Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: OZrBgPkLuTbtPWAzN7n3LlpD5syujWy40f+azvqlpdo=
Subject key identifier: 3B:A0:80:0B:3C:AA:00:5F:09:6C:39:76:04:E9:0D:75:1C:9D:93:C7
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 0194BD4ECA96437248EB846EF25DD8862A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 03B4
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: bCbBhWKst3i67HJvACDrUcwORqzvVnObM0odCw3/ou8=)
2: YmfxS-GgNftFlff0Z2MZRV7dFdg.roa (hash: udDDnBYDprQnDTUgHyUZUopukV2qllWtt5uqI+VT1iw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ca:96:43:72:48:eb:84:6e:f2:5d:d8:86:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=3ba0800b3caa005f096c397604e90d751c9d93c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:15:9c:2f:3e:e2:d2:64:f5:aa:ea:67:7d:
e7:cc:03:ad:28:36:b8:03:19:40:90:9a:fd:a7:d0:
f0:2c:dc:05:f6:4f:95:a4:60:4b:dc:6e:d2:5f:71:
6b:b2:76:53:04:c5:de:85:fa:3e:1d:4b:c0:e0:e1:
7d:ab:af:28:ba:a0:fe:32:11:44:a1:d3:a1:06:e6:
67:f9:6f:96:0f:ef:9f:e0:94:fc:20:9e:8f:04:66:
01:e1:ab:69:6b:11:62:1a:09:09:19:f6:50:4c:ff:
05:71:15:b5:75:a8:a3:93:ba:c8:66:43:da:66:ca:
fa:9a:0f:32:fb:e3:e6:dc:67:2f:79:78:bd:76:82:
68:2e:e7:f0:54:be:38:2c:b1:45:3e:6a:a7:3f:ca:
b8:d7:1d:2b:ad:a4:3b:34:87:cc:37:ae:9d:0d:34:
95:b3:8a:bf:81:be:fa:c7:f2:af:57:be:52:b2:d6:
f4:15:16:bd:d9:35:ff:1d:45:dc:97:17:8b:58:f3:
e9:6a:ba:51:a0:47:dd:5e:b4:5c:24:d7:38:35:8f:
61:83:b4:1a:82:be:8b:98:1d:51:94:27:94:95:fd:
26:2c:98:f0:f5:85:71:f9:08:f5:c9:ff:30:b1:70:
af:f0:4c:b5:21:09:9c:08:d4:e0:aa:43:1d:d3:59:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:80:0B:3C:AA:00:5F:09:6C:39:76:04:E9:0D:75:1C:9D:93:C7
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b7:db:db:c1:79:68:e3:32:3f:79:b5:26:47:22:7e:41:60:
d6:8c:bc:d4:ad:1e:d1:72:31:53:84:3b:f1:5b:f6:b2:ff:b0:
68:4b:82:46:2e:5a:df:76:bc:f1:da:66:c8:2f:86:ae:c5:f4:
b8:90:d0:46:25:07:fe:e9:d2:e3:3c:c0:d5:84:0d:5c:6f:90:
7e:89:d3:70:4b:3d:56:96:ba:19:f3:98:a5:e3:1f:6d:32:1c:
37:92:03:a9:7f:8b:d7:3d:cf:f5:28:69:63:e2:df:18:5e:4e:
0c:31:b8:14:8b:54:40:3e:4a:67:01:3f:51:4a:cc:d4:47:5c:
d1:c8:ad:e6:da:a4:9f:f6:2e:b5:3d:ce:41:87:3e:d8:dc:c1:
34:a8:f2:c7:41:91:bb:b9:aa:71:60:51:5a:aa:60:c2:59:70:
d6:93:a8:3c:cf:ad:a1:9d:aa:9d:d0:59:58:f8:db:46:6d:d2:
08:a2:47:f5:98:73:7e:24:e0:50:6d:60:bf:9e:1a:96:9c:06:
fa:9f:27:71:61:e3:fb:ac:c4:93:cc:fc:eb:de:6e:3c:15:88:
ec:eb:a7:bd:1d:4f:19:60:3c:23:3d:87:eb:5a:e5:be:cd:c5:
fc:45:21:2a:06:cc:b6:07:c1:d7:94:9d:2e:d4:90:7d:93:c9:
b6:d4:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:28 2025 by rpki-client