Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: lNzmuv/0i6QvH4e1sAP+hpQKRF6mDhRVXzzC9p2CU50=
Subject key identifier: 42:51:4A:E6:C8:CF:D0:43:CE:6D:EF:12:8F:AA:7A:C6:40:22:4B:3B
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 0194BC72822E01DEF50F61C84DCE66A5CAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: HoMgEifDpVQ65AHqBFCCx_7uMoE.roa (hash: MZgT/uxhPiKd1q/F+OrFW0KnU1po9n7PWWPZxZXmYvg=)
2: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: 3io7Cbf98uUx28mGTsO8PUhdGO6nilUPoD4HqYIFmVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:82:2e:01:de:f5:0f:61:c8:4d:ce:66:a5:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=42514ae6c8cfd043ce6def128faa7ac640224b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:3e:ce:b4:2e:30:8d:1c:aa:d8:2d:0e:f7:
92:d1:92:05:d9:e0:06:ed:5d:38:bc:3c:97:68:5a:
02:ef:4d:02:c3:cf:5c:0c:0d:1f:39:14:94:0e:de:
ae:59:85:d0:2e:28:04:da:71:21:69:36:2d:e6:d3:
0b:62:4a:71:b8:b8:ec:88:0b:96:e8:b1:f4:d1:5d:
7a:9e:0b:4d:bd:e6:39:29:15:a1:1a:9f:fd:bb:d7:
77:6d:a4:47:1c:32:ef:c6:fd:8f:a7:3f:d2:ea:57:
1e:2f:69:88:5f:32:fb:ae:d1:0f:0d:db:66:23:96:
43:81:f9:06:81:9d:dc:65:0d:a6:91:cc:6a:63:ef:
65:be:93:6f:76:79:d5:b7:0c:76:29:a9:a6:c0:d0:
fe:30:15:9e:6a:5d:cb:64:6f:b0:89:cc:41:11:00:
72:77:0f:21:a6:2a:ab:05:d4:f4:f8:a4:6b:4f:b2:
2a:8a:23:85:19:fc:13:47:15:b5:7b:73:c0:1f:b3:
18:cd:1d:4c:16:7f:1b:42:7d:2f:e6:db:56:75:4d:
76:b8:ed:e5:97:8b:61:60:ca:2f:2a:34:b2:18:50:
bc:06:2e:fa:47:fb:b2:a5:ff:0a:cf:83:c9:b7:8c:
36:2f:2c:34:67:83:65:7c:35:ec:91:40:cf:3b:9e:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:51:4A:E6:C8:CF:D0:43:CE:6D:EF:12:8F:AA:7A:C6:40:22:4B:3B
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:13:16:59:99:ef:15:fb:bf:17:78:68:87:fc:b3:dc:f1:c1:
63:ce:7a:4a:98:77:61:81:74:b7:de:11:08:5f:20:74:69:62:
ee:e7:56:d3:76:b6:9c:fd:41:94:6e:a4:18:f5:92:b6:5c:3d:
ea:57:87:6a:0b:f5:28:a4:b8:89:aa:41:40:73:c7:55:38:e9:
43:4f:90:d1:bd:eb:b1:dc:9c:96:aa:3e:b5:64:cd:4c:2d:85:
99:a2:89:40:f2:41:01:97:69:cd:53:a3:d5:de:2a:09:c1:0e:
9d:fe:da:7f:ce:0c:a5:6f:1b:02:b3:ce:46:d1:e9:33:66:d4:
28:e5:9b:2c:fc:ed:0e:f4:9c:1e:07:f4:e4:f3:e5:b2:e1:b7:
3a:5f:0f:14:76:9e:c7:22:60:09:f1:d6:13:8e:b4:bf:7b:ba:
13:da:af:fb:65:76:89:46:5e:4e:4a:73:2e:55:b5:fa:dd:0e:
ed:6b:ce:63:c8:18:0e:81:d0:e2:1c:73:82:ff:50:29:fe:e1:
07:88:5b:95:34:d4:f2:64:26:13:54:1f:99:46:1c:bb:88:b3:
7b:45:55:7f:61:1d:24:6c:35:78:1d:88:48:97:c8:10:c9:8c:
48:74:29:3b:ec:4d:93:9d:91:f9:c8:4f:29:69:b5:3b:ea:43:
51:22:c9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:28 2025 by rpki-client