Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: XcyqyKS9sAhDvcSLvvXvKL/MmSwHZF/a4qSLuKBmdjQ=
Subject key identifier: D7:60:9D:CD:B2:D4:C5:EE:80:0B:2C:96:56:E1:46:23:FF:9D:C9:A5
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 0194BBCE54BB05A07965BBA011DF5EADA827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 135B
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 1PJhAmr4L-ICtBMJRLXv9Y_xOyw.roa (hash: jH6dNQsK1d9mmyP0BMdwyC4O3JBopXcfL8RZmEaPWBg=)
2: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: pw9YuRuZInhjIgW/HsnxOnqMQQAerFnFgMKVrivFgDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:bb:05:a0:79:65:bb:a0:11:df:5e:ad:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=d7609dcdb2d4c5ee800b2c9656e14623ff9dc9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:85:0a:ac:fc:9d:f5:1d:71:78:92:f1:40:
9d:1c:90:a8:ff:d4:36:b3:81:7d:9c:a9:d0:22:d1:
05:89:7d:71:84:84:8b:48:8a:99:dc:4f:22:35:0d:
99:c7:d4:78:74:e8:f0:85:94:d8:af:7c:ea:16:7a:
ff:09:07:4b:a0:ad:01:71:a9:4c:77:0c:36:ff:74:
43:e8:cc:df:a6:c9:d9:ff:39:90:a3:cd:1f:ab:5e:
01:20:94:90:09:13:9b:1d:a8:7f:81:82:a8:83:5a:
7c:cd:df:fd:87:eb:a3:b8:e3:be:6c:a5:bf:dc:bb:
01:91:a1:67:fc:e6:87:60:f3:88:53:0a:41:cf:a4:
78:6c:b9:3b:dc:51:4a:bb:3e:87:6d:aa:09:d6:db:
bc:0c:b9:30:6f:98:7d:1d:70:cd:da:f3:32:b4:3c:
85:0a:ec:f3:06:61:51:47:f5:36:8f:70:96:80:10:
67:99:05:76:71:59:ef:38:77:a4:e5:75:69:cc:e1:
81:ea:f4:28:56:a0:29:c5:22:f1:e3:df:dc:13:a9:
ab:c1:ac:8b:fe:53:34:eb:b2:b3:21:a8:9c:22:ef:
f7:3c:6c:51:a4:7c:04:52:35:62:54:4f:aa:e6:8c:
ac:a0:49:2f:f3:ca:58:1e:fa:5c:ba:40:87:f4:f5:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:9D:CD:B2:D4:C5:EE:80:0B:2C:96:56:E1:46:23:FF:9D:C9:A5
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:78:82:3f:4b:bf:f1:0c:89:e6:a6:bf:c4:93:c5:ed:60:08:
e3:80:9b:4b:13:5d:10:6f:22:f5:d4:e3:a3:aa:0a:5a:96:09:
c5:31:61:64:a9:b6:50:26:d7:d5:06:5a:ec:f5:37:54:1b:2e:
ef:be:83:81:c2:c7:49:5a:41:9f:c6:75:e9:41:3f:01:b2:6a:
85:b9:2f:80:78:ba:3f:50:b2:ee:e0:d4:f5:f3:1d:3e:ba:87:
1b:b6:42:1c:95:51:80:93:8a:71:99:af:02:8a:f8:20:2a:66:
aa:2e:4d:39:2c:d9:f1:de:e6:d5:ca:48:82:e6:ce:1f:05:1e:
80:7a:c0:36:6a:fc:c3:18:66:c2:57:d3:51:0c:5c:cb:b8:78:
9f:9a:b2:1f:dd:8f:a5:98:0b:b4:f8:fc:78:5a:5c:18:7a:25:
0c:02:c2:38:02:ee:da:fd:39:60:b7:f1:0c:98:b3:ea:f6:84:
e9:aa:f0:57:01:f5:75:e5:a1:a3:57:68:60:31:dc:58:9e:58:
43:dc:ca:97:80:89:db:9a:e4:01:a5:e1:49:7a:08:26:d4:68:
d3:53:21:3e:ef:3e:00:8d:ec:35:2e:80:21:3b:3c:1e:32:0e:
8a:6b:79:4c:7e:0f:34:a6:98:d9:70:3e:67:04:ed:3e:fe:6a:
05:82:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client