Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: MdmKNTVlbcokmDcBRpwU6kclZ3uG4wAk/80ysfQ8vEE=
Subject key identifier: F8:AF:4F:5C:E5:62:B0:42:72:D0:EB:AA:89:D4:30:0C:9F:CB:41:B4
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 0194BD4EAED5947C303B5E92361493E2536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: oUvJZnIgf4DzH/e0Hv45u6bTOFIGe3cz25C3BcsUuvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:d5:94:7c:30:3b:5e:92:36:14:93:e2:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=f8af4f5ce562b04272d0ebaa89d4300c9fcb41b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:01:67:05:68:35:4d:8f:a3:75:36:c2:65:
03:a7:01:c5:d5:fa:45:ec:95:e5:c6:e3:96:67:d1:
25:42:05:0c:bc:b0:53:af:cc:06:92:6a:d6:ab:c1:
ba:19:32:ca:6f:41:e7:a7:a3:90:c2:09:17:99:b7:
46:ee:77:70:4d:84:6b:5b:0a:8b:a3:05:8c:84:01:
18:48:e4:ea:9d:70:c5:b8:76:24:94:3d:66:b1:fc:
5f:1e:35:cd:e6:0e:f2:41:e0:40:a1:4c:c2:84:62:
8f:f7:0b:77:4b:08:41:b9:00:db:ce:fb:e1:2b:69:
10:82:c1:59:c3:ad:63:e8:fe:37:7e:b3:b4:ac:e7:
e1:c3:d2:73:c5:5f:42:89:fe:d0:a0:88:79:1d:17:
83:c1:53:6e:2d:7a:ba:6b:d9:d7:bd:a9:68:de:82:
b0:df:12:0a:5e:33:cb:88:9b:cd:02:49:9b:f5:1d:
b1:f9:16:ff:e7:e2:ce:9d:52:d0:d9:16:46:ce:25:
f6:77:9d:e4:49:18:45:50:0b:39:6b:24:03:06:38:
37:e8:fa:cb:4a:fd:bb:cc:17:e3:e6:b7:1f:86:27:
52:96:1c:44:c8:2e:9f:9c:4e:06:6d:0e:80:ee:98:
e1:0a:ce:42:e5:5e:75:ed:d3:ae:a7:31:bd:fd:a7:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:4F:5C:E5:62:B0:42:72:D0:EB:AA:89:D4:30:0C:9F:CB:41:B4
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:24:f7:63:e8:56:7b:8f:62:f1:0d:06:a3:f5:1e:2c:ad:
e9:6b:1e:17:43:76:04:8a:a6:29:93:4d:b1:f0:5f:67:0e:f8:
78:f8:be:64:2e:8a:c2:9c:a1:d0:cf:98:d8:1f:7a:fb:f2:58:
9b:fe:d7:3b:c4:45:8f:ad:da:58:99:b2:5d:5e:ed:bb:65:26:
e3:fc:f5:ac:30:df:e2:68:ea:d9:02:07:b3:65:86:9d:8c:71:
61:49:d7:d6:6e:0d:96:56:3c:d1:90:03:0c:a7:65:51:6f:c2:
57:52:dd:ec:5e:40:3b:e4:40:29:97:08:ed:31:7f:53:19:77:
83:0b:3e:32:b2:1a:c3:6c:e8:dd:1d:21:96:64:57:08:0e:dc:
13:f3:bb:34:40:2f:2d:d7:c0:f7:3e:05:3a:45:3f:11:70:23:
54:7b:70:30:e4:cb:28:83:1f:8d:ec:2b:a8:d1:22:d3:d6:a7:
2e:66:1d:cc:43:ea:6b:60:63:8b:a7:02:f8:6b:f4:b1:39:24:
ce:de:aa:5b:fe:5e:a6:81:bd:fe:03:c4:20:c4:e2:88:eb:d7:
14:be:dd:96:20:7d:05:62:ba:c7:28:07:cb:d5:cf:8d:ae:64:
7b:85:4f:84:32:fa:2c:a2:2f:17:d5:74:57:b4:53:34:fa:49:
79:64:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:40 2025 by rpki-client