Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier: 3wG0poLqpG/RKfZ0qGBvsdTYUC3RdSMdcfJ31rIfS0U=
Subject key identifier: F8:CB:3F:41:67:9D:C4:E6:28:14:64:76:30:41:B4:66:4A:D4:36:E5
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial: 0194BBCEF5DC76422D4768BA376BF71E3C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number: 0668
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: fICnTXtvsnIis2FKe2lylqqxmSsvKHIb3vNiIsPK74c=)
2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:dc:76:42:2d:47:68:ba:37:6b:f7:1e:3c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=f8cb3f41679dc4e6281464763041b4664ad436e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:57:e4:9e:b9:3d:d2:f6:7f:73:d2:ef:da:
0a:10:24:98:ea:2f:a6:43:9f:c3:a6:8b:07:6a:f0:
af:a9:c8:76:00:60:bf:d3:e9:50:13:b7:10:a5:f3:
49:31:f2:b8:13:ed:eb:9e:f4:cb:06:c6:8e:47:b5:
0c:f1:e5:80:81:c5:38:4a:68:66:c1:7e:a0:e4:e0:
f5:a4:22:05:a8:6f:87:84:10:1a:29:7b:d5:6a:a8:
66:15:f2:56:97:4c:8b:10:9c:82:bf:74:c6:29:4b:
3a:4c:02:c7:19:c3:ba:fa:ad:dc:8f:dc:fe:60:ac:
48:76:5c:1d:44:a5:69:e3:14:e3:c3:d7:c1:6a:2d:
f1:21:d8:aa:ed:e5:09:ce:dd:bc:84:4d:e4:93:18:
d1:53:43:23:d3:11:6f:a5:6e:f1:d0:56:24:86:e9:
a0:a5:89:d5:ea:76:cf:c6:d3:59:d7:92:96:e0:2f:
05:8e:53:4e:a2:9c:ad:ea:0c:62:3d:24:5e:1c:e4:
35:31:3a:98:d0:ee:05:2e:27:a3:03:27:5b:98:e3:
0a:d6:8c:86:c7:4d:7a:b9:bb:29:55:43:c4:ae:8c:
82:e0:f0:c9:bc:89:81:a9:a3:a9:fa:7e:d5:ce:f4:
8d:21:4a:bc:7e:48:4a:18:dc:3b:20:4c:fb:78:36:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:3F:41:67:9D:C4:E6:28:14:64:76:30:41:B4:66:4A:D4:36:E5
X509v3 Authority Key Identifier:
keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a2:1e:d9:c9:29:98:5a:64:b4:8a:4b:d4:cd:e2:ee:ab:e5:
ce:fa:df:6f:01:8b:d7:a0:56:60:4f:6b:1e:85:b5:17:45:35:
32:d1:c8:95:dc:df:60:1a:d6:1c:37:ee:00:f8:92:8c:8e:d2:
e8:1c:6a:f7:2f:92:fa:f8:cc:ab:3b:ea:a8:44:17:d7:b1:54:
d6:66:63:4a:8e:f6:5a:ee:58:da:d0:8f:4d:3d:32:96:dd:69:
9f:ac:5f:05:05:71:cf:b2:43:82:4b:3d:09:bd:b3:fd:d2:94:
8a:29:ec:d2:c5:e8:5d:56:11:9a:3c:bb:57:bf:5c:d1:86:7b:
e8:14:ed:6a:23:db:a4:a4:6f:ba:f4:0b:8c:46:cb:3a:2c:6b:
e2:55:3f:15:6f:0b:fe:66:8b:bd:98:63:6b:c3:7c:39:23:cd:
b6:c3:53:c8:0d:5f:da:4f:1e:4d:9b:5b:30:ad:2d:df:13:3d:
9e:33:5f:d8:6f:c7:93:b9:db:7d:02:75:0e:a4:1d:3d:a6:39:
38:19:2c:22:11:ef:3e:1f:02:9a:a3:72:a9:13:54:f2:d7:2b:
ea:1b:04:17:01:fd:48:70:6d:57:ea:28:e1:0a:e0:f3:67:fd:
0c:1e:27:1b:ef:5b:f8:cd:7a:d1:02:b5:df:c9:72:72:52:2e:
3e:ba:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:56 2025 by rpki-client