Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File: BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier: kN9ZvRx2Xdr/t++27HrG/6TWnF9M+8NRJ3nrhN5GIME=
Subject key identifier: 8B:B9:86:61:60:A0:0E:A5:43:81:9D:05:A1:DB:4D:46:74:EB:78:0C
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer: /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial: 0194BC729E90B3757379C0BF42C399C5243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: SwHRh0h0IUEft8YwIGLFH6gD/ZT4wGKkwPW3f7ye/ws=)
2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9e:90:b3:75:73:79:c0:bf:42:c3:99:c5:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=8bb9866160a00ea543819d05a1db4d4674eb780c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:35:ce:21:4a:7d:42:7d:93:33:d3:ef:eb:
49:7c:13:c9:1d:19:d6:f1:88:e5:6a:77:ae:2c:44:
d5:c4:72:84:4c:a0:25:3c:cb:4a:b4:73:50:b9:cc:
f3:45:c9:0f:87:17:8c:d3:3d:3e:8c:29:6a:0c:d1:
e6:0e:c8:00:2c:c2:0a:a0:de:75:3f:e1:52:1e:66:
ab:fa:7d:42:24:d8:bd:47:3e:7b:d1:74:91:3c:60:
d5:67:d7:c0:bb:12:0c:7e:18:db:4c:39:93:d5:8d:
db:7e:7c:ee:e3:d0:ef:72:bc:10:dd:16:df:a2:68:
77:98:c8:36:60:bc:08:05:6c:5f:e8:79:9f:d9:77:
1e:97:a5:2b:68:3d:b4:14:fa:9a:b5:1d:55:44:ad:
db:37:4a:20:26:f4:30:a9:ef:3c:28:5e:05:8e:bd:
c5:8c:6e:c1:4a:85:fd:1f:3b:62:e7:c8:b0:e9:80:
68:5a:cf:be:dd:3e:cb:92:15:80:19:cf:b8:2a:07:
7a:89:95:74:05:9f:74:aa:49:19:52:26:e2:9b:e3:
47:47:e3:37:f2:bc:f9:2b:f9:25:09:29:d1:57:71:
dd:0b:5e:ab:31:d9:0f:d0:3c:71:50:42:9a:40:d7:
17:81:76:94:15:29:fb:d4:bf:35:6a:fc:65:24:46:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:86:61:60:A0:0E:A5:43:81:9D:05:A1:DB:4D:46:74:EB:78:0C
X509v3 Authority Key Identifier:
keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:84:b6:91:b4:23:f9:ba:9c:8c:16:fd:4d:c9:62:d5:75:
99:66:75:89:ed:b8:c1:3a:89:2a:63:23:a1:10:08:27:b3:bd:
82:34:99:ab:8b:2d:a3:ba:38:b3:33:71:0a:e5:8a:77:80:a8:
db:26:9f:11:12:56:42:0b:17:2f:79:02:bc:d0:7f:fe:db:1d:
3e:1f:ac:2e:e2:c1:ce:e6:a3:38:9c:27:e0:14:58:35:21:ce:
ac:42:9d:2d:1d:92:be:0d:9f:ef:74:1e:56:b8:59:a8:ca:78:
7e:d9:40:c4:b5:62:41:f7:8e:f1:4a:4d:40:0e:96:38:7a:e3:
8a:c8:07:1c:97:8e:ff:a8:ca:8b:7d:c8:f5:dc:30:86:b9:ad:
10:47:9a:6a:a5:8a:ed:d8:d5:4b:2c:0e:d4:0d:c2:c7:b1:5b:
51:62:21:39:45:7e:c5:68:6e:d9:3c:f3:d5:b6:30:98:b6:62:
f1:83:ca:21:3c:63:4f:2d:e6:1b:39:a5:75:a3:e1:0c:c3:73:
b3:57:19:ed:da:ab:34:b2:c8:ca:68:a6:e1:01:57:32:90:9a:
22:70:53:5c:7f:d6:c9:cb:82:9f:c5:8b:f7:a8:66:e4:39:0c:
ba:f5:5b:63:10:f6:e8:36:3d:9c:c1:ea:ef:16:46:5a:0b:bb:
1f:ef:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:09 2025 by rpki-client