Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier: eNnIvrE+9h7+O1luQffmtUNqtjuEiquavAShLzitC9Q=
Subject key identifier: F3:5A:F5:52:3A:85:5F:77:67:BA:7B:54:11:8E:F6:CE:B1:90:68:1B
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 0194BBCDFBF43A54C77D6633C1A18D08D4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number: 042C
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: vcMKPjjtty/nYzpNkLA5sS0OxPCxAS0veVZwYwG3Rsk=)
2: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
3: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
4: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
5: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:f4:3a:54:c7:7d:66:33:c1:a1:8d:08:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=f35af5523a855f7767ba7b54118ef6ceb190681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:0d:cb:75:ca:5b:76:b2:47:05:ed:7e:5a:
c2:b0:ef:21:44:03:1e:82:8a:77:57:91:99:f4:70:
03:74:e9:99:49:12:01:03:1b:09:22:33:f3:2e:9c:
4a:4d:60:38:1d:76:dd:07:e7:b2:65:f2:fb:8a:ec:
34:85:86:f9:10:ea:32:66:90:56:ab:dc:4f:20:94:
db:39:d9:91:44:8e:2b:0e:94:ee:d1:9a:6a:2d:d9:
68:f2:66:8c:e6:cb:82:70:38:d2:c2:80:67:92:c1:
b0:9b:e4:07:b6:51:13:3e:12:08:e6:65:24:13:51:
70:17:55:73:0b:5c:cc:12:8b:63:fd:6a:63:2b:8b:
a9:c5:67:0f:08:9b:38:a4:1c:73:f5:23:08:a5:15:
5a:bd:6b:a6:13:3a:60:56:69:bd:40:a5:23:d4:d6:
ba:06:e9:de:98:70:9f:77:a1:69:5b:31:12:5d:52:
d8:3f:f5:b5:4a:4a:16:69:7f:da:70:9c:a6:27:c6:
4f:72:fd:af:ba:42:67:56:b6:0c:d5:fb:73:80:65:
e2:eb:b3:22:cb:77:86:be:25:7d:8a:ba:0d:ca:86:
4c:3d:b5:0f:14:74:65:1d:9a:06:23:49:3a:32:a4:
dc:ce:ea:b5:ec:70:1a:a0:6b:48:63:45:67:9f:c5:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:F5:52:3A:85:5F:77:67:BA:7B:54:11:8E:F6:CE:B1:90:68:1B
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:78:34:2d:fb:8c:01:74:dc:bd:f2:aa:08:79:96:98:bd:
75:2b:d1:6e:78:ff:2a:e3:11:97:27:fe:93:2c:17:ae:6a:c5:
32:be:59:a4:f9:15:30:b1:5a:3c:4d:db:09:60:91:e8:6f:c0:
75:14:29:8c:7e:af:b1:1e:bb:3e:27:58:11:c7:9b:f2:a1:9d:
7d:2c:ff:6b:f8:34:93:f0:8a:37:b8:f1:70:ee:f7:fd:9c:14:
d5:0a:c4:ac:1d:c0:0d:4b:c0:d9:ba:08:b8:f2:9e:3e:8a:c8:
be:90:1e:2d:a7:9e:65:3f:49:86:21:0b:00:84:0f:4c:6c:8f:
d9:17:c1:96:71:fd:2f:c0:0c:a1:65:be:94:88:09:51:6f:e0:
9b:fd:5f:cc:78:ad:1e:80:3b:4f:8b:2b:df:ba:c3:d0:f9:3f:
73:94:95:34:2d:95:57:f9:3a:6b:7e:8d:6b:54:c8:49:c9:f9:
1c:f1:37:a8:b3:f2:41:28:da:6d:68:3e:de:c2:c9:52:b6:72:
8c:c8:70:c7:17:25:00:13:46:cd:d9:0e:19:a3:c9:79:fc:c3:
cf:fb:fa:ff:56:10:ba:48:87:cd:7f:73:3f:9f:03:37:68:0f:
9d:2a:b2:22:9d:2f:32:cf:12:04:5f:41:3e:09:4f:45:52:ad:
db:16:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:34 2025 by rpki-client