Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File: BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier: Fxnt2m333yoRxf7qgDCtvczSvlyojsx0mS1YsHvGCuw=
Subject key identifier: 41:3F:E5:CD:86:29:B6:45:45:0B:28:E9:AF:9E:31:64:BA:54:00:86
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer: /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial: 0194BD859746C50308E00C34E9BE00E61A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number: 08BA
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=)
2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: bU6AnJcY4HzyV0e/hvpHkA0rsZpcwl4jJKrSKG/U8E4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:46:c5:03:08:e0:0c:34:e9:be:00:e6:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=413fe5cd8629b645450b28e9af9e3164ba540086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:39:be:12:98:07:f6:6d:03:84:c3:79:05:4f:
a9:c8:91:89:19:cd:c2:f7:99:19:9f:71:9b:e3:a0:
69:c5:db:96:36:2c:f0:c3:1e:a9:e2:02:fa:1c:fd:
86:55:93:fb:3a:ad:7c:74:2e:fc:09:14:9a:5b:48:
2a:b6:91:8b:a7:5c:2c:1e:9e:25:e5:89:af:ec:b7:
7a:11:db:43:b1:11:2c:48:08:d5:15:bb:23:7c:ae:
04:a0:fb:60:9e:96:88:8e:21:b7:5b:19:e3:26:ce:
5a:6a:80:64:d2:4a:4c:29:ad:9d:ef:01:24:56:0c:
4a:fd:ca:ae:4c:c5:d3:af:be:5d:d4:b3:74:25:93:
4b:5f:b8:0c:cf:42:18:c3:b1:3f:7f:e8:25:1c:c7:
d8:cd:ef:63:20:34:2f:18:26:07:2f:73:d7:dd:66:
33:07:26:fb:36:b9:3b:22:8e:0c:25:2d:98:dd:b6:
ae:7e:c9:e9:df:f9:18:18:f5:19:20:39:a7:5c:2a:
1d:68:6d:fc:5b:14:c8:ae:28:c8:62:2b:d4:0c:40:
38:36:bd:35:c6:71:32:d9:f9:3b:10:d8:76:8a:7c:
0d:39:62:11:43:89:6b:a9:04:4c:2b:88:f5:a1:a4:
a7:16:48:4b:b5:67:ed:ac:f2:40:57:2a:3f:b2:6f:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:E5:CD:86:29:B6:45:45:0B:28:E9:AF:9E:31:64:BA:54:00:86
X509v3 Authority Key Identifier:
keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:1e:49:1d:34:56:7e:43:eb:c2:06:ad:5c:be:49:ea:81:
84:00:fb:a4:ce:72:71:1d:ec:e7:b6:9f:15:20:63:a8:e7:28:
67:46:76:b3:a0:80:d3:0c:09:4d:10:22:83:0e:8a:fe:48:48:
9c:12:eb:9d:40:2b:21:42:5f:4c:1b:53:8f:a0:21:12:67:18:
40:a7:1a:97:35:b8:2b:3d:21:ea:66:db:d1:cf:d2:4b:46:85:
af:72:9e:7a:29:8f:5a:e3:fe:49:25:9d:9c:5b:4d:c4:43:88:
6d:04:09:21:18:3e:89:d1:32:a5:8b:54:96:59:db:f1:ee:1a:
31:ac:99:97:ae:c9:e3:8e:7a:9a:a9:34:84:51:a8:ca:38:7a:
9a:1d:ec:22:20:72:32:ab:b2:f9:b6:94:be:85:ad:b2:5e:5e:
9f:37:86:a5:09:ee:91:35:37:a2:15:e0:b4:67:72:19:29:a0:
72:ac:68:0e:10:d2:dc:ce:11:d1:ac:b7:2c:85:04:ad:2d:a7:
dd:83:ab:3c:dd:1e:a0:fc:58:41:82:63:4b:5a:80:c1:82:88:
4a:07:ac:58:14:a4:c6:98:91:19:3a:1a:75:8c:31:ab:0c:44:
20:93:fb:7f:82:f2:e5:a4:04:3b:80:9f:f3:af:b8:03:ea:12:
c2:32:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:15 2025 by rpki-client