Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json)
Hash identifier: /k9R9prupQiT8aMxT1vuE0vggAjmNoo8eclYjVURvxM=
Subject key identifier: 10:3B:B0:1E:7C:E4:C1:8C:8C:5A:3F:A3:37:D1:92:08:44:C9:8A:51
Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898
Certificate serial: 0194BC3CA291CF60B3FFE289389987C280AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: Yz5AiGJGc4YpnrPB8uOQV187pl5DLYzJueOuZMKWlcY=)
2: N70Yb5HDAX3BIJy8UjKLLCNEous.roa (hash: qShtm2mEB1c+KG+KsBd4fYZEqu1nYfeAzh76OdmZs60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:91:cf:60:b3:ff:e2:89:38:99:87:c2:80:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=103bb01e7ce4c18c8c5a3fa337d1920844c98a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:34:af:0a:46:7d:1c:67:ef:18:be:61:44:9e:
54:a0:79:c3:ad:53:35:4c:d2:e3:e7:0f:bd:17:33:
7f:75:2a:62:0d:b9:af:0c:c6:bf:0d:cc:22:fd:fb:
ce:48:f8:a8:aa:46:13:2c:d5:7a:91:b2:76:7b:22:
59:40:1f:c0:78:ec:79:dc:a5:b7:7c:dd:b2:ea:2d:
5a:89:06:90:36:8c:56:47:f6:57:33:a0:bd:1f:e3:
b7:2a:b0:ce:e9:88:75:6c:44:a2:03:5c:a6:4b:f2:
f7:55:fb:fa:a2:5b:39:68:ef:91:9d:cf:44:3e:16:
ef:fc:f4:26:2b:17:0b:08:0f:f0:47:47:c5:cf:b0:
7a:45:bd:77:e0:b9:44:91:59:92:ca:99:b9:7b:0e:
9f:ed:f9:16:65:4b:61:03:d3:81:53:49:5f:b6:cf:
9c:2c:56:bb:34:ee:5c:65:a5:a3:d0:8b:fa:d5:e1:
4f:2d:d8:17:58:bf:97:78:99:a5:96:9e:4c:8e:21:
60:26:7d:61:b8:88:16:6d:38:d9:2d:f2:e3:d3:66:
5d:f7:c6:7e:30:7a:24:45:25:d9:0a:63:d1:e0:54:
8b:14:12:80:f9:66:fd:8c:08:13:7b:a9:39:5d:1d:
5b:9d:3b:97:d4:e1:e4:f2:8e:b2:a2:c5:d2:4f:2a:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:B0:1E:7C:E4:C1:8C:8C:5A:3F:A3:37:D1:92:08:44:C9:8A:51
X509v3 Authority Key Identifier:
keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:51:4c:0e:54:4b:bc:51:63:9c:4e:ae:51:9d:89:a3:0e:81:
40:1c:8b:e6:c8:97:91:0d:e0:ee:9a:c0:3c:6f:09:ad:63:12:
a5:bb:03:ea:ce:22:5b:dd:e2:ea:a6:cf:b0:9b:8b:b7:3c:8b:
15:27:e8:91:b6:ba:5e:d0:9e:94:aa:5e:fd:f8:d3:e5:4f:bd:
20:fc:3b:53:fd:10:d9:f1:49:91:23:91:8d:49:ff:4a:8e:b5:
38:30:d4:19:a7:5a:93:d0:9c:9e:62:b0:0b:57:0b:26:7f:f4:
28:db:42:ff:75:21:a4:1f:aa:25:b9:0b:bb:7b:4d:a0:bb:c3:
8b:c4:35:c7:22:b7:9d:8a:bf:5c:37:87:ac:3a:b3:f1:19:9c:
f5:b9:88:08:90:59:bb:f5:4e:63:d1:39:7c:22:e8:a3:d2:9d:
c8:ba:81:f5:49:fa:be:72:33:02:dd:d1:7b:29:50:39:82:4b:
1d:24:6c:9e:1d:fa:b8:0d:e9:90:4a:df:1d:d5:8d:f3:b4:27:
76:15:46:1d:d9:b9:ac:b4:a3:f6:3b:f2:60:b9:ba:bb:6c:67:
3a:df:6a:3a:22:49:b0:f8:0f:16:a5:ff:96:e5:fd:54:b1:e1:
a5:81:17:a2:45:1b:81:25:87:09:65:ef:16:fd:ae:71:13:99:
7d:17:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:34 2025 by rpki-client