Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: Nt/HWGxo+3Rzp/TX49xpAPQE1HWXp+sdkogocDYV3lo=
Subject key identifier: 5B:5F:82:32:D7:56:15:63:DC:52:CD:9D:E5:BA:8E:F6:0B:04:9B:CE
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 0194BC04A8E6A828926A787BF17693AED8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 1347
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: BfWa7cKCluKRck95N954jichZAg.crl (hash: l+UTR4aB1YfXMudGJ/KE5q81tMA49iJ0TOv8z3iimuQ=)
2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a8:e6:a8:28:92:6a:78:7b:f1:76:93:ae:d8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=5b5f8232d7561563dc52cd9de5ba8ef60b049bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:19:8b:57:42:ca:52:c2:d0:ce:c2:6b:f9:
f0:70:cb:ba:d8:78:97:92:ec:9f:6d:53:1e:12:bd:
fc:c2:f8:63:56:45:36:8c:53:dd:f9:89:8e:b6:9c:
de:bb:37:de:20:fc:2a:a4:e7:c1:14:93:69:10:ba:
4a:2b:b0:50:4e:2c:dc:28:12:38:59:83:40:15:58:
f2:2d:e5:97:32:eb:cb:c2:c8:37:09:26:17:cf:c6:
27:55:63:7a:db:b0:f7:cc:0f:9f:d6:44:59:9c:c7:
98:bd:3d:84:b0:b6:e0:d9:9a:34:ee:6c:45:2e:e6:
82:64:cc:1c:38:56:d4:66:5b:c4:c9:70:be:11:97:
61:5f:65:39:d6:3e:25:af:7b:cd:24:9c:2b:f8:2f:
ae:52:4b:b2:f4:d7:0c:ef:ff:98:01:f0:b6:04:85:
84:0c:eb:c4:03:9d:1f:49:c8:9e:ea:af:4e:d3:39:
bc:92:ec:0a:48:b7:dc:55:55:43:19:00:5c:4e:43:
b9:95:f6:7e:b5:39:9c:75:56:76:a5:e8:4d:94:b8:
b6:55:4b:c6:ef:d4:a9:62:11:6e:fe:b7:3b:5b:a8:
de:46:4d:69:09:5e:7f:ac:58:6e:9b:61:19:ed:88:
08:15:7e:93:00:bf:56:f9:e3:1b:3d:9d:cb:33:7c:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5F:82:32:D7:56:15:63:DC:52:CD:9D:E5:BA:8E:F6:0B:04:9B:CE
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:7a:2c:24:99:18:93:1d:16:98:69:09:48:da:c5:db:d7:c0:
2e:a2:e5:2d:82:e3:6f:89:f5:d5:f8:fa:1a:c2:b9:d2:27:fe:
df:c5:12:dc:ed:96:36:c4:0a:e8:c9:5b:7a:48:16:c0:1f:82:
f6:8f:ba:33:cc:4e:23:eb:c2:45:7c:64:4c:15:a7:00:1b:10:
01:fe:32:a3:8a:9f:de:a4:24:44:1d:79:00:74:32:e8:8d:28:
49:ea:48:7a:c4:72:37:0e:57:26:22:94:1d:15:f0:5a:d2:d8:
c9:d5:6f:99:6f:4a:39:a2:3e:6d:80:65:8f:cb:24:c0:0a:ca:
62:22:9a:aa:de:48:f8:56:3b:aa:3d:88:69:8a:a5:e8:f1:2b:
79:02:a1:2e:6a:1b:78:10:71:7a:7c:02:f1:f4:9f:47:6d:d8:
f8:86:d8:c3:92:a5:cd:82:d4:c8:53:5e:47:58:d9:23:c3:14:
1d:59:55:f0:59:1e:d9:42:e7:36:3b:14:f2:02:6c:72:8a:18:
6f:51:66:4f:19:03:6a:be:be:c2:84:a6:4a:f8:06:c9:9d:f0:
44:7b:04:1e:17:85:46:58:e4:15:89:01:be:c2:be:4a:45:8d:
c0:3f:34:56:71:3e:8d:8d:2e:87:d5:ac:50:08:b4:e7:b2:54:
ca:c6:74:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:57 2025 by rpki-client