Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
File: BT0E5yuySceesRaM8dQ6PKVIwgY.mft (raw, json)
Hash identifier: KP7JOxIJhvdkQo52qKqDmsFSnuWaOl7PvBRHUONGE5w=
Subject key identifier: 42:16:92:FA:9C:04:E7:67:C3:CE:1F:2F:29:08:53:FD:BE:B5:E3:EC
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 0194BCA9F5F53EFE0413C537B86D37F9E239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: BT0E5yuySceesRaM8dQ6PKVIwgY.crl (hash: 8VEojMsj62KKsD80Qy9q0ssz5CkL9AL/2TiGaMvWxao=)
2: G_k9NL-0qSjxQ-N8gyE0UgbOo9M.roa (hash: sfKsed8cbHTfZnhsfNvOSJ3wM7bTV9Orf16wnTecseo=)
3: Rjlay2bsLeiLaIl-NsumYdJm6Mk.roa (hash: Nxxu/I2qHn6XTGTRcNBX012HcDX5qyNV7NJNim7iGOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:f5:3e:fe:04:13:c5:37:b8:6d:37:f9:e2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=421692fa9c04e767c3ce1f2f290853fdbeb5e3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5e:8d:62:2a:04:3c:b1:79:74:56:6d:cf:b3:
4a:ed:93:cb:e1:34:f6:9d:76:91:c5:af:b4:81:81:
ec:53:10:a6:f2:d1:21:ed:2c:46:e3:48:94:ad:9f:
d6:d1:36:2a:d4:b3:1b:21:cb:01:ae:af:b6:a6:2d:
62:ee:50:de:79:d1:b8:1f:f5:30:0a:27:8d:95:f8:
c3:87:a0:ce:c8:05:91:53:64:f7:18:a4:3b:ee:8f:
f7:75:1d:0e:7d:26:f8:e6:e4:d5:05:c5:22:37:45:
6b:35:f7:ed:78:29:35:cc:7d:cc:cb:47:9c:1c:88:
26:d5:2d:92:df:56:73:4a:3d:0b:61:3d:2c:7c:eb:
8f:cc:77:f0:3c:6a:23:12:92:77:20:d5:40:59:fd:
f3:8a:72:42:cd:95:7e:86:01:c6:07:d0:fc:7b:8d:
8a:e6:ca:f6:da:de:c4:15:de:e7:e3:94:21:50:2b:
b8:b3:78:27:40:05:4d:e6:fd:f4:13:7c:5e:d9:68:
47:ce:02:5e:9c:20:4e:29:c4:3e:b2:f2:e3:7c:86:
35:31:a8:5f:d7:95:cf:b8:d2:ee:05:df:a7:18:cf:
be:3b:fa:02:c1:b3:03:00:07:5f:ea:54:8c:7f:82:
8a:6e:7a:d0:c1:9a:c8:62:18:d5:9e:4a:a3:b1:9b:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:16:92:FA:9C:04:E7:67:C3:CE:1F:2F:29:08:53:FD:BE:B5:E3:EC
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:55:4f:55:bd:95:02:b3:4c:d5:61:9a:2f:42:6f:d0:e6:
34:56:09:66:38:f8:56:a0:7c:6b:da:5f:62:5d:8d:0a:6e:1a:
96:7b:d6:be:eb:06:40:ea:50:58:97:df:4c:0a:71:0d:81:b0:
38:e8:15:3a:d8:94:eb:12:d0:e1:82:c7:14:b5:17:54:03:2f:
82:7b:02:97:56:da:21:6e:55:bc:dd:c1:32:98:b5:6f:57:b2:
ad:f0:00:85:1a:42:1f:1e:59:86:ec:a5:fb:56:d1:93:26:73:
55:00:20:72:16:04:44:ed:81:8d:cc:e5:fd:65:17:e4:e5:c6:
fa:25:36:02:54:b5:ac:91:f1:93:8f:b9:ca:95:31:b5:14:c4:
6b:93:99:c2:76:35:52:72:6e:b1:11:8e:87:c0:a6:7f:12:14:
77:bd:d5:55:42:d3:ed:6a:45:b0:2b:0c:93:ec:9e:40:29:21:
89:dc:e6:be:85:fa:14:39:fc:62:14:2d:3a:f7:51:ee:c7:17:
51:78:b2:04:75:de:49:b1:29:d6:0a:91:f8:3f:ee:8f:50:ba:
1b:3b:0a:a5:e2:7c:8a:41:de:20:f1:b1:4e:da:d8:57:d1:f1:
aa:fb:b5:6a:0d:a1:a7:ca:27:f1:c6:52:42:9e:77:08:ff:c3:
98:3a:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:30 2025 by rpki-client