Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier: 8K7LgxCkeo8BqTKw1B+hsUS26qeLrPeaMqHO7nPBZWA=
Subject key identifier: A5:AE:C4:A2:59:D9:6C:91:8C:0C:F8:1A:1E:27:E4:80:11:30:50:14
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial: 0194BBCF080B98E2700D36014DA162D4238C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number: 1379
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: 5fp4REhZrqUt_jGwUghdFogNJ4s.roa (hash: XHIsP9GAsLpSqaROasGsDdk80cNjcNRUOKOHhRVGrsU=)
2: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: DGNnaYqasZUpn0Pl/rQPmQtQKCgRo94bDNMAfq3QORQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:08:0b:98:e2:70:0d:36:01:4d:a1:62:d4:23:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=a5aec4a259d96c918c0cf81a1e27e48011305014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:88:bd:c8:3e:4d:79:86:5b:96:0c:83:01:
69:03:8a:0c:02:16:f6:0b:86:d2:b2:66:3a:66:0b:
cd:95:91:e5:7c:97:a6:3a:19:f3:23:48:8b:4a:ed:
f7:16:53:47:5c:a6:45:48:99:9b:6c:83:cd:75:eb:
81:85:9d:5b:77:53:9a:e2:04:1d:2e:16:94:70:2d:
78:f4:5e:a3:08:60:de:38:9e:02:cd:bc:af:c7:33:
cc:47:53:2e:34:96:97:a6:fe:b0:25:67:05:79:41:
99:7a:8c:2b:a6:10:a9:c4:80:42:15:69:46:08:df:
1f:a5:f9:a3:cf:4c:b3:05:fc:4e:19:86:43:2c:b6:
00:ee:88:94:cb:b3:97:14:01:b3:56:9e:5c:72:7a:
44:41:fb:44:a1:41:ee:f7:83:03:0e:09:76:e6:5a:
fa:d5:e5:27:91:5e:4c:27:14:0f:90:4a:7b:26:e5:
53:f2:dd:2f:1c:62:7c:57:d1:84:bd:99:9a:40:d5:
da:79:63:58:a7:e2:3a:ac:87:b4:0d:9b:fa:71:79:
6f:28:75:57:3d:a1:88:e5:92:a9:b8:6f:e3:2f:e5:
7d:00:5c:26:74:d6:bf:5e:8d:20:27:dc:c6:87:2d:
da:a3:6e:bd:4c:9e:0b:06:42:a5:ee:60:a6:47:4e:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AE:C4:A2:59:D9:6C:91:8C:0C:F8:1A:1E:27:E4:80:11:30:50:14
X509v3 Authority Key Identifier:
keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:40:d1:3f:f4:71:20:4e:bf:5b:63:58:20:d2:ef:0d:60:
07:63:6a:d4:16:4b:cd:7b:e9:6b:3d:71:25:8d:d0:34:4b:56:
3e:d3:54:cb:cf:80:b3:55:d9:66:23:0f:5b:cf:99:69:28:41:
fc:d8:b2:b2:a7:ec:1c:f1:92:8d:81:20:b0:69:b5:d5:39:73:
34:1a:47:b9:ee:48:18:cc:eb:af:da:3b:5f:de:a7:c7:73:98:
96:26:ac:9a:23:45:51:88:05:7b:a6:a6:e4:a8:1c:77:d5:44:
71:59:b8:15:61:ed:24:a5:be:fd:e4:a2:09:5d:63:c4:4c:ed:
31:d4:72:a4:30:83:41:de:31:b2:12:56:b8:4f:e6:85:15:81:
17:48:a2:70:15:af:01:29:02:38:37:13:07:be:35:5e:38:df:
69:aa:3d:a7:db:7b:fb:78:e0:2b:96:4a:59:49:d8:06:0e:05:
a7:c3:30:72:8d:30:23:d9:13:9d:59:61:a6:5c:1e:c5:c4:c9:
dd:39:83:78:c2:0d:03:89:3b:56:62:4d:ba:53:e8:be:4c:48:
8d:62:78:fd:36:9c:06:91:cf:9f:48:0e:05:af:af:b3:4f:5c:
55:2e:2c:b9:82:5e:74:8c:8b:08:30:3e:87:b6:28:db:88:3f:
5e:b5:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client