Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File: BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier: irPxcKFjKfRAwpd+1dYPtxiSVxLR+aC5HQRNuDpnpUU=
Subject key identifier: 05:AA:48:DC:3D:6B:10:44:03:0A:36:45:A6:70:91:9C:BB:A8:82:12
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer: /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial: 0194BD8543B00B4A1D6DF966A56C8F27211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: wyAYjIhpIK2ohUkPiiCbETENDNN+mdyO3k1I26Rv/RU=)
2: ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa (hash: c+oT6rdCWtyUihO7r4CT9JSZ34sdZ4eqqblxSm+cQz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:b0:0b:4a:1d:6d:f9:66:a5:6c:8f:27:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=05aa48dc3d6b1044030a3645a670919cbba88212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:90:72:81:b2:35:08:29:69:8f:82:a0:14:
d3:b0:ee:e8:9b:3e:ff:24:7d:f8:9c:f7:9a:58:d0:
7f:01:fe:77:03:5d:87:72:66:19:e4:29:d0:a6:11:
82:cb:2d:11:f3:98:51:57:61:ca:d2:f5:4e:cf:8d:
d6:12:08:7c:7f:2a:a3:14:10:cf:0f:cb:7e:a5:94:
26:37:1d:b7:1e:0f:8a:eb:40:81:77:9f:07:fd:ac:
66:d9:6d:a2:0f:c3:e3:32:25:33:3d:49:dc:a6:de:
97:27:ef:32:2e:af:d0:d6:e0:08:17:37:d6:43:b9:
12:63:bc:bc:ea:e1:3f:3c:27:c5:97:a7:18:f9:57:
61:d2:d0:ab:28:cf:b9:20:1b:68:27:e6:c7:1a:35:
85:3c:fc:9a:8e:7c:f9:c1:15:29:54:91:31:5c:c4:
e0:ce:86:b7:2b:0b:61:5d:da:3a:b8:9d:61:d5:0c:
17:08:98:d2:6f:b8:f6:cb:b3:f1:10:38:ab:14:99:
aa:4f:e4:fa:21:06:73:72:6e:19:f5:de:dc:99:4d:
63:7c:58:ec:95:7b:e5:56:1b:6e:c5:bd:c9:4b:60:
3a:2a:83:e0:1e:9e:24:98:5a:bd:33:0a:7e:ae:f0:
4f:ca:85:7d:4f:56:1a:4d:06:ee:c3:f7:b0:85:56:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:48:DC:3D:6B:10:44:03:0A:36:45:A6:70:91:9C:BB:A8:82:12
X509v3 Authority Key Identifier:
keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ee:74:8a:0b:25:16:b4:d0:b7:95:16:d7:fb:ea:cb:83:5d:
63:25:58:2f:4f:c4:b5:ae:c2:0d:ce:11:49:45:6c:2e:6c:44:
e8:cf:c7:00:43:aa:ef:35:df:1a:3c:8e:19:74:5a:2e:11:37:
6d:b7:17:4c:17:86:85:7f:76:57:be:84:14:31:e4:cb:0c:54:
a5:f7:77:97:33:47:62:7c:3f:1a:cd:ed:51:51:c1:03:b4:41:
8d:b1:f1:79:2e:4a:ff:a9:c6:7d:e1:4b:fc:d6:9a:3a:d7:b1:
2e:7a:e5:c5:2f:77:a0:14:b5:ad:ae:3c:e6:89:c0:80:51:e5:
0b:e6:8c:d9:b2:1e:cf:27:a3:94:df:73:5c:bd:e3:5d:ee:b8:
d7:9c:a6:3b:d0:13:20:7b:c0:44:78:1d:0f:18:a9:8c:db:07:
8e:77:51:fa:8f:db:0a:5f:44:00:a0:d3:bb:da:b3:32:0e:36:
2c:6e:c7:91:b5:06:09:49:a8:df:56:18:be:9b:87:e5:ef:27:
9a:7a:4b:09:ae:60:7c:40:d3:ce:ed:78:5e:0f:41:84:55:c9:
0e:f7:8d:88:ec:b9:c3:39:ff:69:4d:4b:97:b9:2a:0f:49:c5:
92:5d:be:e5:b9:67:79:26:50:9e:83:ef:1d:39:05:af:2c:6d:
b6:47:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:34 2025 by rpki-client