Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: J0qGvZJxN7cwQ6KnAZsm7iXFomkAk1iznyLck/rK00w=
Subject key identifier: 7C:F4:A3:BD:4C:1B:3C:14:73:7C:40:C1:0A:0E:60:38:17:4A:22:BC
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 0194BD4E599CB3A39174899365F16EAB609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 13C9
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: GiPm1QQAuITLqjKCL8q3Yi7ud93GYwyXssFkeSHW60g=)
2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:9c:b3:a3:91:74:89:93:65:f1:6e:ab:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=7cf4a3bd4c1b3c14737c40c10a0e6038174a22bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:9f:15:ec:86:2b:97:d7:2c:6d:b6:75:1d:
2d:a8:7f:18:2f:27:42:b9:e9:92:0a:2c:18:42:d9:
1d:c2:4e:89:b1:3b:3a:c7:1d:5c:64:4f:ad:72:33:
8a:7c:b7:a3:ff:5c:67:68:16:50:fa:aa:2c:c0:c6:
ff:58:11:c5:77:80:ba:30:b2:eb:bd:d6:bf:6f:5f:
88:e0:68:07:e9:62:55:66:59:4a:54:21:f6:b6:e1:
59:b6:10:f2:df:19:f0:10:4c:00:3f:04:c3:4b:d4:
cc:71:1b:a8:a3:81:34:80:e1:6c:e5:ab:ac:bd:6a:
da:b1:27:80:f0:04:b7:e1:d5:1f:00:47:70:ca:dc:
74:2c:af:7c:1a:a3:fd:fd:a4:44:17:77:31:f0:a6:
8e:12:fb:2c:eb:b7:fa:c0:a9:2d:d1:83:c4:6b:62:
04:b9:1b:28:0c:5f:a0:21:b6:68:ec:b8:39:5d:ea:
13:1e:94:49:e6:30:80:de:fb:a4:71:13:5d:f7:47:
44:31:88:7b:09:57:6c:b8:5d:76:88:a0:c7:ac:52:
f8:d3:8f:95:cb:82:37:41:39:5f:4a:40:e9:2b:b7:
46:a6:cf:7c:b0:c3:a0:58:14:e1:d0:ac:19:16:e8:
54:61:fb:92:eb:47:79:15:0a:07:58:dd:56:d6:1d:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F4:A3:BD:4C:1B:3C:14:73:7C:40:C1:0A:0E:60:38:17:4A:22:BC
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:51:3e:be:bf:0b:c7:45:e4:fd:82:09:b5:1b:ff:56:12:
67:73:39:ad:b7:f8:51:0e:7c:52:23:27:c5:0a:33:86:2d:dd:
13:98:af:be:22:a4:8f:bf:e1:39:ec:65:cf:d9:8b:14:9c:bc:
c3:8f:24:6a:b4:ec:6d:f3:4e:ef:15:21:f7:13:82:7d:a5:6f:
d4:fb:fc:18:b6:f5:aa:b1:26:bd:76:3f:1f:bc:3a:7a:6e:72:
f1:e5:23:f0:83:54:8e:b6:02:90:14:cd:10:4e:01:15:a4:94:
b0:0a:f0:7b:69:ea:67:8c:91:16:d8:f6:a4:3b:25:48:41:08:
96:be:19:ba:3a:71:c8:3a:a6:69:d2:1f:ac:10:fd:cf:67:83:
29:2b:92:43:99:7c:40:43:72:19:73:c2:be:bf:b0:58:6d:a0:
23:3f:b2:f7:8a:b0:e2:4c:b4:d5:65:e8:4b:5f:97:01:d8:f6:
28:55:de:1d:59:1b:ed:a5:11:81:9a:ac:25:c5:f6:25:03:52:
b3:3d:11:d4:81:20:27:b0:8f:9f:c3:a3:3b:4b:ab:4a:8e:33:
4d:22:66:c7:eb:59:f7:98:fe:c9:e4:aa:46:d0:93:f9:fb:50:
f8:43:a0:23:c0:c1:8c:5c:5c:48:6c:99:be:1d:ec:48:1a:f3:
64:09:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:09 2025 by rpki-client