Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: 6C9DVdcVUVzNdpJ7yYZ9yN8KFmHY1s1sKdDef925ZCE=
Subject key identifier: 51:B9:13:8C:2A:83:64:8A:E7:65:48:41:71:2C:83:58:05:D7:1B:5D
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0194BC3C33B23CFE7298437F06A9528574F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 0709
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: RP37Ut4A4mwKUV0Kws5hdf1fzd9Kab8GTnTTm0QOrkY=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:33:b2:3c:fe:72:98:43:7f:06:a9:52:85:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=51b9138c2a83648ae7654841712c835805d71b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:ad:09:a7:b8:a8:2a:cb:4c:c0:aa:54:4d:
0b:43:98:48:2f:0d:a9:f8:70:ff:71:d3:32:34:88:
77:8a:25:ed:87:cf:6c:7c:75:f9:54:e2:90:62:0a:
06:aa:cf:26:cb:76:4d:00:74:cf:83:c9:e3:52:ac:
a1:43:2b:f6:e9:92:15:69:13:3c:5c:54:15:3a:b2:
d5:c8:25:5e:0d:77:de:ae:62:06:3b:09:13:31:49:
8b:be:26:87:b8:40:7b:5f:ec:55:d9:51:2c:1d:09:
99:15:ad:2f:c7:ee:33:e6:9f:ac:00:71:96:1f:ab:
c0:05:f1:88:f4:41:07:51:19:b2:a5:c4:72:2c:3b:
63:c8:a3:e7:58:cf:6a:f0:50:0c:64:8e:77:88:4b:
b4:ab:56:e0:e0:2a:0c:2e:29:19:be:e9:6a:11:8c:
6b:f3:60:08:f0:74:5d:4d:f6:5a:de:9d:b5:f1:27:
9d:5f:3d:31:a5:68:2d:b7:53:d4:7b:bf:b0:c1:dc:
40:75:49:72:7a:43:a7:69:67:e9:1b:58:3e:5a:28:
9e:17:e6:e4:67:2b:26:ce:1f:43:b8:f5:42:73:7e:
d2:c1:d5:d3:e3:4c:99:5e:21:ff:50:f7:8f:3b:81:
89:50:a0:35:ed:6b:e2:65:40:6b:a4:7c:04:54:c8:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:13:8C:2A:83:64:8A:E7:65:48:41:71:2C:83:58:05:D7:1B:5D
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:80:f3:e2:bd:36:3e:e9:12:67:c9:f2:ed:2f:48:a0:49:0d:
c2:e4:34:03:54:5a:ae:88:09:1a:94:73:13:9b:5a:e5:59:ad:
64:ab:80:98:ca:21:5f:eb:7b:0c:7c:fe:10:f9:9f:7f:5e:b3:
95:bc:0c:de:de:72:e4:f5:b3:a6:86:dc:ae:bd:c5:2e:79:ff:
e8:a1:d3:71:f3:a0:bd:e6:9d:db:04:49:e9:03:bf:0c:ca:e8:
10:bc:0d:2f:61:0d:59:7c:a4:54:c9:ab:1e:3d:9c:4d:87:e5:
5e:24:02:24:03:54:3f:8a:9a:b4:34:e3:83:e5:c0:03:15:99:
71:48:29:5c:15:d4:e4:09:72:62:37:8d:20:b0:c7:82:5a:24:
9a:6f:92:13:8a:b6:41:00:9c:d2:f1:49:3d:6c:64:9f:f7:f5:
84:56:20:5b:5a:5a:4e:9c:a1:74:d6:8e:95:95:3c:c6:75:30:
db:1f:1a:a3:49:1c:c6:0b:81:6b:4e:53:c1:69:03:ad:f9:69:
ec:8a:e6:17:22:5d:ba:7a:89:10:1c:ad:59:a1:b1:88:27:e1:
27:36:99:51:11:ed:8e:c1:30:54:89:f8:57:a1:e8:cd:e0:cc:
3a:8e:b2:aa:5c:75:ba:97:20:58:65:9f:27:10:94:28:f9:29:
70:e5:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:43 2025 by rpki-client