Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: HRwJjCPyzs7hyu13yAbVbFOvIru4/Nfby4Db3H+fFIw=
Subject key identifier: 79:83:60:95:DD:C6:81:9D:A7:03:8D:B5:1F:6C:D4:D1:98:D4:CA:E2
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 0194BBCEE4110A1146EBB46FEDA8A2D62147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: jbi451JsIx9kwpe514gtQ56Hfk+2DPVS38hLIWeB2U8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:11:0a:11:46:eb:b4:6f:ed:a8:a2:d6:21:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=79836095ddc6819da7038db51f6cd4d198d4cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:98:cd:8a:b0:16:41:71:85:4d:61:af:78:
fc:56:b7:6f:c3:2d:8d:ae:9b:75:f3:dc:32:29:2f:
29:00:d6:d8:ec:31:87:10:c1:70:03:37:ca:48:22:
7e:be:5c:46:32:21:fd:00:bd:a9:df:69:21:1d:3e:
9b:30:2f:b6:cd:9e:cd:ae:a4:8c:4b:49:04:38:4d:
4b:8e:c9:9f:91:6f:01:e6:44:f3:0c:b2:05:42:b9:
c9:67:bb:d0:1d:1f:cf:65:e7:ee:9d:24:ff:57:76:
82:44:89:3d:c1:8d:fc:37:06:48:c1:30:31:ba:f1:
a5:3b:b2:57:b1:99:05:c6:ff:41:34:c8:7e:1a:92:
90:0c:4c:0d:61:eb:7d:dc:b7:d3:e3:61:0d:d7:9d:
2b:6d:a8:c6:15:1b:42:98:1e:df:50:b1:ca:b0:d1:
54:a5:dc:54:41:8e:bc:e7:97:67:48:78:42:a6:4c:
21:12:53:53:f0:8a:2d:75:ec:68:33:b2:da:a6:4b:
69:e0:68:18:7f:76:e3:68:13:ee:39:6c:f2:cd:fd:
4b:d0:d5:d1:fa:1f:48:26:c1:1f:a6:2c:6c:f3:32:
77:fa:2e:c4:54:35:ba:75:d6:a6:96:38:7c:78:aa:
59:c8:48:1f:a6:fe:40:c3:e4:6d:18:11:43:02:7d:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:60:95:DD:C6:81:9D:A7:03:8D:B5:1F:6C:D4:D1:98:D4:CA:E2
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9f:49:06:82:b4:b3:3c:55:a5:38:4e:d3:45:83:96:a5:94:
02:f4:25:54:0c:ab:1d:9a:23:2e:a7:ad:d6:5e:ee:8d:4d:c4:
c9:79:67:9d:52:7c:24:66:7e:a9:47:ef:ea:c8:22:58:ef:08:
e4:9a:af:79:8d:86:48:24:49:ae:9f:49:0e:4b:c7:99:8b:3f:
35:33:4b:dd:0e:c5:69:89:2c:ad:f7:99:e3:b2:8e:17:43:3d:
73:84:10:80:f1:8c:f7:fe:ac:20:33:75:be:f3:57:fd:91:5d:
4f:4e:f7:b6:8e:dd:a8:e1:5c:d5:83:40:4a:8e:9c:f9:92:91:
3b:36:dc:5f:15:77:23:b8:03:6e:f9:d4:2d:2f:70:62:b6:3b:
be:f5:ae:5b:3e:9c:7f:67:f4:71:50:c0:7a:3c:41:ff:3c:8f:
43:cf:17:8f:2e:4c:a2:10:2c:97:53:a1:78:f6:9f:4c:82:d9:
30:bb:a6:d6:8d:a4:90:ed:c0:74:67:15:44:d3:73:f1:79:7a:
92:0b:0f:85:35:36:fe:e6:d3:68:57:70:09:23:d6:72:93:9f:
e0:27:58:27:bc:ec:0f:3d:d5:22:c8:e6:79:b2:6c:bb:80:cc:
ae:60:f8:83:22:62:91:3b:c6:df:51:3d:40:f3:47:ec:07:71:
a1:1e:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:12 2025 by rpki-client