Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier: 8ovOgVo4x4ebLeXBSL5ExYTG2A4KcY4ToTmmSMp6dMI=
Subject key identifier: DA:F2:53:BA:FC:A8:49:EE:9F:94:9A:FE:0C:9D:D8:4F:16:8C:33:5C
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial: 0194BC733A72282B784B10C2F5BCFE7CC2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number: 12DF
Signing time: Fri 31 Jan 2025 13:00:55 +0000
Manifest this update: Fri 31 Jan 2025 13:00:55 +0000
Manifest next update: Sat 01 Feb 2025 13:00:55 +0000
Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: V5V5X8YO/35Dvm+N5UMeoASODnfTYMD8RZsWtN0O7wE=)
2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3a:72:28:2b:78:4b:10:c2:f5:bc:fe:7c:c2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Validity
Not Before: Jan 31 13:00:55 2025 GMT
Not After : Feb 1 13:00:55 2025 GMT
Subject: CN=daf253bafca849ee9f949afe0c9dd84f168c335c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:b1:ed:d6:87:bb:77:b0:83:b2:8b:e3:eb:
9d:8f:d6:09:1f:db:68:5d:a5:d1:e1:07:60:16:1a:
28:42:ba:28:65:c3:b8:1f:a2:22:20:1c:65:04:12:
de:22:50:13:5e:c6:d0:32:34:f9:c3:8d:7c:fb:af:
ba:f1:40:d5:2d:cc:58:c5:01:6e:4d:d0:36:b5:fc:
fb:bc:f8:f9:1e:1e:e9:9d:52:04:65:55:a0:3d:5a:
11:21:38:10:e2:57:c5:91:5d:f8:27:a3:a6:35:70:
2a:c2:13:f1:e9:bf:7b:90:48:8c:51:fa:c9:fa:df:
36:ed:69:46:6f:a0:c5:89:e0:e0:43:00:4c:c7:8a:
33:1c:ec:91:a3:44:8e:6d:b8:d3:56:0a:95:9e:96:
4e:bf:3f:4d:1b:8a:26:83:f7:bd:b2:ee:4d:f5:c2:
78:bc:c7:fe:bd:f4:cb:40:a2:ab:59:d7:22:1b:5c:
a9:cc:b8:6a:ef:29:0d:d4:ae:dd:1f:ed:ba:ec:e8:
d0:e5:39:a5:e5:55:b5:13:ef:5c:09:25:da:83:46:
50:53:64:0f:4e:a4:bd:e2:9f:59:d1:bf:01:f0:d8:
01:b8:5c:d8:fa:ea:25:51:ee:37:3e:42:d2:d1:b3:
c9:e1:51:a4:0e:9b:d8:eb:84:84:1c:30:ef:7f:88:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:53:BA:FC:A8:49:EE:9F:94:9A:FE:0C:9D:D8:4F:16:8C:33:5C
X509v3 Authority Key Identifier:
keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4f:aa:4e:41:74:b0:bd:e7:ec:8e:67:db:f9:52:fe:a3:75:
62:f2:11:ad:1d:dd:d8:a0:8a:09:b2:27:4f:ae:2f:21:91:f4:
a0:5f:60:bc:66:38:85:d2:c9:33:6b:fa:06:fb:36:dc:bd:34:
0f:4e:74:17:f9:30:94:8d:18:73:cc:88:34:6d:bb:9f:15:fd:
bf:55:ee:d1:0d:1e:8b:9b:66:d2:5a:d0:1b:a0:2a:e5:ee:f7:
ea:d6:17:d4:5e:06:79:74:89:56:10:3f:2f:74:f4:70:1d:84:
a7:2a:68:6d:b7:60:cd:75:a7:1e:8b:83:a1:d0:47:71:95:76:
75:4c:e9:af:6f:ca:2d:54:b4:73:1b:1e:fb:a4:75:72:e5:68:
02:36:18:85:67:81:10:58:13:67:8a:3b:db:b8:e0:9b:a1:c4:
b4:4c:6a:03:99:4d:4e:81:e4:66:5c:fc:f7:47:b3:15:41:78:
04:2a:e0:2b:4d:86:97:d3:c2:da:5c:7c:d0:3a:01:c0:a1:d1:
b0:e5:49:a3:e0:da:59:26:df:f0:9e:65:54:51:78:3e:5b:d1:
22:48:ca:28:a7:e6:3a:b8:c6:50:02:33:c5:a3:a6:81:e2:f2:
ea:59:2e:e8:6b:08:d9:2e:e9:79:7a:99:fe:40:1c:a6:fc:e7:
08:21:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:36 2025 by rpki-client