Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: w75PtEzDPbpJkF3N9fkX/tpohr0bF9bCQT78opbfXME=
Subject key identifier: C1:19:BE:6F:34:8B:A3:90:99:40:70:56:28:3E:57:9C:B3:29:8E:4C
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 0194BD178B927D6B54CADE0F581FFC0FEF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0E61
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: F8Akickkcu+zv/PjzLVunEHMFAhrd2SUyv+H52tgGgs=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:92:7d:6b:54:ca:de:0f:58:1f:fc:0f:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=c119be6f348ba39099407056283e579cb3298e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:86:29:27:28:ed:c1:d6:7c:c2:40:00:56:
64:ea:26:78:04:6b:2b:26:ab:06:b6:88:eb:8a:51:
ef:d3:61:ed:f2:a1:2a:41:29:36:82:1b:b4:f8:e8:
63:ab:7b:d3:24:41:9c:61:70:0b:fb:8b:a9:8a:91:
74:58:b8:64:d2:6d:75:b3:ac:6c:f3:ad:8d:b4:d6:
57:14:b5:a0:60:df:a7:28:c3:4b:6a:13:2c:27:30:
48:b3:8d:fe:b1:ba:b6:97:ac:2d:87:72:33:38:2e:
f3:c4:28:33:64:7f:78:fd:9a:63:1e:f7:fa:94:e1:
3b:e2:1a:ce:c2:5d:48:1c:e3:3e:15:fd:bb:a2:90:
00:df:c0:e7:de:9a:a3:64:d1:87:74:0a:ee:ec:a8:
ff:c0:53:55:28:b1:5d:b3:b5:a4:5e:6e:43:65:29:
c4:85:16:29:34:ef:95:dc:1b:43:dc:18:7c:1e:c9:
4f:c1:62:69:8d:41:68:43:e9:bd:fb:0e:28:a8:36:
cb:a8:4d:4a:68:fb:cd:74:08:f4:66:78:1a:3c:79:
77:b4:69:a0:15:4b:16:44:8c:7e:d8:f9:c1:04:28:
63:96:b8:90:1c:2a:2e:18:50:a7:e2:b9:76:cf:eb:
21:c8:b4:d6:2f:c3:04:70:57:2a:ed:c2:29:b1:19:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:BE:6F:34:8B:A3:90:99:40:70:56:28:3E:57:9C:B3:29:8E:4C
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:37:d1:49:68:ef:1d:15:69:70:eb:7f:31:f1:95:32:a1:
5e:ce:c8:ad:d1:e0:37:d8:cc:70:f9:84:28:d9:a6:70:f1:b4:
34:3d:36:2c:ab:c5:c3:18:b8:e0:c9:1c:2c:fa:16:8e:19:6e:
30:18:4c:96:62:11:4e:b8:ec:52:58:29:50:7e:9f:8c:20:af:
30:89:ba:b1:34:c9:94:55:9a:3b:9e:c3:2c:8a:3e:8b:c3:89:
c6:af:55:54:8d:16:50:52:28:9f:c0:f6:7b:d6:c6:12:45:9e:
88:ba:20:91:4f:8c:29:ad:cb:df:9f:2b:fc:87:01:55:9b:f0:
cf:5b:e7:cb:56:9b:1c:83:cd:8f:a4:d3:3e:c8:74:c9:3a:8b:
44:07:0c:f9:f9:84:92:9c:b4:e2:bd:18:da:f7:7e:63:1a:31:
9b:72:57:54:bc:2b:ca:49:07:f0:61:95:db:2f:b3:78:9b:ea:
5a:dc:47:11:19:b0:6a:cf:ec:c8:b1:e4:58:f1:b5:85:b6:41:
2e:5a:6e:6c:5c:d0:9f:bd:e9:64:6a:d2:b5:aa:0d:72:a3:7e:
77:78:4a:b6:f7:ca:80:71:87:e0:e7:9f:bc:86:db:99:ec:87:
76:02:a9:48:68:82:92:31:c7:d5:fe:11:ee:97:3c:0e:fe:94:
4c:61:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:45 2025 by rpki-client