Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File: BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier: 94DHoTaQWso3bFfdTTiXy9vjNHaUdLzQh6JDOdGCdvM=
Subject key identifier: 9D:09:A6:50:37:85:19:60:D0:01:C4:53:13:85:9D:B6:A1:B9:EA:F9
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial: 0194BCAA02FEA276EE72FCD2D4B0D4385F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: IRDJbzgkYLSDJ+7Vc51ZnfEN6ZMCMhNYULVdh87bP7o=)
2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:02:fe:a2:76:ee:72:fc:d2:d4:b0:d4:38:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=9d09a65037851960d001c45313859db6a1b9eaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:05:4f:21:d3:a0:9f:9a:67:e9:3c:59:54:
86:be:bf:a6:7b:82:3f:ab:c1:08:0a:10:cf:3a:ff:
34:40:98:e0:99:40:d8:90:6a:21:e1:a3:b7:01:8c:
81:3b:ad:bb:be:07:bc:d0:0a:92:ac:c0:4e:19:8a:
cd:40:58:da:38:6f:0b:c5:b0:38:73:48:64:bb:de:
31:99:ab:20:59:16:c0:41:dc:e9:a5:f1:06:42:29:
e1:89:80:a6:b4:de:6f:a1:1d:ed:55:b7:48:b1:66:
e4:56:4e:3a:2c:b0:2b:33:a7:6e:0a:c7:50:d6:d1:
39:7b:20:73:16:6a:ed:10:95:18:ef:a6:06:4e:32:
76:3a:4f:c5:30:31:d4:9c:ec:b2:70:ce:bf:b2:5e:
31:e5:95:ea:7d:58:c4:09:47:98:f1:b1:d9:ab:4f:
95:84:c7:d5:85:e4:4a:24:5c:dc:89:dc:b6:75:54:
7c:fd:92:fd:76:50:61:79:65:ba:1a:11:2c:b3:1a:
6c:97:10:ae:22:7d:40:f8:85:be:3e:a5:ad:69:bb:
73:ef:74:9c:60:32:f0:0f:3c:16:77:30:6d:c2:31:
fc:b0:83:b1:eb:51:30:25:ed:d6:b6:f5:db:be:f9:
ac:f1:4c:fc:99:da:59:2d:65:ff:c1:ef:6a:6a:b4:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:A6:50:37:85:19:60:D0:01:C4:53:13:85:9D:B6:A1:B9:EA:F9
X509v3 Authority Key Identifier:
keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7d:e9:25:7f:18:5f:6f:67:51:01:33:0a:fa:5a:af:d0:4d:
ed:d1:12:03:b5:37:af:dd:5e:77:53:54:b7:bb:b3:e5:96:c9:
3b:5e:26:21:33:66:f3:8d:2b:03:58:a3:04:97:20:00:41:bf:
2f:60:4c:cb:9d:ce:aa:55:4c:90:c8:27:4c:16:ae:f2:b3:db:
07:21:49:c1:1b:72:b0:a8:be:df:9a:4d:6b:03:a1:20:29:0d:
ea:d7:a8:4d:9a:e3:96:4c:9c:6c:bd:b1:fc:c9:e4:13:ee:50:
c8:0d:f8:24:68:a4:4a:ef:89:3f:b8:58:14:b9:ac:d1:af:ac:
a3:d1:75:d7:74:ae:d7:02:74:22:72:75:07:ff:3d:01:06:2c:
c5:9e:48:46:17:a7:3e:08:ab:b1:9c:fa:dc:d3:e9:2b:1c:2a:
f4:c5:33:82:a0:92:04:2e:ce:a2:fc:2f:68:6c:46:ad:9c:79:
ab:a9:9a:70:e1:02:c4:06:b7:a7:3f:45:98:c8:61:f4:a8:af:
d2:74:24:72:2c:89:c2:6f:21:84:9d:c3:ae:f3:5a:4c:b8:2a:
6b:dc:5a:fc:b7:d7:ff:e4:7c:ca:31:2d:36:ce:90:ec:9c:89:
57:61:95:16:b8:31:43:36:83:0e:b1:af:d9:f3:1d:78:a4:99:
7a:31:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:58 2025 by rpki-client