Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier: sTtCZz9KbSnV3oyGrdxtlkKHkz/VTbtOUJhFhyzUtks=
Subject key identifier: FB:02:6C:FE:6B:2A:0A:D9:9E:FF:87:40:C9:F6:CF:F3:FC:74:1C:C0
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial: 0194BD4EB1F14C888E69711581C6064B0B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number: 1274
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: l+EwIknRLnzaZC1ZojUTsI96PRKeh6P1qH533+yClzU=)
2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:f1:4c:88:8e:69:71:15:81:c6:06:4b:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=fb026cfe6b2a0ad99eff8740c9f6cff3fc741cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:a9:4b:61:54:80:f4:ee:55:9e:9d:16:72:
92:55:2d:f7:a0:69:aa:5b:08:6c:83:8d:2b:84:c2:
69:a0:95:e8:02:4a:92:c4:eb:d3:54:02:a6:86:97:
45:b7:84:68:33:28:34:1e:3e:b0:da:11:b0:2f:68:
02:e9:21:23:ac:c3:1e:71:ae:dc:57:30:cf:e9:5a:
16:f6:ce:6d:3d:3d:39:29:40:da:1f:c5:64:fc:c7:
e2:a8:83:4d:a7:7d:f9:6b:3f:e3:a6:1c:ed:17:16:
17:c3:70:b1:ae:a9:09:05:c0:80:f9:0a:04:a5:74:
84:c5:f9:aa:62:86:ef:ad:82:1e:e9:53:6c:6c:5d:
d9:36:25:73:22:2c:fd:9c:b8:7e:b5:01:bd:4c:51:
3c:f1:e3:91:13:03:77:8e:39:d2:e7:52:0d:78:f8:
1d:ed:72:35:7f:94:7e:c8:b3:01:dd:d4:e4:79:62:
5c:2e:4d:9c:a3:38:a5:a8:c0:ce:69:33:57:26:e1:
9c:c5:3d:12:09:b6:ec:ec:71:22:c2:ae:40:6a:0e:
cf:b6:ea:d7:9a:6a:d0:b4:f1:98:66:13:3e:59:db:
a1:3b:7a:0d:41:92:62:38:4e:ad:39:ce:5b:48:f7:
51:93:1e:36:9f:6c:12:3f:a6:c2:12:1f:e9:e6:cf:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:02:6C:FE:6B:2A:0A:D9:9E:FF:87:40:C9:F6:CF:F3:FC:74:1C:C0
X509v3 Authority Key Identifier:
keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f3:01:fe:bf:27:0b:26:db:1a:64:f6:d7:cb:71:10:59:4b:
86:bf:72:70:d0:0f:16:1a:8f:bd:5d:ed:18:f6:a5:16:f7:b9:
1d:2b:4b:01:7e:9f:04:be:93:da:82:ca:85:35:d5:ef:2e:fc:
d9:8d:64:55:d6:80:64:5f:d2:b2:cb:50:ec:5e:65:26:b1:b0:
a2:ec:23:e1:36:36:98:2a:ac:e4:8a:af:8b:52:89:11:bf:52:
6d:7e:77:91:36:60:e5:ee:2e:9b:69:97:9f:12:8f:25:8c:51:
8b:d2:aa:ef:54:85:1b:32:96:d0:1c:87:e7:fe:ef:f0:91:74:
2c:e5:c2:69:79:6b:2a:32:0a:13:d3:98:d7:3c:5c:66:79:11:
31:7a:c7:82:8a:64:4a:70:5b:a4:d4:7a:b1:55:66:4e:0c:d7:
37:ed:7f:b5:c2:fb:3a:ad:66:2b:14:ce:47:2d:85:dd:34:5e:
72:17:dc:d6:06:e5:13:df:cb:03:fa:25:1a:32:e7:49:ff:02:
f5:93:38:14:60:0f:46:2e:62:4b:a6:e1:e4:e4:15:94:71:8d:
d4:cd:fb:b1:32:f6:cc:87:e1:b0:3c:6e:4e:40:21:08:83:f2:
39:80:31:04:22:4c:79:d3:6d:d2:d7:07:60:f1:ae:49:f3:e9:
9c:28:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:39 2025 by rpki-client