Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: yw/aCuO6ja85KcTgAIv++bjcVfLAMP079kRVeCw2vHk=
Subject key identifier: 14:0B:CB:1B:31:EE:AB:1D:A5:AD:A3:D3:DB:85:F2:1C:9F:E2:AB:D3
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 0194BC3C4989825952BF254C5DA6A08E6985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 03DD
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: scSaFpnVr0ytyO8SyKbSQ1a0xbqEYhldpC7npafX5Kw=)
2: RmyntG0IISqqkuRjXi2OjafHSpk.roa (hash: A3n99m0/BdNjoUWLCn9ljddIqS7nxCxnvKfqCVIhrTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:89:82:59:52:bf:25:4c:5d:a6:a0:8e:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=140bcb1b31eeab1da5ada3d3db85f21c9fe2abd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:dc:38:32:dc:fb:a2:a6:bb:c7:d3:e7:16:
cc:56:95:89:ca:4f:92:46:f3:f8:5b:1d:33:fe:03:
b8:3b:92:e1:5a:30:c8:45:d6:98:75:14:48:ba:30:
a5:9d:69:16:ac:be:a2:c2:94:24:86:20:ce:f0:5c:
02:2c:8e:e9:f7:e6:7d:1b:2c:61:e2:f6:6c:d8:c7:
93:ee:2a:1e:cb:5f:4c:02:0a:29:4f:62:1f:e6:40:
96:1e:5a:7a:53:6b:2e:85:5c:78:8c:00:ea:60:61:
ae:0b:7e:0f:ec:61:49:84:da:eb:04:13:ac:7d:c5:
42:5d:3b:d5:cc:22:ab:20:8e:c6:3b:b9:09:23:a9:
fc:df:6c:9c:02:b7:15:dc:2c:0c:ef:a5:23:61:02:
70:51:95:8b:6c:09:a1:0b:01:16:9d:0d:7d:de:e4:
85:25:4b:2e:97:74:83:6c:5a:35:ea:ec:98:7a:63:
bf:34:54:9f:f2:96:7a:5a:35:6b:27:34:89:5e:ef:
49:38:1b:4a:05:be:b2:c5:29:4a:20:d7:cc:d4:ef:
5f:d5:74:27:be:71:24:e0:95:d6:92:c1:08:52:a8:
7f:15:a4:2d:1a:8d:c2:b5:1d:8c:8e:f3:b8:b4:5a:
df:ad:91:7d:8e:81:13:1b:5f:17:e4:c5:e7:60:e7:
cb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:CB:1B:31:EE:AB:1D:A5:AD:A3:D3:DB:85:F2:1C:9F:E2:AB:D3
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9d:43:1c:a2:30:f1:dc:c6:a4:92:d2:12:ce:13:6a:37:7a:
09:bd:cc:e6:eb:b6:25:b7:42:75:db:64:61:4e:e2:92:b5:9c:
10:9f:c1:89:8e:1c:9f:c5:ad:40:6f:c1:42:23:82:7f:62:60:
e0:a5:e3:80:fc:25:8c:51:c3:6a:03:27:31:1f:e2:6d:47:32:
1e:76:24:b6:46:44:f0:e2:df:28:fe:37:1b:88:ad:78:7d:84:
a7:8e:bc:dd:a0:75:3c:95:19:a2:c3:1d:48:d5:54:90:69:59:
63:1b:ed:96:8c:01:f4:d6:f4:e0:cf:da:2c:64:3b:57:6d:6e:
50:8e:b4:3d:1f:27:e2:86:c4:e3:87:85:c4:20:20:ca:58:81:
30:4d:10:53:48:75:7a:df:ba:37:f1:41:e4:1a:a1:eb:a2:b9:
e8:9b:99:d5:aa:48:f2:05:51:14:74:13:59:48:9f:22:f6:24:
d9:cb:ff:ff:35:1c:23:51:a2:3f:c6:21:06:50:34:25:9e:f7:
c3:15:06:8a:1b:97:d5:41:d9:2b:40:e6:61:37:46:4a:03:24:
31:a5:2c:4c:a1:14:5b:68:76:93:37:7f:82:cd:c0:78:f1:73:
6e:26:29:a6:c1:b2:fe:c3:49:3b:cd:33:ba:e5:73:c8:99:07:
46:2f:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client