Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File: BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier: +03VBiX8wBrTAYcWP6dAvAxKY9eVy/9dWiccNBh/55o=
Subject key identifier: CA:FF:3E:F8:A7:81:4F:85:60:78:E9:E6:BE:CE:56:70:8C:7B:F3:4B
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer: /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial: 0194BCAA37A04C2DA8BFC9FA8DE547C00880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: m9xbTg/FRcgzJOKor7NEuSOjB4lzTS/9O+7AeDb8MmQ=)
2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:a0:4c:2d:a8:bf:c9:fa:8d:e5:47:c0:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=caff3ef8a7814f856078e9e6bece56708c7bf34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:90:04:0e:6b:a0:7a:66:63:f5:85:87:17:
50:e2:38:86:16:c2:79:37:cb:1a:58:f9:aa:9d:46:
7a:39:e1:a3:59:ad:8f:76:a8:7d:00:28:c7:3f:de:
97:8e:5e:4b:d1:73:4d:3f:c7:b7:69:a6:27:29:c8:
4e:48:a6:40:bb:99:6e:f9:18:cb:01:5b:3f:9e:5c:
67:06:69:7d:58:eb:01:79:97:b9:91:b5:d0:02:5a:
0f:4a:30:ba:a1:bb:fd:d7:f4:45:7d:96:14:61:37:
08:95:2d:ff:16:81:e5:2f:17:30:b6:2c:81:50:43:
d5:3b:5a:a6:5b:5b:74:c1:ce:5a:69:d0:2d:d3:19:
a2:e2:4f:a2:00:1b:51:38:97:f8:f5:cf:25:a1:94:
0c:e6:c2:f0:e3:cd:b6:bf:59:69:8f:d0:db:04:16:
4d:97:73:de:33:81:5d:34:cd:92:4e:85:bc:92:61:
a6:e3:1d:7e:36:b3:8b:6f:95:10:24:7d:e0:a7:c4:
71:ff:cf:63:7b:b0:23:57:d1:66:81:f7:b4:29:e8:
15:cf:8f:b6:0c:81:3f:31:67:d6:c3:75:0e:6d:59:
77:4d:29:5a:34:d9:29:3d:46:e4:60:60:bd:f4:66:
97:64:62:c9:60:a9:ef:75:65:5e:07:e9:65:f5:93:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:3E:F8:A7:81:4F:85:60:78:E9:E6:BE:CE:56:70:8C:7B:F3:4B
X509v3 Authority Key Identifier:
keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fc:bf:ea:ca:b6:93:9d:3d:17:c0:09:63:14:e1:a0:fc:7c:
c5:da:6d:3a:ef:1b:39:01:63:d6:71:79:d4:9e:43:90:c4:d0:
41:04:46:d7:fc:23:9e:34:95:ff:2c:86:bd:a1:fc:f7:3e:e3:
84:b1:e5:8d:e8:2a:5c:2b:e5:93:b5:3b:db:83:60:1c:5d:0b:
09:ac:ba:02:28:d5:5c:f3:90:87:b3:91:09:9a:3a:87:34:11:
d9:9e:98:11:84:17:50:62:33:18:f1:92:0b:e6:9f:67:0f:1e:
0d:e8:c1:ea:a5:62:cb:be:bc:95:62:dc:85:eb:cf:18:ae:6f:
c6:fc:33:c1:9a:7f:a5:2b:da:ca:ef:65:e3:1e:e9:ca:5c:39:
a4:dd:9f:bd:e2:d1:8f:68:89:44:02:12:7a:43:05:7f:3a:2a:
31:0d:78:cc:b5:ec:1c:e9:b1:a3:40:be:0c:59:ac:b4:ab:80:
7d:95:80:80:26:d0:a6:6b:fd:3e:be:a7:98:6e:7b:0f:52:83:
6e:9d:33:8b:fe:ea:e4:50:d5:3c:19:33:b4:44:04:f6:60:09:
01:34:89:5b:f7:a5:c4:6d:f1:6b:a5:43:d6:eb:f5:8c:00:2b:
ab:c3:f8:ae:03:a9:85:38:25:f1:8f:1f:ad:52:a2:56:b4:f2:
a0:3d:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client