Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
File: BoekrKWB2OvN_iS2Xx5woS8omng.mft (raw, json)
Hash identifier: UjiBgwp/qhBsqctKA3RYE6/c0ddvOvbO5Fo32rqwMvM=
Subject key identifier: 19:C5:C0:39:EC:DD:B6:30:21:AB:66:4B:99:4C:BC:E6:27:05:3D:2B
Authority key identifier: 06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
Certificate issuer: /CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Certificate serial: 0194BD853FA296DE446F4CA008173637547E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
Manifest number: 05E4
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: BoekrKWB2OvN_iS2Xx5woS8omng.crl (hash: SnqegQFUoa6Wa4/n/gmJSgSquW6/h/9MPHFQazJzGgI=)
2: JTkFn5E31NEi0T3jHFsEReuBpS0.roa (hash: kKlmo0yCwDoRfIckDgl+hlLcGOfvby6dj08uXZBlD8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3f:a2:96:de:44:6f:4c:a0:08:17:36:37:54:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0687a4aca581d8ebcdfe24b65f1e70a12f289a78
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=19c5c039ecddb63021ab664b994cbce627053d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:8d:e9:f9:e7:89:ce:a7:57:cd:5a:b7:ef:
9b:ee:f6:27:c0:68:55:71:34:2d:46:6a:9f:c5:f5:
b9:7d:6b:29:45:fe:23:86:9d:9e:03:ad:22:08:4d:
67:24:c6:d5:03:fb:bc:c7:de:a6:35:5e:8c:a8:e8:
6a:5d:ca:e4:c9:97:8d:7c:5f:4e:88:97:54:da:25:
92:bb:ea:04:15:60:35:f7:a2:03:e6:1e:64:16:52:
1b:18:50:80:7e:7d:31:dc:1a:72:50:7a:0c:ca:73:
f4:93:24:62:99:7a:f2:7d:a1:f1:b9:1e:f1:86:77:
00:2b:11:e2:0e:36:92:15:e2:e3:7f:b4:6f:d3:52:
18:66:91:46:af:ac:4f:fc:de:cc:88:a7:4d:28:72:
a9:21:32:ff:46:2f:04:76:5e:bd:ff:72:b9:0a:60:
eb:67:06:4b:70:ed:9a:18:8b:57:89:72:e9:2b:c2:
b7:b4:6c:20:3c:1f:f5:46:22:89:d2:c5:eb:44:1c:
40:de:88:95:8f:f7:95:26:e3:85:1b:c8:08:ed:1e:
01:09:96:a1:9f:e5:cd:23:46:1a:49:3c:16:8f:6b:
d4:5b:64:9a:80:d9:42:c1:01:fc:bb:9d:70:9c:8c:
ac:04:5e:d0:68:82:5d:ed:04:ba:0d:43:0f:52:b9:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:C0:39:EC:DD:B6:30:21:AB:66:4B:99:4C:BC:E6:27:05:3D:2B
X509v3 Authority Key Identifier:
keyid:06:87:A4:AC:A5:81:D8:EB:CD:FE:24:B6:5F:1E:70:A1:2F:28:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BoekrKWB2OvN_iS2Xx5woS8omng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9df11b-0187-4a91-b5d1-2d28a19135fd/1/BoekrKWB2OvN_iS2Xx5woS8omng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:91:0c:f5:55:bf:85:4e:94:27:49:65:be:c1:0a:e6:c2:aa:
d8:47:5e:2b:78:20:4c:ed:5f:b4:73:10:61:30:b5:9c:c3:87:
c9:fa:c3:1a:a7:1f:89:75:b5:b8:c8:6c:21:54:21:bb:92:0e:
24:f4:d3:9e:e3:93:71:ba:4c:b6:46:8a:2d:65:35:99:d0:d5:
ce:f5:3c:79:1e:bb:00:8d:1f:f7:74:56:57:7b:81:3f:a1:36:
12:04:70:51:00:63:c0:92:ba:eb:47:4a:d5:e4:59:0e:98:af:
e4:c9:0a:98:7d:33:60:53:aa:f6:05:b3:10:64:5c:93:05:e6:
87:50:d8:7b:d0:a7:9a:11:f6:cb:0c:b1:95:d7:9f:d1:b9:63:
ec:71:53:9e:29:a7:a0:62:f7:94:5b:5e:21:06:04:a7:01:01:
12:bd:c9:b6:31:83:a3:84:98:e6:d9:69:24:b4:32:c4:6d:b1:
1b:18:44:8f:42:b1:fa:fc:b4:39:fb:21:55:23:fb:9c:2a:a8:
bc:75:2b:27:34:67:07:a0:f5:cc:4a:44:70:03:d4:db:ab:bd:
d8:80:df:d1:d5:da:ca:0e:ea:49:4e:b8:79:fa:63:68:10:74:
41:46:27:d3:6a:7b:fe:b4:c5:88:d1:8d:ea:31:bc:be:50:21:
b3:2f:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:10 2025 by rpki-client