Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: 1loRGLHu2mT8KVPt7KGKk8DZaGQQzukOiDpWfuChH2w=
Subject key identifier: 35:E1:4F:C0:07:04:0E:EC:FA:7F:90:78:9C:E6:07:1E:5E:D8:50:9C
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 0194BCAA12247DE12415C3FDC8784CC9BA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: wLg470ig9ra1/kb1Pxkc15FczQwq6oh0bQi9rIHjoNg=)
2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:24:7d:e1:24:15:c3:fd:c8:78:4c:c9:ba:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=35e14fc007040eecfa7f90789ce6071e5ed8509c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:69:0b:8f:14:0d:d7:26:5c:47:69:3e:8c:
00:ed:f5:f0:d0:ff:a8:39:13:4e:08:c6:83:ae:77:
1e:90:33:cf:dd:43:9f:2c:d0:95:ea:2f:fc:e3:54:
8d:09:bb:94:a5:98:2b:1b:54:6e:33:9d:11:c3:3e:
46:64:94:c8:3f:c4:75:22:84:ea:e3:12:38:43:5a:
5d:7c:b0:37:9f:02:ed:61:49:19:69:a1:59:c2:c2:
17:35:50:c8:2c:ca:d2:7c:3f:cd:55:6a:1d:f1:93:
92:e0:97:4f:ea:06:4f:a3:ff:d5:83:0b:86:d8:b6:
cb:41:1f:fe:e2:08:fb:07:0e:92:74:e6:c7:22:69:
39:70:05:3b:74:57:e8:4d:6d:b9:4e:c3:f0:03:ac:
91:c3:c6:8f:5a:94:4f:5d:53:86:0a:ad:b2:db:60:
e3:af:41:17:30:9a:bb:8e:0c:10:4e:74:9c:7c:dc:
fb:f9:46:76:b9:0f:e2:dc:17:57:28:06:da:f4:9d:
4d:90:2a:90:72:4f:fc:7b:a8:33:93:71:7a:c7:8d:
92:6a:94:45:03:4e:09:b1:e3:d3:89:4b:de:83:e0:
d5:91:c6:0d:ed:12:1c:4e:67:96:d5:5a:69:3c:da:
df:c7:94:05:d2:c9:23:52:11:1a:41:05:e1:33:93:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E1:4F:C0:07:04:0E:EC:FA:7F:90:78:9C:E6:07:1E:5E:D8:50:9C
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5b:d2:9d:2a:8c:47:79:d5:54:3f:7a:93:8e:67:6b:b0:8e:
4d:29:3c:c8:d9:af:a9:4f:0f:8b:17:a3:ed:40:7a:1b:67:5f:
46:bf:6b:e5:aa:c5:75:df:e8:32:92:70:2b:1e:18:82:ea:e6:
ff:df:91:5c:24:fd:07:39:23:8b:97:1f:40:ea:0b:b6:61:da:
84:72:42:db:07:95:85:0a:4e:89:95:d9:b4:d3:f5:f6:db:85:
0d:42:d9:5e:c0:bc:dd:8d:22:3d:d0:bc:1c:70:93:37:17:01:
dc:a3:de:97:5b:a4:b6:2e:c1:ad:e8:d5:a8:af:28:ff:26:87:
98:40:ed:b1:30:76:fa:69:cb:da:34:f8:61:f8:5a:62:a8:cf:
ba:32:33:d8:34:86:0c:53:eb:de:a8:c4:b7:95:98:86:2c:cf:
2b:fa:24:39:1f:e1:04:d8:b4:f3:20:48:b2:23:a8:e2:9c:56:
c6:e9:5e:41:48:c1:07:f5:33:9c:d6:fa:7a:a4:34:a0:9f:ae:
ad:66:ba:5b:c1:4d:e8:6d:6c:2c:19:e4:c0:1b:fb:ec:6f:f1:
a9:d4:d5:01:ae:94:63:42:b7:22:c8:c2:b2:e7:f7:fc:aa:1b:
67:f8:e9:f2:2d:e7:e8:76:bf:52:05:e5:37:4a:d7:52:d3:1a:
f6:7d:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:10 2025 by rpki-client