Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: eL4pIMm0Qx7hGpaSDcqeyN8QyDN3IzKMjF2+LaKTQlg=
Subject key identifier: 82:C9:CF:57:3B:C1:9B:C5:4C:5D:D9:D8:34:30:73:01:A1:5B:A7:F4
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 0194BCE0A574FB563984C9A2DEC3E8C66FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: xFRWcn6tCkpCfoUEb30vPEamBHslp9xwZ+hXiJ7uZws=)
2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a5:74:fb:56:39:84:c9:a2:de:c3:e8:c6:6f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=82c9cf573bc19bc54c5dd9d834307301a15ba7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:33:4a:b4:ac:85:5c:25:d9:d9:b5:c0:88:
45:b1:91:eb:00:cb:26:b9:57:ff:4a:9d:9e:28:7b:
e6:0a:64:ed:e8:f1:e4:0d:78:0b:e6:68:49:3e:34:
44:cb:fb:33:28:ce:3f:2b:5f:b3:e4:44:cf:e1:e7:
17:5b:97:70:ef:ee:13:71:bf:94:2b:8d:b6:21:74:
be:39:72:66:ca:01:b7:a5:d7:c4:74:f0:be:9e:f4:
cd:79:33:5e:11:f0:6f:aa:ed:d6:5e:7c:b3:c7:da:
ec:1c:40:25:d7:c4:68:5e:fe:cd:66:63:af:88:a1:
e3:da:15:d0:32:eb:1e:fe:02:d7:3b:98:73:90:e0:
d8:4e:ca:52:22:b1:8c:0a:e0:70:03:76:28:3c:e7:
a6:45:af:f7:56:a3:5d:ca:97:2c:40:82:71:4f:66:
73:97:cd:f0:94:46:d8:9e:1c:38:1c:92:07:58:c1:
4e:67:bb:4f:57:30:d3:51:35:31:e6:b9:75:5f:59:
25:d0:df:e9:37:90:3d:cd:ad:d1:7a:47:66:0b:a5:
6c:64:3f:25:82:9d:80:85:d3:2f:b0:49:1d:67:e4:
3e:aa:07:6c:b8:91:d9:51:04:d8:93:58:1a:0b:54:
05:03:3a:fc:0f:72:79:53:53:5d:7e:b1:0f:a3:af:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:CF:57:3B:C1:9B:C5:4C:5D:D9:D8:34:30:73:01:A1:5B:A7:F4
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1c:9c:7c:82:d4:2d:73:24:2c:d6:35:5c:06:28:3d:0c:a0:
44:51:69:a2:d4:2c:e8:18:06:cf:73:14:7d:aa:49:f7:0a:ba:
ff:bc:7f:67:d3:83:a0:4a:94:73:58:68:9b:c8:b0:34:7a:97:
d7:d0:bf:1c:6b:93:13:f5:15:ba:53:38:21:1c:ad:98:11:14:
89:83:59:bc:45:1b:a6:dc:44:29:22:c5:ce:77:ad:33:0a:7f:
c7:6b:6f:f0:f4:ed:73:1e:4b:61:80:06:34:8c:40:1f:60:08:
dd:ae:ad:d0:e3:73:c6:d1:f2:6c:0c:ff:98:a0:8f:a6:a7:5b:
26:67:6f:cc:60:7f:04:ec:6c:00:83:38:cf:f6:09:8a:50:fb:
49:44:53:7d:a9:c8:8f:1c:e3:ec:bb:31:c9:14:d1:9b:c3:43:
43:28:cb:d2:e2:80:9a:3d:5f:53:d1:b0:33:ef:62:27:eb:45:
df:fc:a1:3f:84:bd:da:ad:b5:90:ce:a6:c3:df:fb:6c:c2:b0:
1d:aa:12:97:c4:55:e5:cf:f1:ba:cd:4c:7a:35:e5:fb:4b:86:
1f:34:f2:99:4c:d3:25:0d:64:6f:8e:48:87:45:d1:f5:90:00:
fa:9e:02:3c:ae:86:57:95:12:3e:32:3a:2e:98:52:89:c9:cd:
29:3b:99:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:29 2025 by rpki-client