Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: p6/x5glkukeZ3H4E7m8312S6PHzGq4PeV665uP4UVoc=
Subject key identifier: 02:55:43:39:4F:4F:48:F0:AA:C0:6B:B5:9B:D0:F4:4C:58:08:38:37
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0194BC3C8401152878AB256BC837BC47EA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 0ECD
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: KmKd0h0D2D9m3HHz48xFsdvVIu/7iIv7wLBb2PF0zko=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:01:15:28:78:ab:25:6b:c8:37:bc:47:ea:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=025543394f4f48f0aac06bb59bd0f44c58083837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:3e:e0:da:f4:ba:48:16:29:de:37:67:06:
6c:8f:d9:6d:49:1b:63:28:f2:36:85:4e:88:56:09:
31:fd:61:68:e4:cc:cd:8a:d4:33:2e:37:e2:10:55:
11:15:ce:7b:98:d8:f7:0c:28:b4:d2:62:be:31:10:
d7:c2:c8:6a:04:1d:3c:ea:dc:0f:c0:38:ad:8e:4f:
22:8c:74:bf:0d:36:ce:ec:b0:eb:5c:4a:cc:6f:6f:
40:c8:fa:41:16:05:a8:bb:e2:2e:7c:31:6c:8e:cd:
c8:d8:04:29:57:9a:47:84:25:09:12:7d:e5:1b:65:
66:a3:09:c8:c4:c3:5b:05:32:16:0f:09:26:23:a0:
0c:7c:03:85:04:ae:e6:b9:f5:ab:eb:eb:e8:97:f0:
78:ba:77:0a:77:17:30:88:c3:ec:00:11:8c:ab:b6:
f1:b7:10:8f:4b:4b:f6:d0:02:e2:a2:d0:49:6a:e1:
81:28:4f:f0:e9:36:9d:03:1d:2d:89:be:2f:68:06:
e7:ff:ac:97:49:82:93:96:53:94:07:4b:1a:8d:e7:
b8:22:4f:05:62:38:d0:87:05:87:56:85:38:64:70:
40:39:ca:93:cc:08:05:d9:1c:a4:35:62:3a:4e:63:
c7:02:37:db:42:c8:f6:ae:a0:5d:10:f7:22:f8:01:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:43:39:4F:4F:48:F0:AA:C0:6B:B5:9B:D0:F4:4C:58:08:38:37
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a5:5d:d5:e1:f6:a7:26:91:08:04:44:c4:c2:aa:28:78:99:
12:8a:43:3c:bd:65:dc:de:45:44:f9:a7:c3:16:9c:b6:5d:ee:
58:08:b4:d2:9d:bc:b7:e4:7c:37:80:c5:1a:a5:3d:5e:fa:01:
f0:8b:44:c5:09:af:91:88:a3:3c:b3:ea:3d:e6:a1:f0:25:a8:
2a:c1:0d:61:f2:5e:97:ab:43:a3:09:8b:c4:74:f5:89:3a:5a:
92:9d:0f:29:ce:b0:0a:67:66:a6:2f:42:37:1d:53:93:bd:93:
3f:1c:90:87:33:bf:b1:fe:d8:34:63:92:3f:17:51:99:d5:f8:
3f:d9:05:30:e1:a0:a7:00:43:96:87:f5:b2:be:61:c3:fb:23:
0c:72:6a:d8:3f:4a:8f:4d:9d:1e:8e:d9:ee:9a:f3:8e:bb:6d:
d5:c1:1f:07:64:52:62:65:f2:c6:d2:d7:a8:47:37:20:be:08:
8e:3e:a7:d8:ee:14:2a:22:03:03:e0:bc:9e:c3:9b:97:5f:51:
37:92:d7:a2:24:14:6b:5f:ae:16:07:a2:5d:ee:50:58:3b:93:
2b:ca:f9:d2:8f:b6:13:04:03:81:b1:9e:32:92:2e:06:77:81:
28:d6:c2:39:3f:48:3e:32:35:8c:07:90:1f:5a:1e:9d:7a:55:
c0:e1:d8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client