Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: rcp2LjqpKiT2SrC7HhpYRo2fBs/OMI1PwijmnrUcJeE=
Subject key identifier: A1:C6:A6:7D:B1:13:42:4F:A4:F3:BC:FD:0F:67:E1:91:8C:15:DF:9D
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 0194BCA9F97DAF10087CB5C92220B04738A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 1109
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: ys25HEp6ggn4Vjgo7GUbPoSGBkPzJfgUrEsMeMS/KL8=)
2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f9:7d:af:10:08:7c:b5:c9:22:20:b0:47:38:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=a1c6a67db113424fa4f3bcfd0f67e1918c15df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:7e:53:ca:d5:53:31:5c:6d:a9:b7:e0:21:
a6:cb:3d:7d:f2:56:1e:36:c9:b6:a6:52:6e:ca:77:
11:66:f5:75:ec:9f:3a:09:24:b8:82:b6:7e:05:15:
17:4f:16:38:06:82:b2:50:30:11:c3:aa:a1:17:43:
ba:7d:b5:f1:19:49:a6:e7:10:f0:c8:c2:df:3f:d5:
b8:77:40:70:fa:79:9e:fd:e5:83:e1:69:b5:fd:a9:
ae:18:3c:c0:6d:18:5c:1b:f9:67:c8:30:1d:01:41:
18:70:c3:d3:c5:14:04:5d:f5:d9:fd:82:09:d0:a6:
b7:60:5e:5c:79:0f:e0:95:ae:cf:c5:fa:01:a4:08:
3a:72:7c:da:5b:11:9a:70:4b:0f:c1:b3:24:b3:af:
d9:10:27:75:c0:1a:07:95:34:da:eb:b6:75:6b:92:
93:1e:c3:7f:9e:74:fa:dc:00:15:bd:2e:85:11:a8:
9b:db:ab:9c:d5:58:dd:d6:b1:9d:62:4b:84:02:7d:
fb:7a:b0:4c:e8:1c:10:7c:e8:6c:bd:24:15:46:50:
21:77:89:8c:73:ef:80:86:43:f6:7f:11:2a:43:22:
e0:6e:67:d7:95:9b:62:1a:b6:d1:b0:6d:7f:1c:29:
f7:61:60:b5:35:3d:4c:92:b1:6b:57:f5:4e:26:06:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:A6:7D:B1:13:42:4F:A4:F3:BC:FD:0F:67:E1:91:8C:15:DF:9D
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3f:e6:42:86:5d:11:80:65:7c:16:9c:40:13:43:06:b0:9d:
17:3c:95:29:af:11:a9:fe:c0:5b:cf:43:df:47:89:0c:19:04:
ca:01:55:44:e3:a5:ac:e6:1e:ad:2e:8f:fb:d4:13:5b:ad:2a:
be:0c:96:3a:ce:b9:2b:79:40:83:20:fc:82:24:62:d7:1b:bc:
30:97:ed:27:6e:2d:1a:06:a2:31:0b:0e:b5:54:fb:e4:f1:75:
24:ce:95:3b:d1:ff:72:03:72:16:06:3a:cf:da:16:a5:c7:9b:
77:65:9a:bd:2c:45:31:d4:7e:b9:95:49:3a:0d:3c:01:93:7e:
f3:99:47:2a:72:ef:c1:64:7a:b0:43:b1:ba:cf:55:40:54:3a:
d3:04:fb:1e:44:30:b5:d9:5c:0e:6b:db:56:30:b2:59:ff:7c:
ba:08:cf:03:7e:ce:5e:52:af:31:50:2f:7d:e3:46:73:bb:ef:
37:43:84:ad:2c:d6:79:35:fa:36:1b:24:95:75:b6:50:42:8a:
58:59:f6:51:88:9c:52:64:d8:48:7f:d2:bf:c2:87:38:4f:a2:
76:db:7a:5a:60:56:1d:73:3e:c6:61:e6:ce:e3:c1:71:9d:6b:
96:63:c4:43:ec:e1:e6:2f:b2:47:1e:9e:ab:34:1a:1f:92:cc:
9a:a3:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:05 2025 by rpki-client