Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
File: BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft (raw, json)
Hash identifier: yrty+o/loCrpGbyGX9thVcIb/Ld58iMLDo/bebX9NZ8=
Subject key identifier: 1D:23:FD:08:E5:87:F6:AC:68:47:3B:52:8A:C0:02:9C:30:CD:78:77
Authority key identifier: 04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
Certificate issuer: /CN=044fa3808c2d28c577f9976c61cd226e188695d8
Certificate serial: 0194BCA9B6458C1FCFB7D3F4EA2C7E60D82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl (hash: i7SdIuTuQGef1K7jRO6XMvBILg4I+iFfw7vAbrZGMIg=)
2: ocNn2w6Qfls2fXDA9ntZYfLZt0I.roa (hash: 0P14UFeOgFvduGdV+w87JypAmwcr0ZfM6CCLMevWZPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:45:8c:1f:cf:b7:d3:f4:ea:2c:7e:60:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fa3808c2d28c577f9976c61cd226e188695d8
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=1d23fd08e587f6ac68473b528ac0029c30cd7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:d0:95:fd:91:bd:22:1c:56:c8:03:3a:a0:
8b:11:18:6a:d5:2c:46:7a:3a:ca:38:80:b8:5e:39:
11:fd:fc:30:b9:65:f1:ec:66:d9:9e:a8:9b:af:18:
f2:eb:3e:33:77:fb:f2:73:29:15:6c:b6:60:c8:21:
50:aa:9e:e5:23:df:0c:46:45:a8:a1:4c:d9:6f:a1:
f1:9f:44:23:d8:a2:4c:a3:1a:9c:3d:fc:02:94:05:
fc:7f:1d:40:f7:d3:2b:00:84:00:cc:16:f5:8d:59:
58:a0:5e:1f:9f:1c:ca:8e:81:8b:54:4f:e0:73:d0:
8e:a3:1f:76:91:c9:11:17:80:98:a1:f2:69:ab:ff:
e4:1b:2c:be:4d:6f:1e:1a:42:f4:96:5f:14:df:a2:
42:d6:43:fc:b5:e5:fd:9f:d9:47:0e:6c:5d:ff:db:
71:e2:89:96:2c:56:9f:20:8a:d5:12:85:91:92:ce:
3d:1a:f1:c9:37:aa:90:e4:2a:e5:6e:cc:85:47:cd:
19:d0:03:f1:8f:e1:5b:62:bf:77:1c:63:4c:36:40:
42:f1:02:9b:a6:12:49:3c:ee:27:17:96:71:4e:cb:
87:55:25:e0:c3:67:a2:c3:d9:0f:93:5e:47:3d:5c:
a6:ce:12:0c:66:b6:1d:a3:47:7e:2d:93:f5:b4:85:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:FD:08:E5:87:F6:AC:68:47:3B:52:8A:C0:02:9C:30:CD:78:77
X509v3 Authority Key Identifier:
keyid:04:4F:A3:80:8C:2D:28:C5:77:F9:97:6C:61:CD:22:6E:18:86:95:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-jgIwtKMV3-ZdsYc0ibhiGldg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a9beb0-cbe7-465e-8008-d54722cca849/1/BE-jgIwtKMV3-ZdsYc0ibhiGldg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:0c:27:1d:db:95:6b:1e:f8:87:c7:35:7b:46:70:04:16:93:
15:7e:e8:60:2e:f3:23:10:eb:b5:52:76:e6:09:05:24:49:36:
55:33:7b:cd:f8:be:68:82:a1:48:fe:90:18:52:ef:e6:2d:7c:
bc:51:12:6b:b0:6a:a0:20:2b:fa:d3:1d:1c:10:4e:f7:09:a1:
d0:7d:2d:f4:4c:cb:dc:bb:ea:62:e1:32:7a:95:d0:bf:13:3a:
f5:83:45:a0:51:15:41:a9:ea:d8:bd:22:7d:c9:d2:73:f0:0f:
90:6d:c6:11:a6:f3:f3:f1:e4:02:31:78:70:04:96:b5:e8:05:
2e:94:c0:2c:cb:d1:72:b2:c2:82:62:0c:f2:5e:0a:b8:cc:a8:
d9:33:e2:c0:2e:06:74:4e:aa:92:71:df:62:40:8b:ee:11:71:
27:c9:2c:09:12:e7:86:bf:17:a4:0b:4e:1b:cc:de:2f:6f:d8:
f1:5b:6d:9e:c0:3f:14:42:c9:fd:26:61:14:c7:fa:c6:1f:1e:
18:60:30:4a:fd:d1:9a:79:bc:0e:68:8f:c7:03:2a:59:6e:4a:
e5:c4:6a:ed:6b:8b:e2:79:0b:eb:ba:7d:2e:0a:d2:b3:73:ed:
0d:12:ec:5e:2a:3b:be:c8:25:ca:0c:07:96:95:e6:6e:6c:2b:
dc:b5:27:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:14 2025 by rpki-client