Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: urDfc4e/ci4qKA+ZyhCyuqg/W2gu5/l9S+t5oVpgdcg=
Subject key identifier: 28:35:A3:0C:8C:6C:FC:24:E4:AD:90:C1:B2:70:DF:A2:6F:AD:CE:6F
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0194BC727C5D60BF2F3B954DE50C021DE074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 13:00:06 +0000
Manifest this update: Fri 31 Jan 2025 13:00:06 +0000
Manifest next update: Sat 01 Feb 2025 13:00:06 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: VbyAIMUjfTNz6iYt1J7/HPAJ0i3VrmHRN7GmILDBqAI=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7c:5d:60:bf:2f:3b:95:4d:e5:0c:02:1d:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 31 13:00:06 2025 GMT
Not After : Feb 1 13:00:06 2025 GMT
Subject: CN=2835a30c8c6cfc24e4ad90c1b270dfa26fadce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:fe:12:4a:74:19:79:52:e3:42:25:40:31:
5d:dd:c8:01:78:d8:f2:19:f0:29:51:70:1f:7c:62:
ec:cf:c2:16:1c:8a:c0:3b:3c:1b:b2:05:76:de:c5:
e0:79:5d:2a:a0:0c:76:ec:8c:01:33:77:df:8d:a6:
85:2e:eb:db:fc:78:32:c5:b8:97:bf:19:a4:76:da:
f7:a8:16:fd:9a:33:15:f9:8d:2a:4f:f5:0f:63:c2:
56:62:c7:39:71:34:38:6f:6f:7c:02:c6:61:4b:42:
e5:0b:02:9e:12:79:31:c9:f5:4f:d1:bf:60:6a:41:
12:35:05:e4:fc:bb:9f:37:98:aa:49:a3:36:af:a1:
6c:1f:d2:da:3e:87:d6:76:39:fc:f8:ce:60:da:c2:
de:ab:ab:36:ae:3e:6c:86:99:00:7b:94:36:b6:08:
21:63:84:61:aa:91:38:39:a3:a0:dc:eb:bb:62:28:
8d:cd:1a:c9:9e:51:e8:9c:55:1b:1f:ef:2e:a0:60:
3f:a5:a6:e1:83:aa:69:90:63:e7:51:82:4d:c2:1a:
7d:44:60:d7:df:d2:a5:85:35:8b:96:3d:52:b3:4e:
a6:71:18:c4:54:eb:6e:05:d6:51:7b:c6:a9:c2:d6:
bb:d8:80:6f:0c:f0:55:d2:1f:ca:9a:6f:d3:15:50:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:35:A3:0C:8C:6C:FC:24:E4:AD:90:C1:B2:70:DF:A2:6F:AD:CE:6F
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:af:9f:16:25:92:bb:78:a3:2f:74:92:8d:0f:33:a1:2d:
30:38:3d:e7:c1:d9:7f:29:84:82:bf:77:0d:3d:a9:28:90:37:
83:7d:b3:b5:c7:2c:15:b4:e3:74:44:7a:83:e0:25:be:3f:2a:
ff:da:61:3b:16:28:6b:df:c4:35:8f:bc:a2:76:5b:9e:7a:b3:
84:2d:22:bf:01:d7:f1:63:e8:3d:b5:36:c4:ef:c1:4a:dd:c1:
31:c4:5f:34:4f:2b:3c:42:e2:b7:52:2d:a7:11:84:fe:6f:96:
68:d9:78:8c:a9:0f:34:0d:ac:e9:6c:5f:46:f8:4b:8d:6c:82:
b0:e0:da:fc:ce:c6:b9:e1:3d:f7:d0:6e:0d:12:41:b7:e6:a2:
5b:4c:ec:4e:2d:d8:2d:81:87:c7:91:6a:5a:c1:5d:89:34:c2:
22:97:71:95:b9:2d:bd:fd:72:83:b2:17:d7:72:d2:56:3b:0d:
02:5e:29:53:94:d9:30:a1:41:34:4b:91:42:c8:ec:05:bf:3c:
3a:a5:d4:d9:9b:c1:45:77:b4:e3:d2:1e:2a:ef:f1:ae:46:9c:
3d:86:7b:a5:05:5f:5a:0d:bd:a1:54:42:15:06:5d:b2:f3:fa:
fe:49:6d:68:30:52:e6:0c:29:db:08:c4:c2:03:1d:2a:65:ea:
d3:56:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client