Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: uZaGFUl69UtTXcITpFtfTejpvkq62Nb/fKGWyReGn54=
Subject key identifier: 45:B6:23:76:63:30:7F:DE:F2:23:C2:B5:81:79:E8:2A:22:54:C8:3D
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 0194BCA993526CB7A553809FD79702DB9234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 1263
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: ryzW02xJSToIGFrsIqg7J3lWeR8XUIK1dKfebJjmhCo=)
2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:52:6c:b7:a5:53:80:9f:d7:97:02:db:92:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=45b6237663307fdef223c2b58179e82a2254c83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:f5:b7:7b:a5:e5:4d:0c:e0:18:38:b2:3d:
bc:0e:d7:16:11:4a:98:ee:8d:ec:32:84:da:b8:f3:
17:df:f9:d2:12:d2:bc:09:62:d6:c6:29:8f:9c:1f:
2c:93:4a:b5:3d:4e:1b:df:02:41:6b:57:47:54:70:
76:05:ae:0c:7f:66:88:4c:1d:ca:80:ca:65:bd:16:
71:16:d3:51:ea:40:d5:1d:a9:a9:2e:0f:f0:75:59:
a4:ff:86:72:26:2b:a1:3c:97:0d:cb:1b:57:c5:78:
ec:23:1a:40:5d:0d:e4:c9:68:cf:76:7c:57:31:ba:
d2:81:82:09:1a:bf:ba:0f:57:88:44:f6:e7:82:ea:
bd:a1:44:db:0c:28:39:9c:db:6f:4d:01:37:52:7a:
ea:30:79:a1:cf:b0:93:da:2e:7e:77:06:c6:f9:dc:
1d:e3:03:ce:cc:16:5f:65:e3:10:6b:dd:13:2b:17:
b7:8a:85:f3:10:31:de:70:9b:6d:27:bf:a6:37:78:
9c:7f:fc:ee:6c:b6:3a:27:b4:7d:9c:26:1e:2a:b4:
d5:52:b5:dd:73:74:f7:63:fc:c7:81:5c:75:1f:20:
1f:de:cd:67:4c:8b:f1:da:91:3f:93:cb:e5:61:0e:
38:4c:a8:a0:e3:a3:19:a6:61:25:30:5e:02:c9:7b:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B6:23:76:63:30:7F:DE:F2:23:C2:B5:81:79:E8:2A:22:54:C8:3D
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:84:e8:75:97:c5:7a:12:7d:ee:bc:a7:3d:83:7d:ba:28:
4f:c8:03:78:43:24:be:6c:c6:67:e2:0a:14:2b:64:79:74:41:
8d:1a:e0:5f:12:a2:c0:9f:0a:9d:f8:73:86:a4:5e:1b:5d:bb:
32:30:c7:60:9b:30:ca:3e:d8:87:53:bd:d1:7f:fe:45:c1:88:
c7:53:32:1d:5f:19:48:a4:6a:90:ac:fa:66:94:23:45:bb:14:
13:64:96:c3:73:38:3a:cb:83:53:cc:11:dc:a0:4c:52:e3:41:
7b:bf:5c:d0:1d:a8:13:a2:c0:55:20:8b:8f:8b:5d:ab:6d:99:
a4:1f:cf:49:f0:1a:08:4b:17:5c:15:d3:97:fe:19:52:0d:26:
47:45:7f:de:60:3d:f3:3d:13:00:a8:86:d1:c0:a3:e0:0d:e3:
d0:9a:0e:79:03:a7:1c:e1:4c:ad:1e:8d:09:4f:a2:3b:03:2c:
0d:f8:49:e8:2a:2d:c5:78:3c:e3:f4:d4:dc:fb:11:a3:27:fa:
df:3f:1f:d7:13:15:eb:80:63:68:20:e0:a0:98:96:be:89:0d:
7c:02:6e:d9:1d:5d:40:bf:83:99:d0:a7:3f:fe:fd:2c:fe:d4:
b3:c1:2b:e9:43:48:b2:77:34:81:5a:35:1c:b4:fc:e7:e4:fb:
97:b2:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:50 2025 by rpki-client