Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: jDJ8PW9JdITNzHsc/x7l0v7YtP6W42fqWhe/1FxFyZ4=
Subject key identifier: 55:6D:48:06:E0:28:BC:1C:6F:3A:74:6A:8C:41:50:A9:43:AF:0F:7C
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 0194BD17E93DA4B11B46FFFCBC8CED72D159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: bvAY9ozYFueZ2E1C+OCaWWsgDt4oh6km9BFVGwVwSl4=)
2: SBmVAlodI7xnOy2vKS8iSbQ2L-c.roa (hash: Qjp3sgcgeheRs3EPb5cqh07Ww165sSq1F+/13L3R5T4=)
3: g0VLR4dmZuTUcMAH8lFP9-35SEQ.roa (hash: VJzmNAtUkQtzYlHT74BgFDK6+FNteK79SAvoZ6OtMvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e9:3d:a4:b1:1b:46:ff:fc:bc:8c:ed:72:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=556d4806e028bc1c6f3a746a8c4150a943af0f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:54:9f:8c:b2:f3:46:1a:6b:e4:07:fb:e5:
19:25:22:d6:b8:b7:c1:ca:5b:24:ad:39:ae:ea:db:
3b:05:05:28:12:1e:83:64:c6:a6:5b:2c:56:17:74:
e1:8b:67:6b:68:4f:8c:08:9f:49:15:57:e9:fc:3c:
41:3e:34:dd:00:c1:d1:7f:44:fe:88:47:a5:5b:45:
5e:b4:89:60:db:2b:94:0b:6e:18:4a:e6:d6:75:5b:
cb:f0:74:3a:90:e9:60:fe:a2:49:39:7b:20:a0:4f:
b3:a3:2f:53:73:a2:ea:ab:22:8c:af:7f:80:3c:3c:
48:00:e5:f0:85:6b:c4:9c:03:f1:a8:c5:5e:53:e8:
f6:fb:32:68:14:cf:13:b0:31:1a:b9:9e:25:8e:6b:
94:5c:c8:d8:6e:54:81:34:b8:3e:96:d2:11:d8:0d:
d8:bd:a6:a0:8d:bf:3a:23:c8:3a:6e:81:28:57:9c:
c6:3d:cb:1c:ad:05:50:e6:7c:d1:d9:7b:62:2c:a4:
71:d9:8a:4e:41:50:79:96:d2:fe:16:9c:b7:f7:99:
db:dc:44:c4:38:b5:ef:f1:50:d9:d4:4c:f0:eb:1c:
3d:7e:84:3a:30:8c:fe:cb:7c:42:f2:54:4b:9c:d0:
ce:ed:b8:8f:f6:2b:e1:5c:88:c8:45:ba:ae:8c:09:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:48:06:E0:28:BC:1C:6F:3A:74:6A:8C:41:50:A9:43:AF:0F:7C
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f3:c1:ed:d8:20:b4:1d:f5:cf:61:06:cc:d4:c1:88:c1:77:
d8:06:25:1b:08:56:43:fe:a0:04:2c:91:dd:bf:2a:f9:5f:ce:
f6:be:77:c5:ed:95:91:6e:5f:75:4f:14:ae:46:7f:03:60:07:
51:27:ae:44:6c:8f:31:63:de:a5:be:a1:0e:b2:65:71:27:49:
f3:f1:de:79:13:02:4b:9c:7e:70:a7:84:0d:5d:94:6c:39:98:
88:4b:3b:ac:cc:e3:0c:40:4f:05:47:b8:bc:a5:d0:21:b2:d4:
68:39:0e:fa:20:22:d4:72:9b:92:c8:16:1b:e3:b3:d4:af:c4:
bd:af:39:1b:88:24:a8:b6:3f:df:db:93:22:c2:61:46:e4:9e:
a2:f8:aa:ca:5e:d8:93:c9:fb:8a:b5:ae:1d:06:61:a2:50:92:
6e:d7:55:32:d1:77:dc:ce:91:02:d5:72:ca:bc:5b:d5:59:b6:
dc:16:45:38:fe:2f:50:7b:cd:2c:71:22:ba:7d:7f:8b:28:f3:
55:9a:26:d9:af:9d:e1:b1:90:f3:81:0e:b0:0b:cb:15:41:58:
57:b1:8e:73:a0:3f:f2:84:e1:8c:0f:70:55:db:83:72:fe:91:
6b:33:45:56:cb:46:c5:a0:6a:d0:91:80:5c:17:17:c5:f5:8a:
f4:08:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:26 2025 by rpki-client