: ou/smRXu5TtXNZanUQffqhd0utPqVd38jno3WLSIddU=)
2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:ab:4c:00:7d:ab:20:60:59:57:4f:0a:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=3a7941fe204f0f2d03e19a07269ff60735ae6f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:50:8b:1e:35:d6:ce:d7:cf:01:8a:6c:de:
f8:eb:61:7d:46:84:5f:f2:12:47:d6:87:1c:8b:31:
14:6a:e8:57:5b:80:90:bd:64:52:eb:37:a9:57:72:
78:02:7f:78:7c:e3:b8:28:43:a0:fb:78:11:d2:cf:
82:9b:f6:5a:e5:c4:f8:9d:e6:ce:ec:1e:9d:6b:27:
94:02:15:0b:e3:c2:d8:ce:e3:63:e2:f1:23:bb:b8:
12:b1:f9:4e:c4:61:ea:22:4b:9a:e2:4a:af:5b:43:
3a:f0:2e:ea:7b:94:97:e0:17:00:fe:11:26:d2:31:
94:a1:98:f5:4a:f4:ee:aa:fc:ba:9d:6a:d1:02:16:
51:3e:89:f1:04:b6:8b:f5:3e:d4:07:c2:d1:04:43:
df:f1:11:04:aa:85:7f:1a:d4:9f:70:7b:4c:c9:5f:
e2:0f:57:7f:af:ab:64:44:1a:26:b9:38:14:52:58:
34:ae:1a:8d:9f:15:7d:46:29:0f:d4:f0:9d:cb:91:
2f:93:62:d6:a8:83:f4:d7:2a:76:0d:9c:14:9d:8b:
92:9c:9d:84:be:09:53:82:7e:2b:20:83:23:d8:0e:
6b:bb:16:74:08:ab:79:a6:8b:92:f8:ca:44:4b:73:
99:a1:42:5e:5c:71:66:ed:5d:c5:e7:c6:1d:50:e8:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:41:FE:20:4F:0F:2D:03:E1:9A:07:26:9F:F6:07:35:AE:6F:2E
X509v3 Authority Key Identifier:
keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:42:d5:3d:43:a1:57:a2:5f:f2:9c:84:e8:63:68:b2:77:
df:5b:18:4b:c6:1d:8f:27:a7:e9:bb:69:2e:fb:25:dd:f7:e1:
e4:28:fe:71:32:70:9a:06:e7:87:23:9d:bd:89:44:65:c0:14:
36:88:b4:a6:19:68:6d:ea:39:4e:f6:83:9e:15:62:42:6c:e8:
39:de:aa:c7:ed:38:52:9a:63:c3:7b:f4:52:6f:3b:ce:8d:5f:
5a:cf:bd:76:c2:9f:31:37:59:54:32:60:61:e8:c6:3f:33:f0:
60:96:91:fd:21:07:b7:c3:db:d8:34:ef:4d:6d:4f:1b:4a:36:
fb:c9:58:0a:dc:17:70:80:24:99:36:f7:65:a2:19:76:fe:35:
7e:d5:52:8c:e2:c1:b9:36:6d:a4:be:27:c4:8d:af:f4:78:fe:
b1:d3:3f:4f:72:d9:af:42:ac:fc:a2:81:4a:9c:34:20:cd:8d:
09:bb:12:1e:15:42:fd:74:ef:bc:06:f4:81:a3:e2:83:43:47:
3e:63:01:59:1d:65:bb:8e:a5:a2:de:bf:96:d4:c4:6c:c7:c5:
5b:83:23:62:f1:36:bb:35:8e:bc:c8:25:4b:53:ac:b3:25:cd:
86:18:e8:f0:aa:1e:45:4c:53:9c:d9:c3:08:7a:08:9d:a0:a8:
e2:ad:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:31 2025 by rpki-client