Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: vR3OCBTRfZ9jLVMfJBnziWGpCOjpf+/lGN5Tc9+XHbY=
Subject key identifier: 81:FD:77:38:C3:B3:54:45:B6:29:09:72:20:15:9A:7B:E5:CD:0C:30
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 0194BC3C02327D433B7C6B75BBA54067DFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0AC2
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: QUKBnQWNf017wBAXiRmWXjygq/tkG2ze3Scu9xAWvRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:02:32:7d:43:3b:7c:6b:75:bb:a5:40:67:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=81fd7738c3b35445b629097220159a7be5cd0c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:00:ce:e1:27:83:7c:67:8e:6a:68:d1:2d:
93:09:f8:0b:44:60:d5:13:8a:73:7e:6c:3c:1b:9e:
a0:d4:23:f5:98:aa:aa:f7:03:4f:d7:32:b9:d4:98:
85:e3:ea:e1:9f:d1:c2:a4:1a:a6:9c:9b:db:4f:42:
f2:b1:73:0a:51:87:06:e7:30:79:9d:c7:b3:dc:c2:
0b:b3:92:6b:96:b3:41:e4:77:8a:9e:f8:e9:85:86:
93:9b:c4:92:26:b3:3a:1a:0c:66:5a:d5:ce:75:dc:
e0:bf:79:12:19:73:e6:23:7e:53:17:10:0d:48:65:
06:19:d3:11:81:a4:44:ab:6a:57:68:58:da:b8:19:
42:31:a2:c5:61:d2:01:8d:82:67:8c:08:eb:a5:44:
fb:62:b2:6c:66:01:37:bb:26:d7:31:80:a9:dd:4a:
30:66:a1:02:4b:89:22:52:76:6e:e0:52:fd:61:12:
70:fe:1e:e2:35:07:c7:f9:dc:2d:c2:ba:a8:6a:b9:
74:f6:7e:b9:65:32:7e:3c:dc:5e:fc:d4:d1:64:f2:
ec:6d:db:27:c8:03:e6:f1:93:54:5c:ef:1f:2a:95:
0b:2b:b6:70:65:36:b1:48:df:bd:41:12:89:8a:5c:
79:86:35:87:96:5d:6c:54:1a:15:53:32:49:64:09:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:77:38:C3:B3:54:45:B6:29:09:72:20:15:9A:7B:E5:CD:0C:30
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:32:5f:a0:7d:ac:c6:06:ce:b4:7f:02:8f:da:ab:b6:b3:1d:
36:31:a6:ec:72:02:3b:1a:fb:16:d8:ec:ae:14:13:d2:0c:0f:
49:fb:9d:63:38:04:41:1e:f7:a5:7c:6c:2a:82:d9:42:89:1f:
95:63:c8:4b:65:42:fb:47:65:e6:ad:72:b9:a3:30:2a:f9:b4:
77:48:1f:34:9e:73:1c:1f:43:62:4a:88:36:8c:e6:28:e5:e1:
af:e2:19:4b:54:f7:18:89:a5:1b:b2:cd:0b:8a:ab:99:d7:2a:
d4:a8:8e:00:bd:6e:e6:13:42:de:90:b2:13:b8:d6:a0:7a:39:
a5:4a:fc:92:0b:40:7c:1b:01:9f:6d:b1:90:7e:6f:8b:0f:3f:
f4:bc:cf:f0:79:bd:77:1a:ac:cb:80:d4:09:fd:29:58:08:8b:
f0:42:b7:cb:ff:07:8b:a5:02:4b:8d:07:c7:80:1c:fd:db:d5:
f9:a8:06:9a:17:c3:7f:66:a8:c3:cb:67:7b:7e:e2:b7:f3:de:
0f:92:7d:c0:d4:22:35:60:28:f2:11:38:2b:d4:1b:ca:d3:40:
8f:d5:53:b1:fb:27:b4:c9:72:d7:ae:c6:a6:2a:8f:42:40:bd:
38:20:66:0d:cc:19:8a:ef:07:c6:fa:20:4e:f0:db:bb:9c:1a:
63:a4:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:56 2025 by rpki-client