Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: YH9bIwQeCBUfTuIuY6O+8hh1lYQLOU0JzZG0Y0EYoew=
Subject key identifier: 2E:A9:A6:46:16:7F:47:23:D5:87:23:18:DD:1F:4C:AB:33:1E:4B:48
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0194BCAA16386D3073653A370033CFAE09E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0A2B
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: +ASsfoqTwFkllmPm2VVuac5WL1UvwtHRyI5yhQPyqxY=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:38:6d:30:73:65:3a:37:00:33:cf:ae:09:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=2ea9a646167f4723d5872318dd1f4cab331e4b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:7c:8f:86:e4:62:f0:f7:29:1e:ca:81:f8:
8b:a5:86:fe:ab:dd:d1:73:7a:48:88:cf:42:00:c9:
e7:b8:a6:0a:c2:bd:72:f9:07:79:08:b5:fe:d5:11:
3e:87:0b:60:2f:80:e3:d0:45:8b:85:94:56:03:a1:
58:a5:25:dd:f1:35:91:cf:3f:6f:b1:47:a0:57:fa:
ae:53:ab:54:be:db:60:63:5c:ae:72:c1:97:df:6a:
be:b9:cb:cc:5f:56:51:31:00:d6:46:dc:8a:65:ce:
21:2d:69:e4:74:81:76:55:6c:fe:45:e8:b2:72:42:
8e:43:05:d0:4f:d4:92:b6:f0:24:0a:4b:fe:90:cf:
68:c1:b7:c7:70:1b:31:e7:fb:00:2e:c4:18:09:69:
23:77:49:c8:b3:a7:bc:85:76:cb:43:71:38:0c:42:
54:58:4f:21:47:72:af:bd:a3:19:d8:f8:f5:b2:99:
22:7e:72:7d:5d:f2:46:ac:f6:89:af:93:ce:29:c3:
0a:5f:b6:38:c3:9d:18:de:f8:ac:b0:24:df:80:34:
6c:85:13:c6:6b:76:75:8c:fd:90:9f:59:70:95:40:
ca:ff:51:5c:0d:0f:dd:d2:ca:be:6f:02:96:92:fa:
8a:2e:77:e5:fe:34:43:44:64:b7:6e:01:eb:be:12:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:A6:46:16:7F:47:23:D5:87:23:18:DD:1F:4C:AB:33:1E:4B:48
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0b:84:54:29:e9:51:1f:54:53:57:90:b2:07:9b:64:28:ee:
b1:6b:38:c3:a7:d7:6d:2c:af:be:32:53:58:9f:91:25:f5:86:
4c:e1:67:55:6e:95:02:a1:11:c4:97:06:a6:23:bd:8b:3f:d8:
92:e4:df:df:e4:6f:62:12:67:9c:ba:10:02:14:94:56:11:8e:
92:60:e6:0b:a4:f3:ca:e3:de:7d:e9:84:08:8c:bf:58:2d:3f:
e4:ff:2c:7d:97:2f:f6:fa:55:21:c4:0b:08:f0:45:d2:5f:92:
d9:7b:7a:18:89:39:c5:29:ae:87:90:13:44:de:cb:f6:af:69:
85:05:79:08:f8:a7:f2:a7:b5:14:4d:4c:ed:4c:2f:39:97:ac:
2e:d7:0f:a4:9b:aa:ff:aa:e9:4e:34:83:5f:5e:9b:22:f5:b7:
7b:21:59:eb:ab:eb:a9:b0:1f:72:23:a4:9c:04:19:64:d9:f6:
e3:5a:a0:13:1b:8e:b1:25:7f:c9:5d:85:3f:9d:06:28:42:a7:
0a:3d:fb:76:8b:15:27:74:df:76:d6:f1:95:29:c8:d5:97:f3:
89:72:c1:e3:33:09:0e:d5:3b:b1:c2:db:e6:a6:5f:1b:94:4e:
92:0d:4b:71:cd:3c:69:0d:2b:e7:e1:70:c1:ee:a0:47:18:09:
81:d0:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client