Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json)
Hash identifier: Jsf1FB7YYXBeaF8uKicXh2ZSw8M3XwjX4GQJMLbQG58=
Subject key identifier: B5:2A:48:84:3D:0F:F5:15:E0:66:B0:E4:DE:B7:4F:B0:1C:A1:C3:55
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0194BC051D1DB74DC9E57D98AF6E0B20584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
Manifest number: 08EE
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: pCFPiE6KmQ/iVuWs7fBXCaGNhjDoZ/T9yjUT+9g5UUg=)
2: UiH643w1GrSMb8MdWOXuMKoflu8.roa (hash: Ox1u3sls+4F8aVo0Ns4HTUNM65vIvg8OdP6tILBOlsE=)
3: Wl7r4uJNVYrMjnlZ-z4SsO1Ags4.roa (hash: PydHDotmQzJPAMz0KwvIxTfSMUxz++HoDxMeEIfTsFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:1d:b7:4d:c9:e5:7d:98:af:6e:0b:20:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=b52a48843d0ff515e066b0e4deb74fb01ca1c355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d4:f3:83:b8:31:ff:d6:6f:9c:91:2d:da:74:
01:67:d6:9b:b2:45:45:21:f9:d5:24:fd:46:fb:42:
c1:6f:e4:b6:e7:61:ca:59:98:60:7f:2e:e9:fd:8e:
f3:26:88:f9:19:f5:83:c1:1b:fc:43:7e:67:d8:f6:
cf:98:28:01:40:1a:65:4b:76:3c:17:27:44:e3:f3:
fe:5a:39:33:f2:91:51:01:53:71:bf:34:1c:b0:95:
c4:89:d0:2c:7c:59:ff:1c:65:3e:02:e1:82:55:32:
26:35:1f:9c:88:4d:7d:2c:56:6a:5e:8d:d8:bc:d1:
ec:6a:db:ed:5b:5e:9a:bd:3a:0b:61:db:93:ab:57:
ee:6d:30:95:ed:f2:3b:ad:e2:91:b5:77:cf:8f:ef:
11:88:91:d6:e1:61:0b:91:15:a3:47:c6:73:4e:96:
22:e7:bd:99:79:19:d6:4b:70:37:5b:23:af:58:a1:
ad:ca:56:e1:25:43:38:af:43:ce:5a:ad:d7:2e:d5:
4b:2c:cb:6b:e4:4b:65:74:d8:06:7d:bc:9d:1e:8f:
fb:84:3e:ac:ed:2a:ae:ca:8b:a1:ae:5c:cb:2d:c1:
fb:ed:2d:1a:7b:c7:0a:e2:73:a9:e1:c9:b8:6e:d6:
08:1a:38:51:94:dd:f1:63:9a:90:27:8f:ec:8a:00:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:48:84:3D:0F:F5:15:E0:66:B0:E4:DE:B7:4F:B0:1C:A1:C3:55
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:ec:74:1c:43:81:9c:a8:4b:32:63:16:63:b4:cb:df:26:
ab:bd:a2:33:53:31:43:fd:27:2d:c6:a4:f8:dd:d2:80:6c:a1:
91:65:07:44:f4:be:18:25:93:da:42:de:8b:39:52:42:7b:83:
4e:f8:d1:29:19:0a:b3:79:5e:df:35:7d:36:56:d5:ce:b1:31:
0f:96:f8:d3:97:a0:3e:18:0e:44:dd:6f:72:e5:68:a1:18:ac:
52:6b:bf:c6:fa:97:a7:d1:a5:57:33:56:86:34:e2:5b:9a:62:
a5:bc:65:30:74:d7:0a:5b:d2:86:3c:7a:4d:24:21:dc:12:fd:
6e:2c:8c:7d:70:03:03:a6:77:50:25:4d:e7:3a:d3:9c:d0:61:
39:0f:0f:19:09:d1:dd:04:ac:f5:26:38:83:b9:35:57:a6:b1:
5b:2c:1c:46:8e:fb:fd:6f:71:77:e4:9a:79:7b:d2:83:68:c5:
2e:79:61:70:0b:9c:a1:5e:74:0a:c0:0d:68:cc:45:c6:26:fd:
bb:b5:bb:b9:51:b8:86:2e:1f:da:21:2a:6d:76:3a:a5:db:a9:
a6:2b:44:5e:fe:dc:20:8f:a6:28:3e:60:21:e6:e9:df:a2:fc:
e2:2a:38:c1:87:98:a9:ca:5b:20:f9:f8:aa:1c:88:15:f0:0d:
31:30:d2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client