Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
File: Bjc-uCHJZromeoONlS_EpBjLoQc.mft (raw, json)
Hash identifier: CMIqsiXt/72dprawKE4j+E38ipz8kyOYGLK9xgGVo7k=
Subject key identifier: AE:D8:5E:E5:E6:99:9C:89:A0:58:F8:16:83:C4:DA:86:4D:B0:A4:E3
Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107
Certificate serial: 0194BD175A8474635C1F9F27935ACC20E1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: Bjc-uCHJZromeoONlS_EpBjLoQc.crl (hash: Smva2K+p41UKBg9Ixen81p1tEiPaUf/oRnZ/GNmClEQ=)
2: hzUgKoXbBv3CJRIA7Xas-eVKMjQ.roa (hash: RO7C6LUDj1R9ksySlerfgqbCZKiIyzwGTWcyFyoo2K4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:84:74:63:5c:1f:9f:27:93:5a:cc:20:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=aed85ee5e6999c89a058f81683c4da864db0a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:e2:4a:6e:a6:5d:83:67:66:f8:cc:47:e1:
02:11:83:bc:c6:56:90:ed:02:f4:5f:fc:06:a6:7f:
c1:16:d9:d9:4b:d1:fe:50:4b:8c:1b:07:87:b4:58:
c1:1a:b2:9f:9a:42:ae:cf:3c:bd:7b:3f:1e:83:3d:
52:b5:a5:74:46:e6:b6:68:25:1a:a4:f9:d6:99:3a:
f7:b3:55:b4:34:34:1e:3b:3c:1e:c4:cd:e9:a4:02:
15:2c:81:11:ba:fa:20:de:fe:94:37:6e:bc:95:af:
12:7c:ea:f2:2e:e4:1e:e0:53:11:4b:bf:28:24:1d:
66:f7:fd:58:6c:0c:8c:7c:4a:36:3d:f2:bc:42:d5:
a8:ee:ca:b1:9b:28:43:0f:4b:47:09:ca:a2:39:c4:
37:5e:9d:75:49:ef:87:3c:98:18:c7:69:87:34:7a:
7c:b4:b5:8f:f5:ce:14:ae:ff:18:c9:45:11:ac:13:
a9:5e:06:52:6c:02:5c:92:25:82:f5:bf:28:c6:45:
5d:05:8c:77:f4:cd:18:d6:0d:ca:1f:f5:1e:c7:25:
53:a7:a9:ae:e4:68:7e:5a:9e:35:e9:47:0d:51:96:
66:9d:71:c5:27:b0:28:aa:76:af:d2:f6:aa:9c:d3:
29:c0:83:d2:e2:a1:15:c4:98:92:3e:3a:11:eb:0d:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D8:5E:E5:E6:99:9C:89:A0:58:F8:16:83:C4:DA:86:4D:B0:A4:E3
X509v3 Authority Key Identifier:
keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c4:2b:7d:d9:e2:aa:6a:c5:62:6f:0a:2d:da:ee:e4:27:9b:
0d:e8:13:51:70:4c:a1:67:cf:85:dc:c4:18:c3:69:9b:14:d8:
39:6a:0b:fb:8e:03:f9:f1:d0:50:d3:4d:b2:d7:b4:72:46:9e:
fa:1a:84:aa:44:7c:df:2a:0d:8a:1f:81:12:a8:3e:72:75:f0:
54:e9:d7:af:65:e7:6b:77:1d:86:6f:01:63:6b:d8:68:a2:df:
a6:e7:bb:2e:df:83:4e:3a:59:8e:a1:a3:06:01:04:32:ec:aa:
23:b1:75:12:84:cd:84:ae:da:b9:cb:3e:94:09:84:e8:f4:b4:
74:42:19:cc:e8:40:f6:02:10:e8:58:9e:79:5a:2c:6f:4f:8d:
e2:cc:23:7c:0f:33:61:93:fe:22:1b:18:e8:5e:9b:7c:70:9a:
89:8a:2e:38:88:9c:0f:3f:37:21:a4:71:47:e8:be:d6:65:f6:
e7:cd:8b:f3:a9:7e:98:8f:71:e9:90:21:a4:14:64:f9:6a:bf:
ef:1e:3b:e6:29:55:b3:e5:dc:b7:0c:83:10:37:1b:2a:11:0c:
28:f6:36:ed:5f:3d:28:dd:0c:6a:68:e3:09:df:cb:4d:4a:06:
8e:e3:71:d0:e9:cc:b2:ee:53:49:6a:5b:97:20:d4:14:42:9e:
b8:3f:e5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:37 2025 by rpki-client