Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier: CXkOTr2hHR/OdD/tt1zM4pUm+O4EEYCnRa6Bh3alv/c=
Subject key identifier: 04:1C:BF:9E:B8:81:FC:7F:1F:9C:9E:36:3E:7A:A1:7F:AD:A0:A9:9E
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer: /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial: 0194BC04CDF95438A41ACC37E4BB0EF5E1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number: 1105
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: 1hB6emLO1O5niNS9j05HswU34jHSoYremQ8Wg8nELfY=)
2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cd:f9:54:38:a4:1a:cc:37:e4:bb:0e:f5:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=041cbf9eb881fc7f1f9c9e363e7aa17fada0a99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:bb:91:cb:ed:5b:b8:8f:66:cf:15:e1:0d:
a4:f5:93:c4:65:ff:45:06:15:ce:a0:cb:39:53:8e:
e6:77:35:e5:8e:8f:3c:4c:34:3b:4a:89:95:3f:7d:
ae:bc:5c:ea:5c:66:80:ee:13:b3:03:bf:67:55:86:
e3:4d:87:25:11:ff:5e:54:2a:11:de:b4:02:49:83:
58:1f:06:db:00:80:0e:5f:4b:e2:63:4a:38:2f:f1:
bd:59:c1:56:b2:f0:c0:27:4b:b6:9d:51:ae:88:a8:
cd:7e:0e:a9:79:02:54:1b:42:dd:cd:d6:fc:09:1f:
bd:5b:c8:01:be:84:07:17:12:d2:4d:3e:79:77:06:
c4:37:f9:80:a2:e3:60:f4:e9:41:cb:7d:1d:f3:38:
38:f0:05:9c:b0:b6:36:bb:c6:0c:c6:38:db:3a:55:
d6:6d:4b:f2:00:d4:29:20:e6:9a:df:6e:1e:97:3d:
cd:38:48:04:15:a8:54:20:b0:53:0f:1a:3b:75:18:
a7:fe:7d:03:ee:03:f2:32:4c:68:ba:55:40:9a:f0:
ca:10:47:6b:78:38:49:be:5b:0c:f6:02:21:02:56:
8f:a9:4a:e1:b4:9c:4d:7f:90:54:b6:55:56:46:b9:
e2:38:51:ff:fd:b5:da:77:8e:39:b8:b9:5f:8c:0b:
95:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:BF:9E:B8:81:FC:7F:1F:9C:9E:36:3E:7A:A1:7F:AD:A0:A9:9E
X509v3 Authority Key Identifier:
keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:33:81:d8:2a:6a:c9:ae:8e:d4:11:dd:90:96:07:04:c5:
cf:c5:02:57:99:4f:43:15:02:12:aa:f1:6e:1c:73:b9:34:49:
51:72:97:9d:2c:f2:3a:92:ce:7e:6d:32:92:09:5e:2d:20:ac:
1f:fb:ad:43:64:85:f7:c2:88:1e:b4:48:b8:80:26:6e:5f:f9:
3c:7c:49:48:9f:ba:c8:b2:24:83:a8:39:cf:c0:09:3c:b3:38:
3c:ce:53:7d:8f:f5:04:7b:19:87:a8:13:6a:df:2e:74:d2:fe:
56:83:ea:63:f9:43:73:3d:5a:62:0f:19:3d:6f:4e:82:96:ea:
36:ce:54:78:20:2e:41:f2:67:e6:a4:62:38:ce:fb:09:e5:25:
ee:f2:cd:03:ff:4c:f0:a9:69:c9:87:38:2c:8a:86:38:11:06:
38:01:3e:18:7a:6a:72:e7:50:ad:db:ca:bc:02:f4:eb:a3:c1:
3c:fd:d2:2a:f7:04:18:64:31:0a:b0:d2:35:9b:e9:a7:bc:ca:
4e:37:13:6d:82:18:0c:57:01:8d:f6:3a:68:eb:0b:71:67:e9:
3a:13:0b:c6:f0:37:3e:06:ec:ce:43:9d:ed:19:82:0d:6c:46:
4b:23:6f:17:7c:b3:64:3e:74:5c:ff:23:7c:ff:1f:a3:69:2a:
87:a5:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:43 2025 by rpki-client