Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
File: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft (raw, json)
Hash identifier: 6APKk1aXRNyOcB/esaS5yBdphKRIiC0rKJgC6WCtTu8=
Subject key identifier: 98:D4:13:DF:96:27:FB:D8:16:C9:CD:3D:5E:92:F9:04:A1:F5:00:8E
Authority key identifier: 05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
Certificate issuer: /CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Certificate serial: 0194BC72C6A1B0016C62905A3AAA0928D129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
Manifest number: 06A4
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl (hash: Z6MltG4jyS8auBO8nEKNtT/FuMH5xcHROO8iHZSjlPU=)
2: kZOSQmU6A2elFsqdm-zFawpP2VM.roa (hash: bGe5j2ABlU0093SdrMDiQuuHNz672BXZ6vQ6WijSw+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:a1:b0:01:6c:62:90:5a:3a:aa:09:28:d1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052b10e547e89ff6c7b39b6ca97fb16b3fdfbe4f
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=98d413df9627fbd816c9cd3d5e92f904a1f5008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:ed:fe:7f:30:11:8a:99:61:13:2f:1c:15:
dc:fb:18:4c:6d:6b:03:92:8c:c8:aa:52:71:ec:72:
31:a5:bf:71:2a:f4:c4:29:d2:14:08:44:08:00:e6:
9e:c1:60:7c:c1:e0:95:84:43:78:0e:33:f0:46:de:
5e:98:8a:a2:24:09:96:e0:4d:24:51:c5:60:55:f4:
3d:3c:77:a4:aa:e3:19:86:69:aa:eb:91:a9:a6:f4:
a7:38:23:89:61:4a:e7:5e:ff:58:48:5b:67:24:5f:
98:05:a2:5e:9f:28:d3:af:13:8f:33:8a:1a:ab:d8:
e7:46:a4:06:b6:8a:60:21:04:21:c1:a9:68:ad:3c:
3d:05:d8:80:c3:42:4f:bc:ae:1e:19:a9:40:77:6d:
fe:a2:fd:13:62:42:f1:46:2e:60:17:23:fd:8c:1d:
6f:3a:96:b3:26:13:34:27:db:d9:c3:86:a1:61:ab:
cc:6a:64:c7:28:61:6b:92:44:92:c8:dd:00:77:48:
c6:cf:e8:76:f4:dd:eb:67:c3:bb:fb:70:b8:9c:23:
81:a3:e1:93:47:dc:2d:9f:2d:ff:05:bf:90:89:72:
44:62:96:c0:18:ae:2b:87:c2:2b:d8:93:8c:70:a8:
a9:0f:fa:c4:65:26:94:e8:ab:62:00:7f:8c:4a:77:
24:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:13:DF:96:27:FB:D8:16:C9:CD:3D:5E:92:F9:04:A1:F5:00:8E
X509v3 Authority Key Identifier:
keyid:05:2B:10:E5:47:E8:9F:F6:C7:B3:9B:6C:A9:7F:B1:6B:3F:DF:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2aa218-7e1e-4994-8cb0-1f76e9dcff92/1/BSsQ5Ufon_bHs5tsqX-xaz_fvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:13:ba:7e:40:ae:28:72:a0:06:25:9d:31:5d:ab:39:56:c1:
94:18:4b:bb:84:5e:c4:96:ee:0d:f9:33:ed:92:a9:62:fa:53:
51:95:77:e9:aa:71:13:1e:ef:19:4a:ac:22:bb:ff:52:ce:e1:
45:16:a4:9f:d6:57:87:b3:ac:38:6d:9e:e1:b4:98:28:89:fe:
5d:1f:ac:e8:98:d0:77:32:25:18:e6:4e:fc:f1:fa:87:42:56:
e5:b4:d6:09:0b:80:43:ec:9c:44:ec:fc:f2:12:8d:f9:7a:33:
1e:37:90:17:ad:f2:e3:0d:fa:f6:73:9b:8c:be:a7:66:d2:b6:
cc:8b:4f:1f:26:8c:ae:96:24:30:99:2c:da:cc:95:1f:02:a3:
76:61:a2:ef:72:ca:d4:1a:d3:0b:90:a2:c5:0d:ed:82:31:3b:
b7:00:ba:30:b8:25:79:e7:a0:15:f2:52:64:4e:7d:8c:4e:04:
43:38:2c:75:df:28:a0:5b:9a:2d:dd:89:75:1d:98:a7:36:21:
72:8c:f7:e5:45:fb:a2:5d:04:10:8e:fb:1d:cd:43:8b:29:3b:
29:fb:e1:9f:45:44:e2:1c:eb:2d:1f:70:65:c4:d5:1f:50:bb:
e8:bb:52:88:f9:15:08:4b:b6:65:36:f2:57:4c:1f:39:83:42:
02:8f:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:59 2025 by rpki-client