Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File: BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier: j4/v/L5Y/BcSwFH5Rf613d40v9vQII6hKB7+CgWCL6U=
Subject key identifier: 7C:B3:E3:EF:EE:65:B0:53:12:0A:62:68:A4:AA:2C:0C:A0:99:F7:BC
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial: 0194BC729BFE0EE3B50435A57F725B05E008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number: 023C
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: wiY98AP5azOWxjIdAgMyJBDiPLzS2WM0BfhrXLZHYqU=)
2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:fe:0e:e3:b5:04:35:a5:7f:72:5b:05:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=7cb3e3efee65b053120a6268a4aa2c0ca099f7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:44:0f:18:de:c5:05:cd:c1:f6:62:e7:ca:
1b:fb:42:41:05:c7:11:c2:af:38:f0:05:8a:d3:c7:
61:00:8b:b7:f9:0a:b8:cb:f0:4a:7c:bb:d2:4e:49:
24:a0:5c:f3:98:46:39:19:91:c9:ee:dc:57:84:0c:
7a:73:8a:65:c3:70:46:ff:8a:7f:a2:78:06:2f:82:
cf:79:d0:bf:ff:80:42:ae:de:18:a4:f3:12:e0:47:
33:a7:9f:2a:7f:c1:b3:f4:5c:47:46:d6:37:8c:a1:
9e:d1:10:22:45:1c:6e:e6:af:4a:12:d4:58:88:91:
91:6e:e4:9d:6d:b0:14:64:88:1a:9e:de:61:a1:2c:
48:a9:d5:22:9c:9c:7d:0a:77:0e:33:0c:bf:cd:93:
e8:19:b5:1f:8c:65:5d:9e:64:78:99:c8:a5:f9:5b:
c2:ba:39:ae:f8:27:79:55:61:b5:4c:f0:92:f7:b3:
96:83:60:1e:7b:1a:e6:12:cd:35:e0:6a:5e:4d:73:
f4:c6:fc:ed:11:78:cf:15:5b:33:da:e3:c6:27:8d:
49:fc:82:6e:16:7b:e1:b6:93:a6:93:3b:45:d3:11:
45:ae:4d:f3:d4:80:58:d9:c2:50:63:ab:e0:d1:c5:
48:e3:af:2a:a3:1d:73:dc:b8:aa:fe:d3:f0:fa:16:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:E3:EF:EE:65:B0:53:12:0A:62:68:A4:AA:2C:0C:A0:99:F7:BC
X509v3 Authority Key Identifier:
keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:93:aa:4b:0e:d5:75:0c:dd:0e:84:10:ce:e4:60:08:f8:
17:13:8f:b3:9e:0c:08:1f:b6:f5:b8:97:f9:48:f3:97:35:9b:
a0:7a:dd:49:b3:8b:5e:5d:a5:6e:92:c4:81:ce:c8:f6:cd:0e:
f1:7f:ce:8f:f6:d0:73:21:05:52:db:7c:2a:40:80:3b:2c:0b:
fe:98:30:0f:eb:67:40:9e:9e:46:1e:68:14:e4:98:91:af:d4:
6a:6e:48:9e:b0:d9:0b:a4:2d:db:f0:28:3c:69:7d:0c:c2:9d:
39:d2:73:54:68:56:93:20:7e:f4:92:98:f4:05:f3:79:74:a5:
1b:44:e7:b0:52:f9:b7:87:4a:6c:60:f9:af:4b:a1:0c:cb:49:
70:9e:a2:52:64:5e:4b:80:57:07:e6:11:74:5b:6c:68:d9:fa:
2c:58:40:36:96:f6:19:44:28:6b:9b:bf:95:74:3a:f4:2b:49:
c5:93:4d:01:a5:4d:96:76:92:c1:50:f7:3e:60:fd:c1:e6:80:
9b:2d:92:f0:db:ed:b3:f4:33:46:b1:79:ad:b0:c5:90:30:2f:
e2:e9:78:cf:91:35:ef:ef:47:af:0d:84:33:97:2c:4c:c9:ee:
bf:48:2a:74:e6:52:0e:3a:db:9b:03:29:2e:12:4d:47:91:a9:
77:16:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:18 2025 by rpki-client