Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier: 3jaUb2Pu/8fl1oeMS8roQAgyARU0xNXBI+gFyEv0fik=
Subject key identifier: 32:E6:E0:80:B0:4E:9D:BE:3C:FB:83:AD:2B:14:6F:89:7D:DA:E7:D0
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial: 0194BD1757D4AA34C41CACD8018D239BE5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: ZUJgy547Bwpj33t4pq3kq7ZLcUi7c1ulp7aWb1mgHkA=)
2: g7zSuu1Y2LgUEEcASbCxWIihuvc.roa (hash: DxpZr9EOZTA5swhTGy2g3jLwTeS/IoD0WJP5uBxOYhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:57:d4:aa:34:c4:1c:ac:d8:01:8d:23:9b:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=32e6e080b04e9dbe3cfb83ad2b146f897ddae7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:28:88:34:40:b1:db:02:97:8c:09:ae:15:
7f:c6:ef:ce:b7:0a:e2:10:54:a9:ac:02:5c:9c:53:
3c:d3:79:11:0d:3c:16:ba:c2:6b:41:f3:c1:b3:c3:
d7:dd:ce:51:08:83:a0:7a:57:57:27:98:79:39:66:
cd:8f:ee:03:84:57:42:58:0b:19:ec:db:55:6a:f4:
0c:13:58:82:45:e3:1e:33:14:a4:39:ba:67:84:3d:
73:c8:ab:8e:f7:a9:04:3b:03:9e:61:b1:23:74:5a:
18:78:19:f8:45:cc:f1:f0:42:fc:12:7f:dd:9e:3c:
50:59:aa:4a:e7:37:6f:71:ab:a3:bb:53:5d:aa:84:
51:10:67:1e:33:be:4d:24:ae:75:9d:8d:8a:c8:91:
be:0d:ce:a0:60:1e:b4:1a:93:88:fa:0f:27:79:88:
67:37:4a:a6:df:95:c8:cc:1d:67:85:99:49:41:67:
7b:c3:97:b2:67:2c:11:da:ec:0f:d7:17:4e:ab:9a:
9c:21:6e:dd:3e:8e:60:60:9b:68:50:df:c7:49:d9:
7d:c2:60:ec:79:60:be:a8:0c:7e:eb:9e:a3:59:b7:
b1:bf:1f:99:f9:61:d1:d3:fd:84:4f:0d:3f:65:88:
16:03:47:36:27:11:33:2c:99:04:a1:b5:71:ee:60:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E6:E0:80:B0:4E:9D:BE:3C:FB:83:AD:2B:14:6F:89:7D:DA:E7:D0
X509v3 Authority Key Identifier:
keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:62:96:5c:72:09:f4:24:8a:0c:e2:20:3f:70:72:24:09:
90:f2:97:e4:ab:69:a0:74:31:5b:db:58:69:9d:a2:b9:59:32:
a2:de:93:cb:a8:39:e6:f7:db:99:52:2e:66:77:5e:24:10:0d:
bd:5b:b6:5d:ed:65:3b:06:27:a6:62:d2:11:de:5c:b3:c6:f0:
38:96:7a:78:43:49:55:64:92:6c:6a:b8:85:1c:ca:5e:55:69:
61:55:5d:35:08:34:94:08:77:a7:4e:1c:9a:c1:3d:33:25:13:
aa:4e:56:c8:53:cc:13:42:ff:3f:b0:a9:17:d2:93:5a:2e:24:
b7:52:23:fd:29:c0:a1:a7:fd:45:b9:38:cb:91:12:d1:4d:6d:
14:1c:94:b9:b1:6e:82:f6:ab:df:e7:0e:d8:4e:05:5c:41:44:
dc:dd:25:e2:b7:a4:8b:6a:dc:fd:29:f9:b1:4c:9a:43:67:8c:
31:50:5b:c1:d5:b6:47:ff:4c:41:50:0b:6b:33:9d:c1:11:5b:
5a:30:98:ed:03:d4:80:2b:62:f0:16:cf:4c:20:c2:ac:42:80:
75:e4:cd:64:cf:10:f2:b2:3b:20:bc:82:57:24:24:8b:ff:5b:
4f:01:1b:44:ed:5b:db:0e:bd:48:06:74:60:0c:52:b5:8f:5e:
9c:2a:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:31 2025 by rpki-client