Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: gDSOTaEQvjcgpAyf9pq+i6lyclLdAzXGbwXbaq1NdnM=
Subject key identifier: AA:2A:DF:76:0D:E9:37:19:AA:3D:B6:06:66:50:EA:22:6F:CF:48:73
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 0194BCA9DC40F852B52E463C43F32636AC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: 4YY1UeJBH8rLluucXSf6dnZm2khK+4aisXKY0iaeq8Y=)
2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:40:f8:52:b5:2e:46:3c:43:f3:26:36:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=aa2adf760de93719aa3db6066650ea226fcf4873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:6a:43:f3:68:d5:4e:64:80:d6:b1:ea:3a:
dc:4e:77:5a:31:c6:13:6c:a0:6c:33:10:c3:7c:3e:
36:96:63:bd:6f:57:af:7b:ce:d4:a3:b1:9e:bd:15:
fe:1a:03:1f:76:15:c8:93:8d:19:51:12:11:c9:aa:
e8:db:4d:4f:2b:02:02:bc:e3:c5:e4:84:79:39:4f:
38:7d:7e:53:3d:dd:00:1e:1c:93:ad:1f:69:33:96:
8c:28:b6:b4:df:ba:0f:1b:0e:1d:5d:41:80:88:40:
db:0a:0b:14:18:c9:82:b9:2a:09:67:29:83:c4:dd:
8d:3c:07:eb:4d:42:fb:ca:39:63:3a:89:f7:39:91:
a3:ca:fc:9e:58:20:d7:29:e2:60:15:2b:cb:bf:06:
71:75:e4:6b:53:7f:b5:3b:72:ff:dd:8a:79:12:b6:
24:b6:13:1e:fc:77:46:db:0c:0e:53:63:54:4f:43:
4b:3d:4b:a0:00:33:82:8c:23:00:ee:0d:29:8e:73:
b1:5e:72:21:36:65:ae:e1:55:3f:ab:b4:6b:0c:d4:
c7:c9:58:67:d5:c9:dd:cc:26:7a:73:c4:04:0e:ac:
f4:dd:ce:72:c1:96:40:28:1e:2f:4a:62:6a:30:96:
ae:33:a8:4c:2a:41:fa:6d:07:5d:de:45:5a:c8:b6:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:DF:76:0D:E9:37:19:AA:3D:B6:06:66:50:EA:22:6F:CF:48:73
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a1:a6:c3:a4:5f:b5:60:66:16:8e:15:59:c3:97:d5:d1:c8:
fa:fc:2a:bb:f5:9e:ba:73:8b:90:a4:d7:d4:3d:3e:56:fe:25:
84:90:c3:55:0a:f4:f8:ba:c8:3e:27:29:78:56:3f:70:82:3b:
e9:c8:a2:50:30:30:0b:8f:df:31:2c:71:4d:2e:1f:6b:a9:ec:
07:ce:8c:9c:d2:0f:20:4f:e2:33:ea:27:fc:57:09:12:92:77:
3c:5b:99:eb:d4:f5:1e:fb:d3:b3:77:04:dc:48:f0:a0:63:cd:
bf:2d:5e:d2:cd:a2:39:e0:c0:58:b9:5d:fc:e5:df:24:7d:ab:
ce:8d:80:ac:32:72:eb:8f:8f:a1:d6:a5:4e:7a:ac:36:88:4e:
47:6c:5f:0a:54:ba:8c:34:d6:08:32:ab:60:78:74:80:5f:db:
2e:9e:d8:ea:a1:4a:14:bd:84:fc:fb:17:47:05:73:d2:81:7d:
95:32:10:23:24:be:d5:d3:b9:9f:7c:10:ac:e0:96:7c:c7:b6:
ac:01:6a:a9:a1:86:b1:d0:b3:4c:1d:93:d2:6b:a5:bf:e1:83:
8d:66:12:5d:c6:80:0f:58:c2:4f:8c:74:c4:19:92:f2:cf:a5:
37:bf:a3:07:07:c9:35:02:d1:b5:d4:8d:5b:1e:ed:3c:a0:a9:
ad:45:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:36 2025 by rpki-client