Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: 7zyH5bZ30xTvya6uY9ArY4I1nZoW4LDUcMwv4HgK1K8=
Subject key identifier: 66:0F:4A:4F:13:32:A6:F8:D8:8D:9E:92:3F:B1:28:CD:1D:34:49:E6
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 0194BCE0DF04FFBE8DA8C06B9D4805A16C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: /uw+GA2lRmAx4rUD3hDKVj+uKy8qAeMS5e7yOzfrgeg=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:df:04:ff:be:8d:a8:c0:6b:9d:48:05:a1:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=660f4a4f1332a6f8d88d9e923fb128cd1d3449e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:be:63:a8:aa:d0:44:65:32:70:76:73:40:
69:f9:8e:08:3f:75:d8:d3:e5:e1:25:3e:dc:0b:a1:
ed:4d:32:dc:78:2d:9c:88:a9:7e:cb:1d:d4:99:5b:
43:14:99:c4:56:5e:89:ce:ae:1d:97:4b:76:b6:2a:
be:4e:aa:b0:6f:ca:ff:79:17:c6:56:65:46:69:a7:
67:62:92:fa:73:49:0b:83:5d:3c:e3:37:7d:3d:8b:
8c:d6:2f:ec:7d:f3:15:ea:bf:08:62:28:0d:e8:2e:
80:8a:bf:7a:bb:b6:aa:bd:8e:bd:3d:20:6e:53:d8:
4e:85:aa:ca:96:1d:6b:40:64:60:52:82:e3:d2:14:
11:4d:27:c0:07:50:f5:3b:0e:26:5a:b8:6e:cc:c0:
b7:0f:d4:94:f8:7d:64:1c:65:f1:75:e2:06:5c:b4:
fc:96:ba:86:bd:e4:73:5c:45:98:05:1a:13:26:bf:
d5:5c:27:0d:5e:49:2a:d5:fb:a1:2a:54:a6:8f:53:
ec:80:ee:7b:7d:3e:80:1b:05:ae:be:be:d3:95:8b:
65:08:98:b8:08:88:b8:1c:a5:89:cd:42:fd:21:20:
0e:c2:a7:5b:dc:c4:64:43:e6:01:da:0d:44:c7:14:
27:3e:54:a7:eb:02:c3:a3:16:39:d7:c3:01:1b:87:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:4A:4F:13:32:A6:F8:D8:8D:9E:92:3F:B1:28:CD:1D:34:49:E6
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a6:e3:3d:86:af:ef:48:5a:47:74:64:a3:0e:4b:a8:52:0e:
7b:25:f3:34:0a:16:52:0c:63:75:da:28:54:7b:25:f2:70:f6:
dd:90:7b:c3:ba:aa:e6:57:fe:92:42:86:d0:1c:08:fa:09:5c:
36:d4:e1:42:49:03:4d:8f:c8:de:d9:99:31:b9:87:65:30:e2:
11:22:32:7f:3a:11:2f:46:40:da:6c:fa:1d:20:5f:55:d2:da:
80:65:39:b0:e9:e0:31:c0:49:75:65:da:e5:9a:e8:0d:41:1f:
64:bd:17:6a:4d:ae:7d:e4:bd:0e:d7:c2:38:33:3e:03:3c:b7:
18:6c:5d:c8:46:7e:ca:d5:19:4a:f4:46:3a:3a:1e:bf:f8:30:
e6:5b:82:8c:f4:c6:9c:44:74:dd:80:44:03:3f:29:4a:b3:5d:
62:1f:02:a3:cc:2d:51:d4:1b:0d:68:76:e6:ce:81:4f:50:b2:
fe:59:24:cb:91:b4:f9:60:2d:82:09:12:57:8e:3e:2d:79:3e:
92:74:64:4a:dc:3b:44:73:e1:3e:51:2a:96:2e:e2:36:ca:17:
38:72:3f:64:7a:0a:34:cc:4f:55:71:81:6f:ed:04:2c:aa:21:
3b:50:94:81:4b:5b:75:57:32:dd:1d:7e:61:17:fe:ad:c0:eb:
0e:f3:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:06 2025 by rpki-client