Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
File: BKf5By6LMAS6CGgfse-IwD9iCog.mft (raw, json)
Hash identifier: GK+rPXy6H6iAh3GuPTku+V/twf24f6QItHVUVqEzSQw=
Subject key identifier: 1D:31:0E:9B:09:CA:D6:58:98:FC:C1:C5:A6:62:AF:F3:27:85:3B:BD
Authority key identifier: 04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
Certificate issuer: /CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Certificate serial: 0194BCAA232A84852117F7A4F1D389B8D6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: BKf5By6LMAS6CGgfse-IwD9iCog.crl (hash: G9uFCt0gyP3Sch5yzl1tu7c6C94Kt7VfGH6hUQHAkMc=)
2: wSs_FD2QVb_noY_pKeQvB5Nmc4k.roa (hash: C/YIn0+2EPkhhvHnwCdIJWUCCRmG0HGZx7WYVhFFx3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:2a:84:85:21:17:f7:a4:f1:d3:89:b8:d6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a7f9072e8b3004ba08681fb1ef88c03f620a88
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=1d310e9b09cad65898fcc1c5a662aff327853bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:51:04:7d:3b:1e:14:19:07:81:91:bb:d9:
c5:b5:c9:f6:db:2a:47:e7:cc:a7:50:b0:87:0c:80:
1e:14:33:50:24:28:10:6a:64:a3:c7:39:c9:8f:f8:
e8:5c:9f:da:c1:d4:3b:12:7e:fd:64:39:ba:5a:d3:
ac:d1:57:34:60:13:02:18:88:a2:7e:f0:45:7a:7a:
a3:b5:01:98:fa:61:49:73:8d:1b:3d:17:91:21:d6:
87:15:29:42:a5:b3:eb:4d:24:52:3e:72:21:36:ce:
ef:6b:b8:72:23:9f:70:0b:28:52:0b:20:b3:3b:af:
19:8c:21:57:a1:d6:84:ca:1f:42:b9:f5:54:be:a1:
65:91:6b:58:e0:91:2b:8e:fd:80:04:3d:79:53:21:
da:8c:18:53:e8:f6:ab:84:3f:30:65:41:bf:8d:1d:
9e:61:2b:86:2f:ac:d4:20:7c:04:a3:77:5f:8f:23:
eb:b4:4d:16:48:da:b6:31:90:a6:c5:64:db:25:f2:
7c:71:df:27:12:81:5f:64:d4:be:3e:4e:79:e8:05:
d9:2a:69:be:14:b2:86:de:dd:6f:47:e4:0d:ca:7a:
47:81:74:0b:95:d6:7a:e8:40:e0:77:01:f8:f5:98:
1e:49:ad:95:ce:da:54:64:a2:ae:1d:28:6c:c8:06:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:0E:9B:09:CA:D6:58:98:FC:C1:C5:A6:62:AF:F3:27:85:3B:BD
X509v3 Authority Key Identifier:
keyid:04:A7:F9:07:2E:8B:30:04:BA:08:68:1F:B1:EF:88:C0:3F:62:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKf5By6LMAS6CGgfse-IwD9iCog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ca8e58-8afd-493b-a916-e05aa513e5dd/1/BKf5By6LMAS6CGgfse-IwD9iCog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:50:01:96:a6:e8:5f:d1:bc:59:a7:07:00:17:6e:7e:60:0e:
58:2b:fc:89:49:d2:6b:78:d0:39:ad:df:37:50:c3:11:38:77:
34:05:3c:35:c1:16:27:c8:bd:6b:6a:43:f9:9e:1c:a1:b0:c5:
a3:06:43:81:e4:5d:19:59:1f:d1:68:d7:b9:81:fb:b8:d2:86:
56:51:0e:73:19:ba:73:5d:d2:e4:a4:5e:68:e6:d9:88:c2:0f:
c7:43:e3:f0:27:37:6d:07:58:4f:73:b3:8d:cd:f3:21:1e:1f:
91:06:a7:8a:68:4f:fb:2f:9a:6c:df:5e:ea:5d:83:8c:74:7c:
be:5a:53:e6:11:97:40:17:98:e1:47:38:60:03:2d:d8:82:9b:
91:5d:7e:9f:89:de:28:9f:f5:5b:b8:cf:92:23:46:21:9b:17:
13:e0:77:42:77:73:d2:dd:97:a6:36:11:39:a5:3a:66:bc:48:
e9:15:bb:05:eb:b7:a3:42:e9:55:50:83:d5:27:c2:d4:1c:e1:
96:76:2f:65:1b:40:a0:c4:f4:0c:92:44:4c:30:b1:a4:3c:b6:
b5:14:8d:28:79:bd:c2:52:c1:95:57:e4:92:e8:54:cc:03:54:
73:03:b5:34:8c:54:43:10:6a:50:b1:fe:2f:72:d5:84:21:bd:
cc:16:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:36 2025 by rpki-client