Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: DHJ7/2K6z7CAcL3etGYl5zV0l1ip2BxbXsoIb5otnTc=
Subject key identifier: FE:4D:43:F2:6A:33:2F:B2:67:E7:7F:7D:18:8A:02:1D:0B:C3:36:BB
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 0194BD85B2A586E42737C33DE85818BCC375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: oHQUkrrqS0JgBwyf5x/e3PXn8CTBOAO2KjrZhIXzP0Y=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:a5:86:e4:27:37:c3:3d:e8:58:18:bc:c3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=fe4d43f26a332fb267e77f7d188a021d0bc336bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:c6:64:d1:96:5b:1a:af:ac:d8:e8:b2:b9:
e2:50:4b:74:0c:12:2c:c8:53:eb:28:83:9d:24:83:
8f:0e:c7:62:fa:3d:a9:9c:14:b1:52:70:4e:78:9f:
f4:4d:0d:8c:ca:df:7d:ee:5c:10:5f:cc:b0:8c:2c:
2d:7c:d0:c2:20:f9:4e:b4:74:d7:fc:34:99:bd:b9:
47:a1:58:41:09:d7:20:ee:66:ee:f7:d3:c2:73:54:
3d:89:de:74:03:98:57:fa:9a:da:a3:43:a7:65:87:
ef:4a:c6:e7:dc:ee:cf:2a:45:b5:ec:6f:bf:3c:9e:
d3:11:9e:4c:b1:b9:8c:ef:fe:c4:7a:6d:0d:e0:f4:
1c:d3:a6:e8:be:54:c4:c9:07:e0:31:43:d3:9f:79:
ed:15:b5:35:1e:3d:1c:1e:e6:f5:ba:62:a2:d9:e0:
c7:3f:b6:1f:86:83:ea:c9:9d:51:b8:eb:ef:c3:7a:
9b:70:07:34:f0:31:a5:f7:bb:4d:86:63:52:61:5f:
f3:37:63:b4:b9:8f:1b:20:64:77:fc:14:6f:fa:45:
e1:11:4e:18:a3:dc:23:ec:d3:21:e5:36:c5:2a:5e:
73:ef:da:d7:81:00:c5:b3:44:dd:8f:1b:74:fa:9f:
a3:32:0e:06:d0:66:46:b1:2d:e9:eb:f1:c8:39:b6:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:43:F2:6A:33:2F:B2:67:E7:7F:7D:18:8A:02:1D:0B:C3:36:BB
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bd:4c:ea:30:74:63:e8:ad:f8:04:40:53:50:01:11:60:cc:
44:eb:5b:99:53:c5:2d:41:7d:eb:aa:d3:6d:5e:63:f6:ec:18:
6a:bc:61:8b:79:62:a1:6d:02:1c:90:60:36:86:7c:ef:12:92:
e6:2a:b4:9b:e4:c9:47:44:11:c0:17:7b:0d:67:8b:f7:da:e4:
77:90:1f:ff:a4:fc:62:34:8d:e9:48:98:6b:21:35:c2:0a:01:
d6:09:66:62:50:b3:9d:4b:bf:20:e4:b3:8e:09:db:3a:b8:91:
94:a1:11:d9:85:75:48:73:a8:c0:6f:62:3e:ca:c4:54:fb:e1:
ed:7b:42:3d:86:e2:fb:2c:6b:4e:81:cd:68:30:13:43:58:55:
67:fe:7b:c5:11:ee:d9:9f:35:f2:0f:eb:77:bf:af:ba:7b:87:
06:57:06:c3:71:f5:07:91:96:a3:ac:3f:4d:2f:d5:37:ec:09:
c6:9d:ae:01:02:4d:f6:70:9b:32:96:c4:ad:ef:6f:27:01:8b:
d5:7d:52:a0:8d:73:c0:00:15:c4:d1:cb:42:08:3f:7e:f0:ad:
2c:5d:50:82:8b:17:94:45:49:41:a8:a6:25:91:2e:79:be:65:
f3:aa:d6:9b:05:62:68:f6:75:f8:ba:3e:b9:76:74:a2:d7:78:
7b:55:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:12 2025 by rpki-client