Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: z3PG4KnfhrqHRKBS5b1K7DxJ7ntWoshTf633vki1/eM=
Subject key identifier: AE:E0:8B:72:D7:F3:08:73:7A:0B:CD:D1:09:6B:9B:B5:13:4F:40:B4
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 0194BD17F95AA07EFDFC7123DA8C47900D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: /baOCpAiTqGIbt1V87Djj+T9nmkZYTMi3Leeretprxc=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:5a:a0:7e:fd:fc:71:23:da:8c:47:90:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=aee08b72d7f308737a0bcdd1096b9bb5134f40b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:9d:88:98:be:ef:28:30:92:f5:ee:bf:86:
d7:65:d7:a4:29:ce:f1:1d:18:b3:c8:74:e1:01:35:
7a:7a:b1:2f:bd:32:3d:4d:03:6e:69:db:6d:16:19:
34:89:36:f6:56:b0:c0:9b:81:b8:98:f8:36:84:40:
64:dc:c2:09:37:85:44:5f:7b:13:40:f2:e3:4f:82:
ec:17:91:0d:87:b2:84:02:07:fa:ee:ec:6a:98:c5:
cc:81:1d:33:ea:df:d3:6f:d2:ca:b3:a6:e2:2e:c9:
de:ab:f1:8b:34:c9:9f:11:44:af:a0:ab:77:28:f7:
a2:0a:4d:58:9f:8d:82:d0:c8:58:9a:2f:77:20:b4:
36:b4:e8:5f:a9:a1:b6:7f:ff:f5:de:a1:c2:5b:0a:
7f:7a:99:d1:f9:5a:34:4e:b5:61:cd:7a:41:77:62:
54:80:24:39:44:34:63:eb:bd:52:94:1e:93:97:83:
7e:0f:23:1b:67:2b:f5:59:02:9b:13:63:16:15:df:
2c:69:7a:c9:e7:5b:cf:2f:b9:78:e2:e9:ba:5f:7e:
f1:6c:c8:29:d6:95:86:fe:7c:92:8a:62:41:f0:bb:
0f:fd:5a:81:35:ec:4c:c5:c8:70:90:85:a1:23:34:
5b:a1:6b:c6:f7:6e:9a:d5:26:71:a0:e8:d1:23:2f:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E0:8B:72:D7:F3:08:73:7A:0B:CD:D1:09:6B:9B:B5:13:4F:40:B4
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:fa:20:56:c1:7d:3c:90:36:be:07:e8:af:37:74:b8:b3:
3e:60:70:79:0c:a5:82:03:26:65:91:2c:f1:ed:34:a7:3e:a0:
5c:22:2e:d9:8a:20:be:c7:2b:8b:42:9f:d5:29:5c:e4:2e:41:
a1:3f:f7:53:05:3f:b4:5b:80:56:94:da:a7:e0:27:b9:c7:77:
b0:68:64:5e:f4:b4:fc:90:0e:e3:4d:18:59:b1:1f:6f:98:88:
4e:c9:3b:b3:68:a8:e6:d3:de:08:f2:6a:46:2e:bd:84:3d:a2:
12:6d:4d:94:09:26:cf:43:5f:df:47:28:23:ae:f0:03:ec:85:
6c:5f:38:58:46:46:33:90:90:8e:72:16:0e:41:1a:86:f2:07:
a4:b4:cb:76:69:26:b6:bb:a4:df:9d:2c:ac:c2:1b:dc:76:f1:
12:fc:a3:4b:c8:f0:1b:bd:e8:f4:59:57:9c:e5:57:d2:85:ab:
b3:86:ba:bf:4b:18:93:ed:b5:2d:4f:6f:6f:fa:65:cf:83:3d:
14:4d:79:e9:78:41:18:25:4a:f5:56:4e:0a:d8:6d:24:39:cc:
91:a0:68:dc:78:c9:fb:43:5e:25:1f:16:f2:5d:4d:2b:38:03:
8d:91:a3:ce:38:07:3d:e3:b5:7f:fa:3d:3d:89:c4:3c:e0:2a:
4e:ef:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client