Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: 7/nkeKtcA+iCJO6pqn5ib0qS33LI/ChsXX5iCJWW+h0=
Subject key identifier: E5:16:A1:1A:9E:93:12:F2:09:F3:3B:26:3E:25:7D:97:04:5C:D9:AC
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 0194BCE07D64C6AE80D619A1575FF6B41B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: H99sCUHfqfOjHNwQCdLVaR0/tuKFFZEUQ6a4SI4p2as=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7d:64:c6:ae:80:d6:19:a1:57:5f:f6:b4:1b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=e516a11a9e9312f209f33b263e257d97045cd9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:65:ee:ea:d1:e5:e9:37:2d:7a:d9:18:19:
92:3f:1f:4b:e7:f3:43:e3:12:8f:c1:15:aa:8e:1b:
2b:fe:1a:73:41:06:c1:1a:00:c7:b1:a9:40:3c:a9:
7b:05:6b:14:0a:e9:fe:fe:d3:1e:04:09:1c:a2:dd:
3a:74:f7:c5:3d:e2:a0:94:1d:fd:46:d3:96:7a:ed:
92:c8:2e:07:b0:44:96:ed:0d:4d:20:22:4f:19:c5:
05:2a:e5:9d:4f:2f:91:1a:fd:63:7e:b9:bf:e6:b5:
63:17:b7:0b:47:1b:4d:b0:67:eb:be:6c:d8:e3:a5:
c5:7a:43:91:c7:a9:3d:10:cb:ae:fc:43:2e:a4:de:
36:e4:5f:91:c8:b6:69:c5:da:32:ed:40:1a:09:6c:
16:07:e5:c1:33:c3:6e:2a:ec:15:85:8d:1e:89:60:
ae:81:35:69:54:09:b3:28:8c:13:7b:fe:b7:cc:4f:
d7:8e:36:85:c5:bb:ed:6d:ab:23:dc:37:c3:41:c0:
55:e1:3e:d9:7a:c0:f5:0a:6a:7f:37:f9:78:33:b8:
2d:57:d3:45:90:a8:5b:b4:40:27:7b:14:63:0e:21:
a7:51:74:03:eb:6a:1a:c3:7b:95:22:c1:0b:59:60:
48:65:69:e5:66:75:5e:4f:4e:69:74:a3:c2:29:66:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:16:A1:1A:9E:93:12:F2:09:F3:3B:26:3E:25:7D:97:04:5C:D9:AC
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:93:1b:5c:ea:0d:cc:60:4e:9b:bf:8d:7f:5e:8b:3d:6d:53:
90:ad:d7:01:89:bc:dd:14:d9:c2:81:76:3a:65:c2:74:2d:8d:
8f:c8:1a:c1:fa:14:d2:a8:9a:87:4c:43:d7:d5:a3:6b:a1:c0:
c4:fe:4a:14:b9:8b:61:43:25:cb:ea:8c:f6:b7:09:db:78:bf:
31:96:4b:26:f7:6d:80:26:4d:a9:f4:c5:58:20:86:4d:fd:14:
6f:ae:5d:26:e5:51:4f:f1:8d:2e:9d:5f:b3:e5:a7:3e:4c:34:
fc:d2:91:aa:8c:d3:e3:2d:2f:77:14:a3:86:1a:50:f4:c8:b4:
96:a9:7c:34:b8:fe:5f:ef:d3:f5:23:8f:57:44:c2:b7:76:16:
ac:c3:ad:bf:03:b8:dc:c4:7a:f1:11:ac:90:b1:51:f1:7e:ce:
6e:de:6b:81:a1:0e:2a:03:32:7c:06:44:ac:e9:96:b1:6d:aa:
80:c6:f7:2a:f0:bb:80:30:23:2e:52:f7:de:d3:c4:99:75:b5:
6a:02:d7:7a:f2:79:e9:82:04:19:a0:70:e0:60:d7:76:2d:36:
96:bb:40:b9:e1:dc:60:50:74:1a:aa:f1:74:c1:71:8f:17:57:
bc:25:f2:f8:9d:15:82:83:3d:21:30:0a:38:ea:13:73:2c:0c:
75:af:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:57 2025 by rpki-client