Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: agOQv0NL/wIe7roE+JlIkJSdVMT1wY8qvzBcOGe017U=
Subject key identifier: B4:97:C3:FC:F2:96:0E:D2:A5:45:66:2D:EA:90:52:4A:E9:FB:33:49
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 0194BD17EFBB67206BCDC33CDB7F29AC3A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 0819
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: jU3XfxJQFGx/0U1DTpZkdeEH7MSPacg4u5kPUo5dWdg=)
2: bDkAt0CCYnB2xqRfpALpEK1gmgo.roa (hash: HzyjrIASJdGjjHtk6b54LHkaX+3Gt8eRcO+z/aYxOaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ef:bb:67:20:6b:cd:c3:3c:db:7f:29:ac:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=b497c3fcf2960ed2a545662dea90524ae9fb3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:d4:40:a1:72:d7:f9:2e:62:98:fc:63:96:
b7:18:b7:a4:22:eb:6c:27:be:ac:b5:b6:40:e3:49:
e2:ea:f2:68:60:bd:96:62:94:a5:7f:59:f7:fa:b2:
7b:23:0d:1a:86:e2:f7:58:ec:94:b6:45:09:a5:ee:
74:42:c5:43:5d:4e:d7:69:fb:78:3e:34:9c:19:04:
b3:a1:e5:a6:d7:7b:1b:36:b4:60:76:ba:48:ac:80:
56:d9:4c:f4:5e:dc:61:40:55:fc:52:cf:09:ed:fa:
03:8a:e0:1d:e7:30:58:fd:64:cb:cf:20:07:32:92:
9a:f6:df:c3:08:59:03:07:9a:84:16:93:39:f6:39:
94:d0:6b:f1:e0:06:af:65:9d:68:f5:2d:57:e1:35:
af:46:a9:04:6e:f2:98:b0:99:05:1a:46:7b:d1:04:
e4:69:2d:b4:c9:b7:22:0e:18:1e:eb:76:a0:0b:1e:
7b:de:a0:5d:b6:ae:e5:bd:88:30:80:77:53:26:28:
51:62:dc:37:6e:70:da:93:63:44:bc:1c:4f:8f:e8:
7b:fc:ec:6c:11:91:7d:b0:89:ab:77:7a:f5:76:44:
c0:02:f2:ab:02:47:20:03:d8:19:69:0d:c2:95:27:
b7:53:dd:02:6e:db:66:88:e3:18:fb:fd:0e:a5:0e:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:C3:FC:F2:96:0E:D2:A5:45:66:2D:EA:90:52:4A:E9:FB:33:49
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:83:0e:4d:94:f3:f5:1b:f1:7f:a0:7e:82:b2:b5:37:c8:9b:
3d:7f:58:12:e2:5b:81:62:d7:8f:cc:df:9b:96:76:33:c8:e2:
5a:dc:d4:34:b0:33:7e:0b:f5:ad:11:d2:54:2c:52:d5:b9:5e:
dd:b6:7f:ca:79:45:dc:66:db:a7:29:3a:ed:df:2d:fd:84:6a:
f1:36:fb:4d:e9:62:47:08:c4:4a:3d:76:85:71:3c:2d:7a:e5:
37:e3:61:18:a6:06:d6:a3:c2:95:ec:19:47:e8:ad:1c:24:94:
45:a5:d8:e8:18:7f:d7:c6:8d:b9:80:65:a7:cd:a6:fd:98:e0:
24:90:93:74:72:67:e7:c8:12:88:79:40:a0:f4:ec:93:fa:64:
b3:7c:c6:28:3d:fe:78:aa:c6:4b:e8:f7:10:2b:b5:35:ac:2f:
d5:f8:c7:21:aa:f3:bf:79:52:e8:36:ed:a7:ad:8e:93:68:6a:
f5:0d:a9:04:ba:6e:c8:1d:e4:b7:af:89:4b:77:74:df:d0:b1:
18:5a:b1:af:20:75:28:b4:d7:b4:38:63:34:fc:2e:38:c8:d3:
92:fd:6b:e2:89:cd:73:88:25:f4:f3:96:8d:1d:9e:3d:2d:51:
82:e4:1c:8a:53:01:61:69:97:3b:07:d4:f9:31:d0:5c:80:d4:
1d:44:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:05 2025 by rpki-client