Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File: BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier: zc+05BvANi1++YDLlFyYrAdSnqFqQpl1HrpuwKRwW+M=
Subject key identifier: 6C:C9:15:A4:E7:EC:54:62:CA:0F:EF:44:85:5A:01:32:CB:00:E7:7F
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 0194BBCDB3E6AD3E8B8A57C825DD72AA42E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: 8RmoZhVIDBOc9kyat7x4uLxwBPGFxYkYfuFKmu9xxjI=)
2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:e6:ad:3e:8b:8a:57:c8:25:dd:72:aa:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=6cc915a4e7ec5462ca0fef44855a0132cb00e77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:a7:94:8e:f3:d0:13:72:a3:e7:97:c2:6a:
5a:06:56:bc:22:3b:f4:f3:ac:f0:d7:e2:cd:8b:03:
46:53:15:2e:c7:fe:65:f1:3b:7a:10:d1:02:3e:c1:
79:b4:58:9d:c4:15:5e:3c:ee:ad:21:af:92:4d:cf:
77:8e:8d:cf:81:7c:25:69:1a:c5:e1:fd:86:6a:85:
ec:02:b3:1c:49:f2:fc:04:cf:ce:75:28:c5:51:d4:
c4:4b:a1:a5:bb:94:b3:34:2f:75:83:30:45:76:fc:
93:2c:5c:c7:1c:37:62:e6:f2:47:4a:ac:39:62:ba:
95:b6:61:1a:fa:04:ab:48:02:19:f4:7a:0b:11:9a:
51:2d:a9:fc:24:72:ae:00:5a:11:fb:db:25:a6:b6:
55:f4:7d:c0:60:32:80:86:47:92:bb:b0:65:3c:69:
bd:1b:c9:2f:d7:48:80:76:68:92:c3:5b:90:9d:a2:
b3:02:79:cd:ac:96:2f:2f:f4:14:af:cd:5d:d2:e7:
84:ef:56:25:95:18:6a:3a:be:3e:80:9c:f9:5d:82:
4d:54:11:a9:00:21:91:87:17:8e:ff:7c:cf:6b:1f:
4a:2c:8f:6c:34:49:0d:97:ca:63:35:4c:0e:87:5d:
79:8b:0c:1c:79:c3:71:88:dc:98:38:55:95:67:68:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:15:A4:E7:EC:54:62:CA:0F:EF:44:85:5A:01:32:CB:00:E7:7F
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:53:ef:7d:41:66:5e:4b:7a:56:22:d2:a3:eb:23:bd:89:
d7:0c:c9:44:c1:25:17:e1:d4:6b:ef:73:1e:09:79:58:1f:bc:
cd:d4:db:0c:1a:22:9a:1d:67:db:8b:5d:11:23:15:f1:99:1c:
ea:78:2f:e5:28:80:10:42:9b:4a:44:9a:c4:b3:71:1c:29:cd:
ec:09:44:5f:a2:db:1c:50:18:1d:a0:18:55:4a:2f:e1:90:93:
61:a9:98:e9:38:c1:4d:88:61:f2:3a:cb:d8:83:17:20:00:d4:
e1:9b:b9:9f:b2:83:b5:b0:54:74:1e:3d:3e:bf:7f:a0:e4:97:
fd:75:75:75:7f:89:9f:8d:be:c1:0d:3a:e8:d2:70:32:c2:96:
ee:90:46:3e:6d:57:99:75:f5:49:89:b0:1f:03:92:55:8c:54:
9d:c5:54:1e:ca:8f:8c:9f:6e:13:f1:36:ff:98:f1:b1:71:40:
d9:63:8f:66:53:3e:ce:1e:fb:dc:68:12:cf:53:1d:68:e8:1f:
c9:66:f7:be:f6:86:82:21:57:c1:e0:cb:50:76:b1:ce:c6:1e:
d7:7a:75:fe:ac:08:60:c8:9a:78:55:1f:b1:16:6b:67:c0:88:
e6:4a:5c:09:5b:10:b7:79:9b:72:d6:54:79:b1:23:0a:0c:49:
fd:23:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:12 2025 by rpki-client