Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
File: BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft (raw, json)
Hash identifier: FBo7QeI1E5vi1Gx6TiQMnY8EBWcwAubmyWd8AyIe064=
Subject key identifier: A1:71:5C:59:2E:53:A2:B5:00:CD:04:57:98:A5:50:85:EB:2F:7D:03
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 0194BD4E3FA5F30033C6000950D72E3DC027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
Manifest number: 04B5
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl (hash: 31x4LigcVRGclnCGyzN9cSlRD04xH0bxIEjmtugXCOw=)
2: M8AiCxgMSSUgBuVdFRu7pkvGtCo.roa (hash: pnvkZHQqProNXp2Y06uxspQQFP7772iRU8HPzD5Li1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3f:a5:f3:00:33:c6:00:09:50:d7:2e:3d:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=a1715c592e53a2b500cd045798a55085eb2f7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:c4:a8:f5:a6:e3:d9:9c:35:50:94:11:f0:
8f:64:6a:f9:37:63:f1:a0:d9:a5:68:1a:a0:7e:af:
80:cf:b8:e6:05:77:81:20:e8:fb:b1:57:55:92:e1:
f8:62:f2:98:7b:a8:91:69:cb:84:6b:45:da:4c:d3:
bf:4b:f3:3a:52:8f:fc:10:d9:63:53:0c:55:b3:b8:
9a:21:48:0f:64:c8:a7:a5:5f:30:2f:c7:f2:74:b6:
16:72:bc:af:09:07:bb:38:35:81:d8:04:a8:91:b2:
aa:0e:b8:df:b7:89:a2:47:03:96:06:39:1b:40:ab:
63:62:9c:32:61:ff:8b:07:52:28:90:8b:3d:e6:60:
e8:da:45:9b:62:15:4f:e4:d8:3d:ca:67:34:6b:5c:
64:b2:46:85:ae:29:56:a1:2f:a8:ce:9d:83:39:cd:
ce:51:dc:91:ba:bb:51:44:45:4c:cc:8c:f5:de:61:
de:2e:69:55:1d:d4:d6:d4:24:b7:56:31:15:76:b2:
3b:cf:56:b1:dd:ca:ff:6f:62:4c:87:1f:b4:20:ec:
8f:35:44:c4:fb:f5:c4:44:00:30:7e:c2:f7:32:5b:
fc:31:a0:82:6b:53:9c:bf:77:9d:06:84:73:7f:a4:
63:36:00:9a:1f:8c:52:f8:99:46:cc:3c:e6:6b:92:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:5C:59:2E:53:A2:B5:00:CD:04:57:98:A5:50:85:EB:2F:7D:03
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ca:2b:ea:b3:08:5d:6d:33:04:79:22:1a:2d:de:7a:94:00:
27:84:79:ff:ba:e5:4d:54:3a:dc:8a:0d:80:d7:41:c0:a4:ab:
60:44:48:fa:d5:62:b9:5f:86:6b:98:62:61:eb:22:5a:7d:6a:
bf:ab:01:d8:02:6e:1c:e2:b1:e6:33:31:5a:5f:79:e3:a5:e4:
52:a9:69:b7:ec:69:d1:dc:83:92:ad:d1:d6:5f:10:3a:cf:5a:
7d:4d:e3:a1:4b:96:bb:12:9a:63:fa:e4:eb:f1:ba:9a:24:a1:
52:5f:83:35:ea:29:c3:98:8a:80:84:3e:ad:30:09:e3:03:28:
fe:2e:f8:a0:f7:00:d5:28:cc:aa:20:27:f7:b6:28:92:b0:32:
fa:f1:9e:a6:29:bc:47:af:7f:fd:dd:f1:d2:2c:1e:8b:28:b7:
d5:51:df:fe:8c:0e:cf:8b:aa:1c:56:27:47:82:bf:a4:fe:27:
33:87:f8:4c:fc:3c:4d:02:9d:48:81:55:37:35:f7:92:fa:ff:
8c:78:42:60:7e:c9:ef:f5:bb:13:2a:c8:d5:d7:15:81:6c:2c:
65:74:10:ab:68:c6:6c:50:68:82:8d:d1:44:57:6f:89:9f:9a:
f2:27:e3:17:b0:16:7e:94:95:a9:46:24:66:94:a2:a4:73:c4:
d2:47:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:51 2025 by rpki-client