Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: 701q7l+zRpUw1jLcO3DqS2kJrSc0oEYoQ2tTl3rKKIs=
Subject key identifier: 15:CA:18:65:20:C5:EE:EF:74:55:60:C1:FC:19:A5:BB:3F:16:01:C5
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 0194BD855BA74B5D0B7090F1E37B10F6F56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 116A
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: L3nQHWkBy+r5nCDVMG+9epFIgSzp/UTHP9S0FOMJtvQ=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:a7:4b:5d:0b:70:90:f1:e3:7b:10:f6:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=15ca186520c5eeef745560c1fc19a5bb3f1601c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:b2:4b:69:a3:c0:b2:61:07:80:db:3d:97:
20:4a:c5:ca:86:4d:1b:64:0a:d6:61:a4:ad:26:73:
eb:bf:b5:5d:da:76:59:4d:19:29:27:0a:73:f7:b1:
26:c1:8b:98:36:19:3d:b2:df:01:06:98:2e:49:b4:
ee:3f:38:f3:fa:64:f0:b4:37:b5:38:a1:8d:1b:ba:
3b:27:58:a6:5c:cf:b1:22:4e:87:dc:c4:6b:0d:40:
06:89:29:cb:95:79:83:33:64:b7:e3:87:bb:fa:fd:
9b:64:52:37:5a:39:39:24:e9:59:95:2e:a6:9c:8c:
bc:12:fd:73:fb:fa:c4:4b:75:2a:a9:04:0b:28:b4:
b2:66:34:11:1f:c6:30:7a:21:d4:d3:ab:2d:b1:f8:
6a:06:b6:cd:3d:a7:c9:84:52:59:a5:0c:72:5f:79:
85:b6:45:1c:00:49:7a:58:89:f3:e1:a4:fa:bd:1b:
14:db:86:f5:92:31:c8:af:db:8f:3f:bb:12:b5:8a:
0a:f4:9a:64:0b:ab:ae:e4:ac:3c:84:e5:7c:16:5f:
5d:c1:1e:ea:3c:8d:df:58:15:33:dd:62:07:05:53:
38:48:29:ff:19:b5:8d:03:d7:19:9c:0f:a1:75:d7:
74:82:4f:1a:30:c5:d3:5e:d9:1c:92:22:e8:b7:f5:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CA:18:65:20:C5:EE:EF:74:55:60:C1:FC:19:A5:BB:3F:16:01:C5
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0d:99:df:ff:f9:1b:89:64:96:dd:42:60:8f:7b:a2:5e:0d:
a8:43:72:4e:54:76:83:c8:af:2a:d4:c5:a3:1c:40:91:e9:12:
29:7d:05:76:45:70:26:ef:41:73:c2:07:61:cb:ba:aa:e9:67:
a6:8b:3f:d8:ab:c7:95:88:66:64:a8:7f:a2:8f:21:ce:96:e0:
b0:fe:6e:be:6b:3e:d0:8a:6c:74:c3:16:69:dc:96:57:92:df:
b7:a7:9d:4e:7b:29:70:5d:6f:5e:ff:03:a6:ed:87:37:66:62:
7b:32:ed:82:89:a3:c4:9c:11:f4:20:6a:64:18:34:fd:0c:a0:
34:28:17:57:ac:7b:7a:2c:fc:f3:46:b8:cf:9b:d1:8d:27:6f:
d4:62:e4:91:07:1e:84:ed:47:aa:97:29:85:3f:49:f5:00:5c:
33:49:98:ce:aa:36:77:3c:fe:b2:89:da:d6:3c:f6:27:0a:91:
4f:48:45:3b:4d:bd:c7:d7:df:f6:5a:30:64:3d:47:d5:59:7d:
44:53:c9:3e:b7:7d:f2:d1:99:b4:a7:82:f4:25:17:03:61:68:
6c:4a:e9:94:5e:5c:df:37:be:e1:80:81:ae:f5:07:66:b3:cb:
51:43:8d:d5:6e:cc:94:43:52:d2:49:d9:da:a9:59:b1:a8:a0:
b0:84:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:07 2025 by rpki-client