Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json)
Hash identifier: d9ubqxjvHMofxiGM1ScfDos55wRbV6yCH+GVuaUsmwY=
Subject key identifier: 68:CD:A5:A4:92:AF:16:F9:AF:5B:52:10:A3:82:89:08:34:6B:41:5B
Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Certificate serial: 0194BC04B11885243763B68E9A2641B3834A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: GFxeal0IDOt0+uHP/yJYLK93PYhAKcQ3RYtJlNY8Vlk=)
2: xQ3PdmMDye_3ODxtjF3bxTEbrgU.roa (hash: OnYXJU1mRvo0V2FhsSO8D1b8k47DbXdYSrQ7JN4NAuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b1:18:85:24:37:63:b6:8e:9a:26:41:b3:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=68cda5a492af16f9af5b5210a3828908346b415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:84:20:70:a6:02:c0:55:f1:db:cd:a4:c7:
24:77:5b:50:e9:4b:ef:59:51:02:49:09:26:44:a7:
16:8f:e3:5a:0a:35:ee:1c:a8:1f:ff:fc:ab:d0:9a:
90:ec:a7:57:50:15:77:6f:11:eb:d7:82:ce:3a:cb:
61:de:e6:c3:69:bc:06:c5:03:bc:c5:a6:3e:1d:36:
c0:1d:c7:4f:a3:09:01:57:e3:0c:04:62:f5:a8:a4:
39:6a:28:4f:bf:9f:ec:7a:87:96:d4:42:3b:fd:34:
3f:f2:48:09:a7:70:38:a1:2b:02:db:b8:1a:a5:f1:
12:8b:7c:cd:9d:92:63:8a:09:0b:e0:66:9b:0c:8a:
89:57:3a:6e:25:19:8e:fa:6c:99:7c:df:c8:55:75:
9b:58:48:22:72:d2:e4:24:a6:47:50:a1:76:93:2c:
31:61:a3:c4:0d:11:c6:0b:ce:7c:df:48:fe:ab:55:
56:49:60:49:df:e8:2f:ad:73:93:cc:f3:19:55:0f:
f8:2a:e4:0e:90:e8:43:1e:e6:95:2c:00:ae:e7:7d:
68:bd:31:83:83:24:b6:86:82:4d:77:8c:91:87:7a:
d7:3f:f6:96:27:55:b1:de:eb:87:f7:98:6b:08:2e:
92:41:66:36:93:3c:8f:29:e3:7f:1a:21:8a:b6:69:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:A5:A4:92:AF:16:F9:AF:5B:52:10:A3:82:89:08:34:6B:41:5B
X509v3 Authority Key Identifier:
keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f4:44:a0:51:4b:b8:0a:84:97:48:b8:4b:e7:a8:e1:36:08:
dc:52:61:1a:8f:02:ea:74:25:c9:73:70:df:3d:83:63:1f:99:
64:f7:d5:d0:ad:cc:62:31:ba:94:71:3d:99:a8:c4:c7:c6:25:
4b:d7:38:b4:89:9d:80:d7:24:f6:f6:99:3c:4a:7d:64:c4:47:
c7:ba:5c:49:ac:20:b1:45:c4:a0:67:00:c9:57:44:3b:38:27:
8e:05:88:31:a5:e1:bf:07:02:c4:d4:bb:de:6e:ff:96:77:32:
a3:30:18:62:f5:6e:68:0a:c9:19:cf:b9:0c:24:c5:ca:dc:cf:
a4:62:38:14:25:d2:c1:1c:3d:80:e5:f8:ef:ff:13:f8:55:13:
89:c5:a5:6f:33:51:f2:2b:64:27:85:78:d5:1c:cf:68:41:db:
28:c9:8b:62:d3:b8:0e:42:fb:a3:7c:7f:3d:09:ae:ff:75:aa:
73:40:ab:7c:1b:73:61:b0:d4:03:71:13:cb:85:5e:60:5d:9a:
09:89:e1:36:a9:e2:0d:de:79:4f:9c:a4:77:b2:de:e2:06:9f:
87:c1:a5:08:50:6f:c1:3d:8e:7e:68:6a:d4:43:f2:51:fa:cc:
32:c4:72:01:c7:01:26:02:df:6e:78:4d:3b:23:73:16:2a:86:
ed:5b:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:59 2025 by rpki-client