Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File: BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier: 0yUASRFIYWbizNcYWHZnrhgufgMjIsIY7dj+xHooq54=
Subject key identifier: 98:50:FE:89:3F:D0:56:A2:E0:11:DB:89:C0:43:6F:8A:D9:50:85:15
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer: /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial: 0194BCAA2879027E80B119A9FA85DE5029A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number: 05EA
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: VeU2/KkQIHuNgqdXdP1xa4qp7cgTHMLfCPPdEvjsD/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:28:79:02:7e:80:b1:19:a9:fa:85:de:50:29:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=9850fe893fd056a2e011db89c0436f8ad9508515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:d1:a0:76:35:94:7c:14:42:2e:98:a4:18:
6a:46:5a:3a:87:02:9c:60:98:dd:20:2e:8c:10:c8:
52:4f:87:23:18:37:60:b9:d7:ac:d9:ad:19:2d:47:
2c:a0:e7:7f:06:f6:60:27:10:a8:7d:e5:9e:ba:d8:
21:3e:00:2d:73:d0:14:30:39:13:d2:43:46:5f:6b:
eb:ed:bf:78:c9:a1:1e:37:c9:37:1c:fd:5a:22:39:
29:21:0e:8b:86:32:ef:28:a5:9e:69:3e:9d:d9:2a:
9c:8a:16:e9:26:f3:1c:6a:97:1d:04:a8:16:37:18:
32:06:ea:45:ca:98:5b:87:dc:d8:7c:a8:1f:81:a0:
d9:56:f7:b4:e4:72:30:5c:6b:87:0e:2c:e9:b4:d6:
c1:b1:b2:01:9c:05:b5:aa:28:ae:61:c7:65:c8:9f:
96:c1:a6:45:63:4f:25:ac:7f:29:bb:bb:64:42:f5:
ae:ef:58:c5:22:24:ce:89:2e:ff:fd:cf:fb:bb:3a:
ff:10:32:2f:4e:b1:80:2c:07:6a:37:de:0d:30:64:
d9:ca:43:70:26:e5:72:4c:01:c3:17:19:e9:23:ea:
c1:ff:5f:5e:5b:8d:fc:9f:2c:43:0d:4f:a8:41:44:
d3:6f:0d:80:dd:96:48:94:f7:79:76:1a:7c:d0:ca:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:FE:89:3F:D0:56:A2:E0:11:DB:89:C0:43:6F:8A:D9:50:85:15
X509v3 Authority Key Identifier:
keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:4f:06:3a:ef:82:56:67:69:d4:8d:1d:e5:d0:f2:64:32:
2c:31:54:7d:f9:29:9b:97:a3:b0:bb:08:1f:49:0f:9b:83:f4:
97:eb:bf:83:31:dc:e4:6b:7b:80:4b:f9:f1:13:73:c0:c6:d9:
b4:48:68:24:45:8a:65:7d:2d:78:e2:78:65:a6:5e:4d:29:79:
42:83:c3:45:ec:71:4d:c6:ee:67:cd:c0:49:e5:d8:e4:26:c6:
26:8d:de:2b:c1:14:0e:6f:e8:89:f8:32:41:1d:c8:20:3c:b9:
fc:dd:ac:37:4d:1f:41:7e:cc:58:76:61:12:52:a0:2c:ab:7b:
18:2b:e0:e1:35:aa:d7:6f:89:c9:cd:5b:4d:56:ac:5f:fa:db:
0f:af:02:8b:ae:2f:5f:20:32:cf:51:b0:d1:bf:88:64:e1:39:
31:f0:58:72:34:8b:0a:03:21:f8:d3:87:f0:17:96:e6:39:4d:
d0:24:c9:3e:3f:5d:c9:b0:06:ac:a4:69:9e:0d:5a:53:d7:6b:
85:78:49:bb:e5:61:b5:95:f6:ed:12:7b:c2:78:8f:95:1b:ad:
ab:3e:2b:0c:08:c0:d0:9f:3f:b1:89:d0:31:45:9d:d0:58:ac:
c8:e2:45:9b:9a:ab:e3:ce:ab:ae:68:58:05:94:d8:d8:d2:e1:
de:88:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:25 2025 by rpki-client