Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
File: bfHIcky70DS6t6Da3wq0uZ_2b_8.mft (raw, json)
Hash identifier: R5DDZJtVs2Q7QfJdsTBDao9oJJQcCRbvNwjLNC8VZwI=
Subject key identifier: 72:C2:4D:A0:38:3B:50:65:CD:88:B1:D3:5A:E2:22:5D:1D:CD:34:FF
Authority key identifier: 6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
Certificate issuer: /CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Certificate serial: 0194BD17C124A06C662911E34CF7B104FCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 3gASlQlN9UdPtrWqrdLITdzt5Ew.roa (hash: ramhN8+V67WDz+dJge66wgSFRzcM7UnMyKgsybDZiQA=)
2: bfHIcky70DS6t6Da3wq0uZ_2b_8.crl (hash: LwWWiaoA4Pd3XXVXLGfxldx6wnS9xhoI6veE21T5T+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:24:a0:6c:66:29:11:e3:4c:f7:b1:04:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df1c8724cbbd034bab7a0dadf0ab4b99ff66fff
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=72c24da0383b5065cd88b1d35ae2225d1dcd34ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:ac:6e:37:87:23:f3:5c:57:e7:e2:e0:32:
5e:b5:70:10:79:5b:b2:70:1e:bd:a5:52:62:93:12:
67:b8:93:fe:27:68:9e:86:d3:4a:8a:b3:1e:c9:2f:
57:30:27:95:22:bb:b6:e9:99:c8:ca:b0:6d:e6:81:
65:35:06:b2:c0:32:b5:06:96:fd:5f:8f:01:21:dc:
8f:88:d8:1f:52:50:77:5c:4e:2d:eb:14:72:33:83:
cc:8c:e5:2b:fd:8e:c3:75:49:82:65:d7:76:94:83:
fb:6e:ea:63:80:04:fb:36:0c:b4:1a:6b:13:ca:52:
1a:ba:65:36:df:37:47:85:dd:cd:35:7d:04:70:c3:
3d:fc:9c:18:22:d0:30:64:b0:6f:ee:76:09:cc:5a:
2b:ae:94:d8:cd:9c:94:9d:ca:52:60:32:85:51:b1:
b5:80:e0:c5:6d:0a:4c:8f:87:21:b9:8b:a3:b6:e2:
4e:5d:52:79:ff:c0:b0:cd:1d:a8:9b:96:6d:bf:4a:
01:67:1e:f2:04:9b:ee:f4:a2:47:77:24:a2:43:77:
44:7a:0d:a6:09:93:13:fa:3a:41:b0:e7:ca:07:30:
a3:e8:f1:2d:eb:8d:c9:92:b4:78:3c:af:0b:83:49:
bc:ab:f2:ef:29:be:09:b2:ee:a3:87:92:99:f8:13:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C2:4D:A0:38:3B:50:65:CD:88:B1:D3:5A:E2:22:5D:1D:CD:34:FF
X509v3 Authority Key Identifier:
keyid:6D:F1:C8:72:4C:BB:D0:34:BA:B7:A0:DA:DF:0A:B4:B9:9F:F6:6F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfHIcky70DS6t6Da3wq0uZ_2b_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e0781f-6e64-46aa-8af0-f924d6f6a595/1/bfHIcky70DS6t6Da3wq0uZ_2b_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:86:b5:55:2c:f9:af:ad:39:16:e4:f3:2e:d1:f0:94:8a:aa:
12:46:e5:b0:f6:ce:17:80:54:0d:71:b4:d0:bd:f4:e7:25:5d:
09:66:6b:4e:74:bb:cd:c7:9e:65:a9:99:60:cc:50:79:8a:14:
1e:c2:6e:2e:15:91:3e:e3:fc:7b:0a:a6:6d:f0:a8:e9:bd:25:
05:a2:fa:13:f8:88:d8:ec:a2:d8:bd:45:cc:ea:fc:2c:8e:91:
98:47:6a:c0:a1:98:16:0e:9f:ae:93:6e:f8:cd:53:29:4b:1a:
54:47:75:d1:68:83:1d:7c:7b:24:3f:29:bb:6e:33:ff:29:6c:
ed:fc:de:d9:fd:f2:c3:19:3d:4b:ab:fb:14:23:74:d7:83:91:
a1:30:d9:17:77:15:d7:e2:a2:c7:01:d0:08:79:f3:b1:20:34:
1d:93:45:cd:a0:73:0c:7a:2b:16:c1:21:82:4c:38:33:11:3c:
d3:e3:43:04:dd:c9:cc:ef:74:ab:c1:c2:bf:83:bb:4b:bb:b0:
89:e9:a7:7e:6f:14:47:c7:b3:a2:fa:18:08:40:a8:f0:cf:28:
74:e9:7a:f6:c0:56:df:9b:47:64:8c:2c:e0:23:d0:47:9a:5f:
28:85:7e:5d:b0:86:45:27:b8:93:47:27:ea:d6:b0:17:ce:d4:
3a:f4:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:58 2025 by rpki-client