Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
File: BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft (raw, json)
Hash identifier: 6xytfFoY1lgU1kYKN+SCV/joRE1MQfhanW1NB22wxV0=
Subject key identifier: 82:FF:98:00:77:1E:31:27:F4:EE:B1:69:57:55:B1:59:8E:CD:24:39
Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Certificate serial: 0194BCA9A0D402530D52839D182A5A699AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
Manifest number: 05D4
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl (hash: Pl/jH+mTP+fdol/oLpjCIKjVngL+7pDJ6AeHcp/laiA=)
2: rDLUksu5RJZHpovJcJfARGodJyk.roa (hash: 6LsaGYClie7jwTmpMZAxkMISVs9EUqwDFuEv8m5cWNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a0:d4:02:53:0d:52:83:9d:18:2a:5a:69:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=82ff9800771e3127f4eeb1695755b1598ecd2439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:a2:60:46:85:4a:d2:6a:e1:7d:07:b5:42:
27:3a:e3:f3:c3:0f:1b:84:a5:35:d7:f6:70:7f:86:
9f:a5:ea:5d:c1:b1:34:75:d9:4f:01:6a:fb:8a:b0:
90:f7:41:9b:4f:e2:66:24:70:32:5d:f5:c6:78:b6:
5b:43:51:d1:49:23:88:00:31:92:d1:70:40:73:7e:
3c:13:ed:e4:ac:94:fc:4c:75:3d:ce:53:5a:00:f3:
66:98:b5:8d:7e:c4:7d:37:ac:28:a5:29:0a:17:94:
ef:c8:7b:b9:84:bf:e1:c4:1f:fb:dc:f1:1e:58:d3:
01:fd:ad:5b:0d:02:47:da:e9:7e:49:3e:22:fd:8b:
04:4d:bf:28:b1:9d:54:48:a1:4a:a5:23:89:d9:93:
64:00:b2:9c:53:f5:7b:45:0c:d1:37:f4:d1:0d:93:
b4:a9:19:16:d5:81:29:6a:70:91:5e:67:19:ec:11:
72:fa:58:01:1e:dd:0f:6c:61:cc:ac:f6:e4:1e:f2:
a6:cb:76:b0:17:6f:c5:2d:5d:80:82:e2:66:02:b0:
67:8f:ff:53:31:43:74:fc:e2:e9:dc:54:2c:12:99:
3e:09:9c:4f:62:89:af:89:5c:e6:a4:45:f6:3c:1e:
8e:d7:96:d2:d6:82:94:0b:3e:f6:11:af:07:4c:91:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FF:98:00:77:1E:31:27:F4:EE:B1:69:57:55:B1:59:8E:CD:24:39
X509v3 Authority Key Identifier:
keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:01:1d:81:24:c7:54:64:b1:a0:b9:d7:39:65:b4:b0:03:0f:
b4:9d:04:29:e6:76:ac:75:cb:b1:6a:f9:97:f5:84:36:eb:da:
54:e5:24:98:05:3c:73:6e:b1:fb:84:ca:a7:26:18:31:05:0c:
02:7f:de:79:01:8d:3e:e2:e7:13:90:07:b3:0a:ea:2a:f8:53:
e6:3e:f7:05:14:bb:28:97:d4:98:88:3b:49:79:d8:11:9e:04:
a9:4e:8b:c1:04:dc:e2:18:12:91:a7:5d:2c:8b:60:3d:2b:c9:
a3:d8:38:51:c4:17:d1:e2:dc:4e:e6:2f:81:06:ff:ec:f6:c4:
13:dc:9e:71:b0:fb:7d:ca:2e:45:d8:b9:8c:4d:78:8c:d5:33:
69:f9:e3:2b:cd:f0:94:3d:c7:b7:15:ef:45:f4:7b:1e:67:73:
86:7f:c8:69:90:e3:f4:5f:1c:4c:68:73:4b:1f:24:f6:c9:dd:
94:c1:36:26:0f:71:51:ad:a4:7c:7e:a5:6b:df:64:a4:2b:6f:
05:c3:30:00:40:32:80:e6:83:2e:ec:34:65:3a:64:10:2d:43:
50:c7:43:0d:79:33:f1:8e:6d:dd:82:e0:fb:69:61:50:73:01:
79:8b:10:49:98:b9:a5:a4:80:68:6c:4b:98:42:ca:1e:f7:94:
3d:f7:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:02 2025 by rpki-client