Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: Q59i6G+a8rLf077MbLWQJ9+PGF3NMjsp+QYFS+2XGYc=
Subject key identifier: 47:59:37:74:B8:36:C7:FB:0E:09:3E:61:58:0A:52:1F:BE:07:61:3D
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 0194BBCE21C6415968BB0E1A4F39FD841DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: HFKPRUDJTnQj+8EyyBeDztgXkPtewV2zneJfiOjgpSo=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:c6:41:59:68:bb:0e:1a:4f:39:fd:84:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=47593774b836c7fb0e093e61580a521fbe07613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:94:b4:c1:e9:b5:11:76:d0:fd:39:73:a3:
eb:c8:1b:6f:c3:ec:06:be:45:1a:5c:6f:6a:93:5f:
f2:e1:3d:3c:00:ad:a4:ea:15:d8:80:28:3f:2d:74:
27:1d:61:65:31:af:09:b6:7d:e3:1d:7e:70:cd:b9:
b9:56:f2:21:b1:eb:81:f0:1a:68:88:ac:14:1d:a2:
a9:79:98:70:c2:59:bf:53:a6:96:89:de:fc:bd:5f:
12:81:b4:12:78:32:3c:aa:94:68:14:18:c5:5d:59:
e8:cc:ef:60:b6:1e:8d:5f:3c:64:11:65:eb:b0:e2:
05:43:9c:aa:0a:fd:97:b7:23:50:2a:90:b2:8b:4b:
9e:1a:3f:ed:a4:25:ad:f5:64:f3:80:4c:d0:27:49:
23:cb:01:8a:a0:d4:ac:1f:03:84:25:f1:1c:b4:ee:
dd:2a:c7:9b:2b:2e:6d:bb:0a:ff:4d:8d:f4:0f:5f:
9e:cb:0b:03:21:5e:da:e2:15:4f:67:ed:4a:08:94:
84:22:fd:12:09:a6:85:40:08:f9:ae:82:68:3d:3c:
5e:55:05:06:fa:8a:1a:ca:9b:e5:8a:9c:5e:6e:bb:
31:1a:35:9c:94:67:49:58:a3:d2:c3:b5:77:f9:d6:
d1:01:84:07:cc:14:11:16:19:a9:65:ff:a4:44:df:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:37:74:B8:36:C7:FB:0E:09:3E:61:58:0A:52:1F:BE:07:61:3D
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4e:27:30:64:9b:bf:5b:a4:0c:e3:ce:c8:b4:66:7d:9e:19:
cc:15:53:b4:24:5f:15:58:1e:4d:ee:be:a0:d2:f4:7b:3d:51:
97:0d:8d:d6:25:7c:6a:fe:4e:47:ed:76:a0:41:7c:c7:0e:ea:
4b:5d:b6:5f:54:91:aa:6c:ab:29:f1:f3:fb:b4:5a:e0:c0:f9:
e7:88:5b:c2:db:71:56:97:e7:3a:93:04:ce:a1:7e:14:81:86:
44:a7:67:f2:a6:a5:13:e9:36:b7:7c:ee:85:65:3b:d2:81:24:
67:f1:36:29:c2:16:f8:c8:8d:2a:02:16:d4:3e:1a:43:6f:73:
b6:cc:56:46:9d:17:c2:cc:84:5a:be:f0:97:a5:98:b6:04:0a:
15:55:4d:9f:8d:3e:2d:6c:1f:23:73:26:64:1d:ae:12:bb:f4:
6e:45:25:40:ab:c0:42:52:42:ef:71:49:b8:8b:7d:7c:62:ee:
d2:c7:21:c9:aa:a0:e6:b7:15:48:b8:7b:79:ee:f5:1e:44:df:
ca:eb:51:38:17:09:84:07:81:6b:d5:34:a8:b0:94:05:87:89:
4d:e9:70:e8:db:8d:dd:9f:94:ad:cf:f9:14:99:04:cf:8c:57:
d5:87:ba:f7:6b:d8:f2:bf:77:30:6d:f4:7a:cb:52:b4:66:aa:
e6:08:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:11:24 2025 by rpki-client