Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File: BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier: qTTG6lLgTB1bTLnO4YekEcstKluwlPK6YjM+6eUs/gI=
Subject key identifier: 05:61:2C:CD:CA:0F:1A:5F:11:46:24:32:B9:E8:6E:51:1E:CD:4F:F0
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer: /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial: 0194BD855FA01A2F0E8FDD39CD6513D996D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number: 0155
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: miEBx/8saDFnSYKn0hxcc3vU/9HD0H/ivkisacj7zCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:a0:1a:2f:0e:8f:dd:39:cd:65:13:d9:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=05612ccdca0f1a5f11462432b9e86e511ecd4ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f6:ca:f8:3d:8e:9f:2c:4d:0c:43:00:0b:3a:
6c:ef:f9:ce:ce:43:a3:4e:0f:f4:75:e2:63:26:04:
65:99:16:d5:87:38:34:89:de:5a:9b:a2:97:52:73:
d0:c9:af:3a:39:d5:7c:7f:6a:90:7b:3c:06:87:00:
c1:87:e1:38:ab:9f:f9:4f:38:83:d0:24:a7:f8:9e:
fa:44:cd:1e:6e:95:b2:fd:8e:ff:e8:f1:38:c5:78:
c1:43:89:ec:08:fd:a0:81:74:f0:d7:29:08:bc:53:
1e:25:60:c6:4a:b0:31:bf:59:30:46:76:ef:e9:af:
e8:87:c2:36:64:d2:3a:ed:2b:1d:ab:cc:41:43:94:
40:ca:a4:43:e2:f2:c1:52:2e:f3:5a:3f:8f:39:24:
69:4d:8e:96:72:92:9d:df:48:78:85:b6:0e:7b:72:
3c:49:b8:d8:1d:db:bf:af:6b:0e:3b:6a:19:3c:48:
ea:d7:42:17:75:06:94:e3:80:13:9b:02:7e:e7:40:
37:e0:25:90:07:c0:3b:b5:c4:c7:80:0c:5c:f2:63:
ce:d9:0a:26:80:ae:f3:0f:21:b0:9a:46:9f:b0:2b:
5d:2d:d1:c5:23:3b:bc:cd:fd:ef:11:5e:9a:01:ef:
bf:2a:3e:fe:b0:9c:22:58:9c:f5:90:dc:01:d4:c2:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:61:2C:CD:CA:0F:1A:5F:11:46:24:32:B9:E8:6E:51:1E:CD:4F:F0
X509v3 Authority Key Identifier:
keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:5e:b9:07:8c:ef:c0:a3:87:f3:d2:66:54:7c:21:5d:d6:
20:d2:07:17:06:94:82:71:92:bd:bc:5d:aa:97:ca:6a:37:95:
58:64:6d:dc:f5:49:b6:15:22:08:eb:88:57:26:68:e6:9c:0f:
e5:97:3a:74:79:a0:1f:f4:92:d6:af:91:24:a1:f6:64:49:15:
fb:1f:ed:64:a2:1e:9b:73:35:4e:1a:39:ca:e3:f3:1c:cc:aa:
94:fd:88:5e:d4:af:f9:05:30:5d:49:2b:02:25:e0:be:d1:a6:
21:d0:19:88:62:99:9c:67:7e:f6:15:f6:dd:10:e1:5f:76:d0:
f5:ad:f6:a1:4a:96:e0:e9:11:77:23:7d:c3:b0:a2:98:f1:b8:
12:b1:99:f5:29:ee:d5:8d:42:cb:5f:67:91:35:ed:ad:bd:73:
0d:f3:bf:1b:8d:4a:d3:47:18:4e:b0:4c:2e:3d:0b:3f:cb:55:
63:1a:33:6f:2b:a0:c7:5d:f3:32:7a:a7:5f:f1:dd:3d:18:9b:
04:a8:6e:f7:43:0f:b3:36:3d:d3:35:c0:31:5d:91:87:0f:7d:
9b:44:51:85:a1:07:d6:20:6e:8c:80:d2:70:fc:39:0c:a2:d1:
28:50:a2:81:fd:12:5b:94:7f:4a:95:26:f7:b5:2d:5d:0b:80:
7a:49:07:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:30 2025 by rpki-client