Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
File: BtCToXdsCFomSP94tM4f5BfFY10.mft (raw, json)
Hash identifier: oAHi9BkOn8ANGI5iN77RkyG5FTvLUl4XaVQL6rR0i8o=
Subject key identifier: A3:D5:FA:8B:B5:BD:BB:B5:DD:91:89:91:24:0E:92:DB:9F:61:9B:4F
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Certificate issuer: /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial: 0194BBCE01C7F8817148415A01A9DC321685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: BtCToXdsCFomSP94tM4f5BfFY10.crl (hash: DZLJ+7GxERlb/RP8HClGo4Ve3HxNGdOOneRPfIxfCrE=)
2: O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa (hash: LGWIHzKQHKwDqn81Bc/cH47w3yhqK3S50ixaYRYnDVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:c7:f8:81:71:48:41:5a:01:a9:dc:32:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=a3d5fa8bb5bdbbb5dd918991240e92db9f619b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:81:67:b2:63:2f:02:52:f2:51:34:33:47:e9:
a2:e1:5e:17:14:b4:e4:30:56:12:89:57:09:df:74:
11:1e:93:4e:be:96:63:af:2f:31:f0:bb:ef:6f:57:
57:3b:e2:38:6b:19:27:93:b2:20:1d:95:37:29:68:
d2:21:6f:45:58:fd:8c:de:5f:1f:1c:0b:57:46:e5:
8a:19:16:e0:6f:13:90:6e:5e:2f:45:bb:59:14:b7:
0a:2b:1b:43:c2:ee:a3:48:d9:69:38:21:f5:62:45:
52:bb:8f:78:7c:93:7f:e1:c1:1f:88:a4:a4:75:ba:
cf:4d:e7:8a:e7:b1:fa:0b:fe:d6:86:e0:b3:bd:40:
35:07:ad:f6:d4:ce:87:86:35:3d:95:35:db:94:96:
4e:0e:4d:d6:3a:47:34:81:1e:14:f3:c9:88:ff:b0:
69:d1:23:28:c7:0f:8a:92:c2:1f:7f:7b:0c:1f:18:
f6:3c:39:6c:ce:c3:80:5e:18:92:89:26:68:98:02:
e6:a9:c2:7e:17:6b:97:19:6d:ce:6f:73:38:00:0e:
83:10:10:48:e1:dc:ef:0d:90:cd:cc:ac:12:ba:c2:
61:83:5e:e5:93:45:13:0d:ff:3e:6c:0c:1a:c4:98:
e3:54:9e:e5:fc:35:b2:cd:59:d7:0e:09:8f:f7:cf:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:FA:8B:B5:BD:BB:B5:DD:91:89:91:24:0E:92:DB:9F:61:9B:4F
X509v3 Authority Key Identifier:
keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:b1:19:6e:b8:da:d4:73:5b:0b:1e:79:10:cd:f1:d5:7e:
bd:7d:b5:74:c8:18:89:14:ca:a2:83:bc:48:e5:d2:0f:5c:27:
c8:87:1e:b1:25:ac:f5:b0:a7:a5:d0:f2:99:ce:55:26:d2:ba:
b9:7a:0d:c4:7e:e1:53:16:0e:34:a1:63:c5:ab:e8:53:8c:23:
aa:0a:a3:d3:e8:0d:ae:00:0e:14:32:00:98:48:19:6d:95:3f:
c8:98:43:1e:ac:be:b5:a9:8c:b1:33:e7:32:53:0a:34:5c:71:
4a:23:eb:be:b6:b3:ee:2a:9d:46:e2:18:7f:58:de:19:35:2f:
49:a1:af:4c:bd:5b:3b:26:1b:b3:64:d4:a7:5d:dc:d4:87:43:
d5:da:4d:a9:01:37:77:fb:8c:6f:b6:66:05:af:fd:5f:1f:af:
5d:2f:b3:94:32:ca:7c:78:a4:66:e9:b8:19:54:c9:51:c6:f5:
c6:ca:a2:9b:38:2b:d4:0f:f7:7c:6f:75:08:c9:f4:05:2e:24:
54:d1:65:72:e2:38:c1:95:f3:83:78:3f:fd:a3:a0:ad:36:ae:
cb:d8:9d:03:d2:65:db:48:18:ea:13:ea:96:8f:9b:b5:2a:58:
a9:6b:5f:f5:bb:f3:86:f3:e5:16:0f:aa:33:24:47:24:20:ac:
81:08:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:34 2025 by rpki-client