Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: v52nvcVAFu7J5FX55MOvo7t+psM2lrQbK2jgzJHV/jo=
Subject key identifier: 97:3A:7C:1B:27:C5:D9:CB:9F:96:9C:43:E9:36:C4:20:BD:57:7B:56
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 0194BC04A8AEB46862AC1F8CF61279DD388B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: lQMbS31Vc5Ch1YY3//R5k1SkWSNpHy3fKtNWjdJc4PE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a8:ae:b4:68:62:ac:1f:8c:f6:12:79:dd:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=973a7c1b27c5d9cb9f969c43e936c420bd577b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:8c:d0:d5:98:98:2c:71:16:d7:cd:a8:97:
38:46:5d:19:7e:5f:ef:4f:f2:e1:af:05:ab:11:0d:
69:0d:14:4a:96:a1:7d:4d:a9:b5:22:5d:f9:e0:4a:
fd:a2:90:7b:bb:c4:1a:e4:55:88:48:e1:36:b6:98:
eb:c9:c6:e4:5c:86:99:9b:a9:68:44:22:d5:f1:2c:
72:d9:58:c1:20:b5:4a:75:f9:e6:b5:7f:e6:0f:fe:
0c:cc:50:df:11:ed:0d:58:b8:79:1d:83:80:0a:0d:
d9:14:fa:b7:77:01:d6:32:df:ff:26:02:94:8c:bf:
ef:4d:8f:40:7e:db:d4:0b:dd:89:2c:d9:6a:fc:88:
4a:40:43:ea:62:e7:eb:e1:bf:98:2c:be:e2:cf:ff:
00:9f:33:dd:a8:9a:7e:0c:29:1b:5e:c8:81:cd:e7:
c0:04:ea:d5:14:ff:85:87:71:8e:04:5d:ff:23:0f:
55:b2:24:06:95:71:e2:3e:7e:d9:43:08:d9:33:a1:
2d:96:54:ac:e6:e5:35:b5:44:be:b9:e1:03:ee:34:
e6:fe:98:8e:d2:f8:e5:00:84:7c:c5:c6:3d:81:cf:
a7:3a:24:5d:8f:58:85:19:5b:6d:ec:0b:fb:43:3c:
65:77:36:4b:6e:43:25:e7:36:43:88:6e:6c:78:40:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:7C:1B:27:C5:D9:CB:9F:96:9C:43:E9:36:C4:20:BD:57:7B:56
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:60:28:24:c6:9b:d4:b1:37:26:f9:d1:cf:e3:8b:44:56:97:
20:02:47:70:96:4d:ab:6d:62:2d:bc:46:da:03:06:f4:f1:7a:
65:ad:02:83:89:6b:18:14:5e:fa:3e:32:7d:7b:ba:ab:ef:d6:
6e:f8:2b:b8:f3:c5:82:c7:cd:35:17:cc:46:c5:5e:7f:8d:50:
9b:90:1e:fd:da:da:d1:a3:d2:1c:1b:77:6e:08:f2:26:db:4d:
3c:98:44:74:fa:4e:25:bc:e4:86:ba:71:ba:d3:2a:a8:e9:f0:
06:83:42:79:ad:12:f8:48:0c:61:ed:38:96:4f:3e:64:b1:65:
9c:7b:53:21:50:62:a2:fc:f4:19:98:0b:ba:bb:80:59:4b:ea:
c4:cd:dd:2a:26:cf:84:82:be:ab:2d:41:8c:34:82:84:13:39:
80:d5:26:17:ff:9b:f9:13:69:68:fd:60:df:4e:93:99:f0:68:
9e:11:de:21:21:a7:c9:4a:c5:ae:f9:20:fc:57:e9:84:cf:f2:
12:cc:c3:af:f1:85:5a:2f:54:0e:79:4e:06:3a:a8:e6:d4:ce:
9a:2b:e7:cb:37:7f:1b:70:a9:6b:a7:e5:75:a3:5b:15:79:2e:
e6:a5:cf:07:a7:59:38:90:a8:34:de:05:42:60:d8:5b:83:9a:
d9:97:a4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:23 2025 by rpki-client