Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier: i05apwWu68B1vGyfSAZaLKc3lNYZZy1uNWCYct6J/S4=
Subject key identifier: D2:AE:BF:24:7D:73:45:A1:E0:E1:31:86:64:13:DF:A5:8C:08:5D:67
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial: 0194BC72B0D0EE4EC68A4AB5CD5A47D7BAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number: 04B1
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: cThIH4gUG5oRWC38R/gzm5JNgPigWF4UsyeHRFo/ukg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:d0:ee:4e:c6:8a:4a:b5:cd:5a:47:d7:ba:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=d2aebf247d7345a1e0e131866413dfa58c085d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:59:7e:f0:fe:69:fa:bf:6b:75:3c:b3:09:4a:
63:88:b6:39:0d:fd:0f:8f:2c:d9:7d:dc:89:a6:f4:
79:d5:33:e9:9c:75:2c:3e:50:98:ab:0f:5e:68:3c:
8f:0d:3e:0f:67:a5:a3:a2:8f:e0:23:67:a1:b2:9a:
12:53:55:bc:ea:29:f4:c6:9b:a7:52:bf:3f:34:81:
2e:9b:28:c8:37:3a:69:ed:1d:53:0d:03:75:60:35:
4d:d7:4b:66:04:0b:0b:36:ec:41:63:3f:08:40:9f:
65:e6:25:89:64:ca:9c:de:0b:93:d1:54:80:28:09:
e1:70:60:50:03:19:dc:75:d8:27:e1:ea:fb:a9:f2:
21:66:a0:e4:bb:a1:a1:72:06:d0:cc:e6:d8:e9:ac:
0d:f1:13:cd:cc:d2:d8:2e:2a:de:f1:2a:9f:ab:4d:
1f:8b:54:8b:38:f6:36:0b:47:a6:ca:7a:b3:61:c8:
1c:2f:01:01:91:cc:62:a1:47:90:87:8f:7e:44:8b:
a1:89:61:cb:8c:a2:1f:52:a0:e4:84:9c:d2:8d:5e:
54:7b:2d:1f:1a:a1:26:c8:62:2a:11:1d:a3:ce:fc:
2d:89:b6:e4:cb:63:d8:2e:f0:3c:34:28:c4:98:0e:
8c:81:70:14:dd:9a:c3:ec:5f:a1:c1:2d:a9:c1:8a:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:BF:24:7D:73:45:A1:E0:E1:31:86:64:13:DF:A5:8C:08:5D:67
X509v3 Authority Key Identifier:
keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:a0:70:14:bb:0f:67:6e:ac:e1:f2:08:23:3d:19:52:e8:
0a:a3:15:53:09:b9:cc:7a:7c:91:cf:5a:c4:3c:25:3a:37:3b:
c3:f0:fb:43:18:ae:95:20:a9:ce:6d:8a:29:d5:53:14:67:69:
4a:e8:87:a7:7f:b5:4c:d3:0a:ba:e3:65:18:d7:62:d0:42:dd:
39:1d:bf:fc:a6:5d:47:94:b7:ae:87:31:88:0c:7a:85:a7:7b:
ce:16:68:e6:bb:f0:49:de:1c:73:df:70:9f:e7:8a:59:03:4f:
95:77:d3:f7:b9:9d:7b:c2:99:03:56:bc:62:87:67:3d:ec:48:
ed:7d:a7:a2:24:01:c8:64:5a:f9:cb:ef:b3:ff:be:b7:0b:58:
dc:f6:bc:f4:82:27:0d:95:c5:78:0b:e1:75:3a:6b:a9:84:4a:
60:3e:76:45:46:9a:91:d8:2a:cc:67:0b:f6:15:4c:63:3a:0e:
2b:eb:23:bc:fd:88:02:e5:40:b9:37:51:49:d7:94:ac:44:c5:
ba:95:70:67:26:45:88:ba:f6:53:a9:44:bb:34:30:58:2c:80:
c2:24:4a:ee:f5:c8:d6:cb:ec:54:88:3b:79:c9:2f:f5:03:ab:
ab:f5:b1:a3:82:c1:e4:99:df:a7:83:7f:40:e1:01:5c:ec:5c:
a8:f7:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:38:27 2025 by rpki-client