Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier: G+NyTlXUJ1eKbIriMLI/8LylUawQeZoqisQQ7jEcf4s=
Subject key identifier: AC:DD:3E:46:42:E5:C6:60:14:EC:F4:30:3F:AF:36:EA:E9:5D:38:42
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 0194BC72C43E139A23528044E7B65F373B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number: 038E
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: urbDn6+zRSVMf1c8IOiNoTbFIYxC9VU/CDp2mwAxDDU=)
2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c4:3e:13:9a:23:52:80:44:e7:b6:5f:37:3b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=acdd3e4642e5c66014ecf4303faf36eae95d3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:ca:f5:24:a2:bb:18:c9:93:3d:88:7c:54:
f6:6f:79:07:70:e5:19:0e:5a:6e:34:af:b0:c6:6e:
6c:ce:73:85:d7:0e:da:61:91:c2:42:7d:bc:0a:4e:
a4:da:7f:19:85:39:8c:5d:31:3b:1a:c8:fa:fb:f0:
3e:ad:6b:3e:70:36:5e:40:52:4e:c4:21:cc:10:73:
32:7c:12:e7:af:f1:26:e8:16:8c:8c:08:63:8f:ff:
0f:ac:1e:cc:ec:cd:1b:68:6c:ed:6b:e2:f6:c7:cb:
8a:d4:19:1c:ae:74:3a:d6:2e:0a:c1:fe:c2:a8:b0:
e2:fe:ef:b8:49:3b:29:bd:2b:39:db:e3:c5:ba:27:
e4:77:79:e3:74:2a:bc:02:4e:52:30:ff:fc:48:84:
dd:fe:a9:0f:8a:65:23:4f:36:d8:20:d5:5a:61:cd:
53:40:21:7b:7e:06:f2:8d:ae:4c:a3:d2:99:8a:e0:
d5:e3:aa:96:7d:1d:4d:62:ea:5f:54:cb:51:ae:c2:
03:92:c7:3f:4f:fa:09:1f:63:06:a5:ed:c4:8c:29:
f3:f5:9f:0c:db:bc:bb:c8:48:1f:8e:bb:68:37:c0:
2c:75:cf:20:6b:56:1f:44:d2:13:9d:e3:7f:d1:86:
7d:f7:8b:16:ec:87:0d:8b:3a:e3:1f:36:06:41:13:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:3E:46:42:E5:C6:60:14:EC:F4:30:3F:AF:36:EA:E9:5D:38:42
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ea:c0:2e:31:dd:66:6d:29:ae:cb:09:a9:a2:89:76:ad:3b:
a7:86:59:23:02:a2:9b:a9:53:6d:8f:56:ff:ca:f2:e7:d9:95:
a3:1b:5b:d8:2c:3d:b6:9c:35:04:61:f2:9c:ad:c8:e4:dd:c4:
87:32:98:6b:c9:83:c5:d1:df:6c:77:d5:fd:74:15:09:ad:bd:
3e:f8:3d:1f:12:ec:49:ed:fb:85:44:e6:e4:f1:56:c3:06:c5:
8a:8e:44:ce:0f:05:ff:48:56:e7:ae:38:22:f3:07:19:e0:87:
4f:0b:c7:70:79:0d:ea:16:03:e8:dd:79:98:da:c6:c6:b4:6e:
9f:a8:fc:45:a1:a5:7c:42:45:ff:ce:ac:dc:44:e1:0d:94:be:
4c:e1:13:d9:57:2d:b8:fc:8c:d6:f1:29:16:cc:4c:a4:11:46:
4a:da:ab:41:39:45:a7:62:ba:3d:ef:8e:9c:19:e7:ab:da:8d:
d9:78:26:37:80:e0:36:a7:e0:01:88:ee:2e:56:07:04:1f:57:
05:de:82:15:7c:47:da:3b:6f:a3:37:c1:99:27:e1:ac:5e:eb:
1f:a6:85:7c:4a:ff:4f:30:66:1e:1f:a1:ba:68:db:2e:98:4d:
52:cf:0d:39:a9:c5:f5:af:aa:bc:45:58:39:0a:dd:92:22:9c:
09:38:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:16 2025 by rpki-client