Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: RZDCULShurpMhmKxZ6fQMyp8iHmJYASW4cAqa+S7IAw=
Subject key identifier: C7:23:3C:E1:E2:12:24:9F:33:CF:64:56:B6:3C:31:21:4B:E9:B3:1F
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 0194BD4EB668CE4ECAF27AC449AB8044C6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 098D
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: Tuh2auDVtTagJa2Enk/h2aPuR1RiJgn2ysJPBgMtiUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:68:ce:4e:ca:f2:7a:c4:49:ab:80:44:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=c7233ce1e212249f33cf6456b63c31214be9b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:f2:d6:5f:ac:54:bc:81:79:95:83:e3:16:
e6:96:93:70:56:3a:3f:d6:7f:ca:39:25:c2:e8:82:
01:45:f5:39:8c:c6:a1:91:11:a6:82:cd:ce:63:25:
2a:0f:d4:8e:46:00:37:69:41:b7:b5:7f:9c:b0:bd:
f2:24:37:91:82:56:e8:ba:d1:c3:7e:e1:8d:e7:f5:
e2:37:57:72:84:19:40:41:30:ed:b1:67:61:c5:b3:
fd:a7:c9:bd:4e:78:c3:0b:34:e2:ee:ba:cd:88:06:
c1:59:b9:42:03:4d:f1:10:ae:d5:ce:5d:46:f9:50:
71:46:2f:c0:85:29:1b:96:76:6c:28:fe:e7:42:65:
9f:f6:e7:88:26:60:a9:25:a9:b4:20:a3:67:26:38:
85:e3:4e:e2:de:93:48:00:c0:58:be:43:99:b2:b6:
73:73:01:12:2a:10:d1:da:9b:d9:d1:b8:e8:64:c3:
82:22:7e:3e:37:ce:43:7e:3e:db:cc:30:04:8b:9c:
a6:26:3c:f2:38:f1:75:57:ba:74:be:59:3b:22:11:
a3:fa:3e:d3:b8:06:b5:f6:9e:7d:6c:1d:1a:e1:05:
34:a0:59:27:b5:44:e7:10:7c:d9:a8:11:26:ce:f0:
47:bf:24:a2:ed:62:b5:8c:45:1c:2d:81:7b:22:04:
1b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:3C:E1:E2:12:24:9F:33:CF:64:56:B6:3C:31:21:4B:E9:B3:1F
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:fd:c5:22:01:a5:31:cb:e5:c2:bb:59:2e:6e:28:6d:75:
06:d9:1b:3a:03:d3:d5:e8:a4:d9:e6:37:09:55:51:7a:6c:56:
c0:31:99:31:16:24:3b:d6:9f:f1:47:b5:dd:20:e4:8f:6b:c6:
65:c5:8c:b2:ad:d3:42:6a:39:68:b0:f0:c4:28:d1:64:fc:17:
a2:01:51:2e:c5:46:20:f6:02:76:85:de:7d:51:ea:76:3b:5c:
b4:97:60:b9:9c:6c:29:4a:4f:fb:56:cb:ca:3d:9b:78:d7:2c:
e9:da:1a:cf:10:85:d9:d0:f7:bc:f4:f5:db:14:da:52:bf:97:
52:75:41:7a:02:05:25:10:51:da:d3:1b:68:1e:55:14:51:2d:
31:bc:1b:a5:a0:c9:7b:47:96:7d:db:cd:d3:22:1e:89:5e:cc:
71:b2:8f:87:21:f7:bb:9d:17:c2:31:f5:17:4d:75:48:9d:be:
e7:9f:12:30:d7:d4:0c:69:01:ae:18:37:45:5d:01:e7:4f:45:
ed:94:64:dd:b1:28:1a:34:b7:2c:d2:a1:54:c2:9f:ad:d1:e4:
a5:fc:7a:15:25:13:6c:9e:ac:de:6b:9d:88:de:42:71:4e:51:
85:29:a9:75:fc:f6:65:6e:0b:5b:8c:aa:b5:3b:59:cd:b8:c0:
70:24:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:12 2025 by rpki-client