Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
File: BgOecctxUgSoPMJTgi3CmmLHmeY.mft (raw, json)
Hash identifier: sU9fdnmx9Xzxux6RSMvTyRMU/znDmXHsYqUL4MyjeBE=
Subject key identifier: 38:49:48:54:80:46:EF:D0:68:4B:14:09:24:88:DF:A4:92:4A:97:B4
Authority key identifier: 06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
Certificate issuer: /CN=06039e71cb715204a83cc253822dc29a62c799e6
Certificate serial: 0194BD856FE93957D5D9A4DEC7AB327095F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
Manifest number: 053C
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: AzSimOOUCBaH0nGWbesdL3p-c-Y.roa (hash: tmnAHG5c86gcxksbrSaGyYNVU434mmJFa3fZgdZ+AZw=)
2: BgOecctxUgSoPMJTgi3CmmLHmeY.crl (hash: Vs82XDdsZKFIs+i66eLZZuPmRtWuc1tUIIqYdzMiyAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:e9:39:57:d5:d9:a4:de:c7:ab:32:70:95:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06039e71cb715204a83cc253822dc29a62c799e6
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=384948548046efd0684b14092488dfa4924a97b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:27:d5:d8:d1:b6:1a:24:fc:71:eb:04:80:
aa:76:fa:67:fd:01:e5:ab:57:35:36:18:57:32:a5:
21:33:18:4b:ea:da:b5:7e:59:92:3c:83:c4:70:9d:
d5:39:cb:87:3e:0e:9d:5e:fe:8d:4e:9a:05:28:9c:
e5:8a:1d:35:bc:31:60:29:74:90:4f:61:5c:a7:76:
ca:8e:ee:12:3f:0b:c5:49:e3:bb:79:e2:51:08:fa:
1c:c7:bd:94:58:6a:28:d0:42:a4:85:a6:ec:69:c8:
54:60:fc:9f:eb:45:6e:b0:20:74:0c:75:88:50:2f:
67:a3:08:9e:87:77:cd:e0:2a:bc:8e:06:2a:31:94:
fc:c2:a8:68:0a:3b:fd:e3:cf:9c:68:41:52:62:ff:
32:95:38:a7:05:a8:6f:d8:05:46:81:ed:84:b4:46:
db:57:3c:96:ca:23:7f:9a:ac:ec:80:c1:6b:6b:5d:
6c:73:fa:dd:4c:2f:92:e9:44:9b:e5:26:71:a1:1b:
98:0c:79:17:fc:9c:59:d8:f9:40:d7:40:1d:03:0c:
2f:03:56:42:9e:f7:18:5d:79:4f:76:fc:6f:cd:69:
f6:a0:6e:8a:3c:8a:60:cb:81:81:5c:01:03:b0:0c:
ba:69:10:27:e1:d6:54:b0:29:fa:96:d5:7a:53:00:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:48:54:80:46:EF:D0:68:4B:14:09:24:88:DF:A4:92:4A:97:B4
X509v3 Authority Key Identifier:
keyid:06:03:9E:71:CB:71:52:04:A8:3C:C2:53:82:2D:C2:9A:62:C7:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgOecctxUgSoPMJTgi3CmmLHmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62879-2c69-40c3-b116-0e46875d45fd/1/BgOecctxUgSoPMJTgi3CmmLHmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:1e:44:43:6e:aa:05:b7:bd:d2:01:8a:8c:c6:47:7d:ce:
45:90:50:a2:85:77:d5:4c:2a:c8:92:53:a3:bb:fa:79:df:45:
60:2b:66:a0:e6:d9:5e:31:a3:94:6d:fe:a1:12:73:dd:08:76:
ef:8e:73:83:64:da:c6:01:2f:75:9a:a1:5f:7d:3a:9f:e8:12:
a9:62:6d:19:05:f3:a9:45:b9:bb:2e:24:3e:f5:32:f3:7e:ec:
9f:e7:25:3e:45:34:56:fa:ea:ee:d5:9e:5e:ea:c1:54:ed:12:
0a:8c:7b:5f:34:a2:2d:27:12:e9:44:da:e2:58:ea:e5:42:69:
3c:16:ca:74:e7:5f:e8:a4:e5:bf:4a:88:71:97:95:70:7d:c2:
ac:ac:77:fe:09:56:02:05:bf:cc:1f:50:91:6b:68:31:ae:5f:
10:f9:fa:2a:9f:71:56:4a:08:6e:98:5d:49:ee:73:8f:18:fc:
bb:ac:6a:6b:97:2d:fb:ce:d8:c9:40:40:db:b0:03:64:7a:6a:
c6:8b:30:e3:a0:46:9b:90:6c:b5:40:35:14:2d:9c:76:f5:a1:
26:fd:f4:0d:27:63:92:56:f8:a3:7c:bc:7a:10:54:f7:d2:16:
bb:7f:7c:78:62:5a:90:02:65:77:63:99:01:ca:07:f4:03:a9:
eb:11:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:51 2025 by rpki-client