Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json)
Hash identifier: VSiuZfevGhNfyssD06rvRZdcMpDkSpXygxNjdCJ6Mgw=
Subject key identifier: 2A:F1:72:F9:B7:4F:E2:5B:92:E7:1E:EC:26:73:94:32:6C:E8:54:C9
Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Certificate serial: 0194BBCEAA594F1D449576BE4E631798D206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: luXl0s8kuPuVjz8wk4nrZl6GeSie+caNLZ3bZQeVgQ8=)
2: xRwwMnKnfEQ513VQAW9CD2Ac8sE.roa (hash: RHgqnixlsBc3hPamOZsORKYSG7J0HGKTVT5S0z5UDvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:59:4f:1d:44:95:76:be:4e:63:17:98:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=2af172f9b74fe25b92e71eec267394326ce854c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:d9:74:13:63:ea:72:75:b1:d6:b9:f4:dd:
4d:64:fc:41:8c:3c:c0:7e:2f:0e:09:5d:bd:f9:cd:
8a:70:3c:e5:79:57:73:8c:cd:55:4a:78:ca:a0:ae:
c7:ea:bd:f8:c1:b3:a6:cf:97:ca:c3:58:c5:ab:f7:
bf:3c:a3:22:dd:37:84:ac:53:31:03:31:56:65:4d:
44:15:70:63:eb:5d:56:20:07:16:ec:fc:20:18:70:
64:19:f1:0f:ab:41:c0:af:bf:ed:51:17:70:10:db:
8e:0c:cf:f8:ce:85:10:9f:e6:1a:04:6f:04:8f:24:
f8:b1:d7:23:e9:1f:4f:74:d4:f4:33:8d:8f:68:d0:
11:62:74:f6:d7:e2:3f:cb:db:2b:ed:ea:9e:34:be:
3d:e2:ac:dc:a5:8d:26:d4:96:a6:ab:ad:36:6c:d4:
7e:fe:2f:d9:26:0c:9b:17:d9:86:1f:c6:dd:ee:99:
0d:b3:b5:d4:c5:c1:1a:0d:3e:90:a7:b2:a4:0b:81:
cd:65:27:4c:bf:66:d8:f9:20:64:8c:8f:c8:22:2e:
c6:8b:7b:19:1d:05:88:d2:ef:82:ba:db:6c:75:ca:
ca:82:55:e0:e0:ed:bc:db:62:dc:2a:6d:ef:66:d8:
0c:2c:df:e6:85:6e:42:94:a1:14:00:b7:fe:63:1a:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:72:F9:B7:4F:E2:5B:92:E7:1E:EC:26:73:94:32:6C:E8:54:C9
X509v3 Authority Key Identifier:
keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:35:39:67:da:ab:84:db:5a:77:5d:8f:6c:11:0f:f8:cb:
2b:c7:f8:d0:24:31:33:36:5c:ce:cd:b4:59:2d:c2:a3:98:18:
29:1b:07:bc:ba:08:61:94:09:30:24:0a:d1:04:b3:03:0f:8b:
99:56:91:9e:ae:d3:44:2c:b9:60:45:b9:62:8f:38:18:64:d6:
68:ca:87:2c:3e:df:82:39:ed:b6:4f:54:e6:2f:73:8b:46:ff:
8d:24:2e:6b:86:26:85:f0:c2:04:6a:93:8e:6f:c9:3e:1f:21:
da:da:88:fd:70:cd:12:f1:4d:be:a6:39:91:39:72:32:d2:cb:
29:16:6c:fd:b2:d1:23:06:b4:48:f7:46:ce:a5:41:bb:a3:2f:
e2:d2:70:e2:7f:cb:6f:94:2f:59:c5:64:6d:d2:b5:4b:b8:a8:
ec:3a:9b:63:63:6c:2c:88:ed:26:ed:94:f6:6a:fc:d0:30:29:
b5:74:3d:88:c8:17:ca:76:c9:8a:3e:73:57:f0:72:b8:e4:ba:
9c:f4:82:2f:19:19:95:02:0a:62:63:15:90:7e:da:a8:a1:5c:
cb:9b:50:35:79:1d:75:8a:f1:10:b3:6b:ff:50:01:ba:65:71:
a1:14:43:b2:e7:86:e2:3d:68:64:bf:95:10:91:0e:fe:a8:d3:
33:4e:0d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:44 2025 by rpki-client