Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: 5aVtIMjlxbY3z04GA38Shhdl/4V4QtSXWgnKVJCKsSo=
Subject key identifier: 91:E5:E0:A7:19:D1:63:BD:DA:76:77:ED:83:8C:E2:5B:B9:CD:29:2C
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 0194BD4E9556F81FD980EB7146000E906EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 041E
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: 2a73e69gyfNwHA2Co4jXA+XZNod+PF5MBjby42S1Orc=)
2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:56:f8:1f:d9:80:eb:71:46:00:0e:90:6e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=91e5e0a719d163bdda7677ed838ce25bb9cd292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:78:d6:48:b8:3f:60:aa:9d:f7:97:9b:91:
4d:08:74:4a:55:5c:ab:f0:4d:db:fb:80:64:b8:97:
7c:f3:c5:32:d0:1d:80:dc:90:88:cc:de:b2:45:ba:
4e:31:b7:9e:6e:5a:cc:53:59:2c:98:07:78:25:d8:
a3:2b:31:b5:be:00:11:44:96:21:f0:f0:73:06:c7:
43:a5:86:0a:53:aa:38:1f:b6:e8:8b:30:74:79:28:
e3:30:dd:e4:0c:f5:4b:3e:08:48:96:bc:db:fb:ab:
e5:57:1e:99:93:90:e9:ea:c5:1b:d1:6d:29:72:f6:
a4:1e:c4:92:80:35:11:3b:d2:00:8a:a9:0a:f5:d1:
df:7a:e4:46:56:8c:73:5a:69:93:75:41:9a:6b:a7:
cd:25:de:ce:82:49:08:68:9a:e5:4f:fd:03:a7:30:
d1:d3:7d:ab:d5:e6:27:f6:40:ad:6a:73:54:d4:e1:
24:91:41:4d:da:8d:70:8c:91:44:e0:13:51:c2:5b:
3f:09:3d:b7:e7:af:ba:1f:fd:e5:19:77:c3:0f:a6:
40:bf:40:90:24:30:64:5b:f8:19:a8:72:e4:14:7c:
f3:a2:f0:04:0a:63:ed:bd:62:0b:56:05:a4:f8:8a:
ec:39:76:05:59:c5:a3:c2:3a:92:60:1d:71:16:8d:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:E0:A7:19:D1:63:BD:DA:76:77:ED:83:8C:E2:5B:B9:CD:29:2C
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ae:71:97:b2:73:37:95:a7:43:25:9a:7f:21:c7:07:6e:c3:
b1:78:99:f5:aa:a1:04:c5:2b:e0:d5:d7:33:b9:e3:a5:96:b4:
94:5b:88:9d:3c:6e:f2:01:f6:60:4a:40:a7:75:f7:0f:e6:8e:
e1:34:f5:70:da:8f:c6:27:47:79:8c:a1:3c:f6:1e:ba:72:0f:
ef:0f:02:4c:61:19:6f:d9:4f:99:7e:c4:c1:be:d4:22:4d:be:
92:41:ef:6d:29:ce:f7:47:31:78:aa:97:52:cf:93:45:c0:74:
3d:13:2e:50:f0:42:17:2b:fd:d3:19:40:1a:49:76:22:21:6f:
4e:ce:8f:96:78:0c:32:21:ad:94:3d:55:ee:98:18:9f:56:3b:
30:7a:c0:42:0b:56:f3:72:2a:f3:7c:16:4e:e2:a5:52:fa:6d:
fe:d9:0e:f8:3f:78:49:d3:19:67:30:26:29:64:ce:81:94:1c:
17:ed:68:b8:87:32:77:82:de:99:3a:88:e6:41:fd:72:74:ed:
a6:23:dc:05:e0:f1:41:b1:39:d4:15:2f:f3:b1:cf:4d:af:97:
5a:c1:82:e5:bf:9d:cd:41:ea:9e:8a:3a:13:c8:3b:13:be:22:
8f:24:69:4e:cb:8d:39:23:ff:e5:fd:6a:91:2d:ba:a3:30:b3:
71:b8:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:40 2025 by rpki-client