Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier: yXmB7006TYGAdN5s9/PIzCN5AeijvsJWOrOCW48XMmw=
Subject key identifier: 38:BA:E0:A3:59:FC:7C:59:D4:6B:1B:A1:79:D0:E6:89:59:6C:B3:8B
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 0194BC04E83575870E3A2468E6CFFC9BD705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=)
2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=)
3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=)
4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: 8ZZDZOPsgRnPnxX6EhtzpzMlsa3i+bWhUgrxCqGXTg8=)
5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=)
6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=)
7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=)
8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=)
9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=)
10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=)
11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=)
12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=)
13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=)
14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=)
15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=)
16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=)
17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=)
18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:35:75:87:0e:3a:24:68:e6:cf:fc:9b:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=38bae0a359fc7c59d46b1ba179d0e689596cb38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:c9:0e:4f:8a:ab:08:14:bb:89:7f:f6:d8:
f6:48:e8:6f:6c:23:d8:0e:73:ce:d7:3a:58:6f:77:
be:71:f8:8c:13:20:a2:38:eb:a4:6d:f0:6e:56:ce:
d2:fb:e1:ed:f8:09:e8:ca:33:0b:b2:c3:c6:b3:be:
47:07:25:6e:37:a3:13:ce:2e:6c:7e:6c:30:ca:36:
7d:ed:33:ee:8b:05:a0:91:3f:03:47:d0:ea:10:38:
ba:76:b1:b8:1d:51:71:1f:3b:83:a6:c5:bb:3f:24:
75:68:cd:7c:42:e2:95:67:16:dd:25:78:90:d7:95:
fd:f6:8f:d1:14:80:1e:45:15:8c:09:f4:c2:ab:bf:
7c:e4:ff:f7:fa:95:d1:d3:7c:ba:5a:8e:6a:01:5c:
a8:42:be:eb:ff:5d:4b:28:8d:89:b7:de:62:19:68:
2c:d3:f8:89:ea:dc:c7:75:77:f4:19:13:07:12:01:
50:ae:2a:b8:1c:a5:11:2d:53:7d:90:22:76:45:42:
9f:50:87:bf:2f:e5:d4:31:45:36:d6:2e:88:a9:5c:
36:12:c1:c7:1d:ab:1f:69:15:95:68:61:93:92:c8:
0a:8b:88:38:1d:f7:b2:5f:fd:97:b5:f9:77:10:a9:
36:4a:bd:02:d5:cc:56:e8:4d:70:9b:b3:fc:66:5b:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:E0:A3:59:FC:7C:59:D4:6B:1B:A1:79:D0:E6:89:59:6C:B3:8B
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c6:c0:7d:77:bb:12:41:42:22:3a:d7:37:4b:14:a9:e2:de:
44:60:7a:18:08:72:5d:3f:69:e9:39:1e:16:51:0b:da:fd:04:
95:ea:22:f0:52:31:4b:a9:ec:8e:c6:a8:c9:3e:26:52:50:54:
99:83:7f:c2:c1:1a:3f:2b:fa:60:89:17:a9:6c:2b:28:ed:49:
5f:7d:aa:4a:6f:23:88:65:32:0b:9a:0d:71:cd:3b:66:49:08:
90:18:0d:5f:4b:90:a3:2b:f7:22:8f:27:df:69:3c:d6:d8:dc:
17:e3:e8:34:75:fc:b3:14:08:1b:e3:5f:b1:24:50:05:67:53:
e2:06:90:9b:b1:eb:2a:fd:24:fd:8e:37:8e:1f:d0:bc:de:a1:
d6:3a:24:aa:40:e7:cf:f3:5b:7d:1a:07:f7:f1:ce:b1:b0:97:
51:af:f0:1e:cc:4e:f6:5e:20:3d:bc:a5:88:a8:a1:00:b4:ac:
ce:c7:81:82:fb:2c:71:c6:72:5e:ee:23:91:de:33:56:32:54:
f1:4a:f5:6c:0d:20:03:b7:ac:8e:9a:7e:74:4a:9a:52:15:9d:
d3:e7:40:83:c7:57:90:7b:3d:75:fd:8a:bc:36:70:f0:8b:28:
24:f1:2d:a0:c6:e4:ea:06:81:09:01:af:f0:1f:8c:a6:ea:59:
3e:a6:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:07 2025 by rpki-client