Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: UrxnqlulgOK4ERaaj5PmFJLcp4/8RNZxhQH4hAASL0U=
Subject key identifier: 73:96:76:3B:57:D6:E6:05:70:8C:2F:78:E3:64:EE:8B:77:00:F3:36
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 0194BC3BFCDF68C9CD2C239069B24B1A04C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 0112
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: hoylVxXqHV5nDV1R4PLKVPkA8Nbydg27dgaKyqmRqps=)
2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:df:68:c9:cd:2c:23:90:69:b2:4b:1a:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=7396763b57d6e605708c2f78e364ee8b7700f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:81:08:bd:5a:ef:0a:5c:ac:db:28:ae:8c:
74:f7:af:97:47:0c:f9:63:31:49:15:ce:fd:40:8c:
05:df:22:ef:f5:eb:66:fc:39:da:a9:a7:55:79:9a:
77:b2:33:9f:ae:63:78:0e:6d:0a:f7:1e:7a:96:be:
92:7d:24:20:47:90:79:bc:11:30:00:40:4f:80:dd:
ae:e9:20:2c:56:f0:70:03:0f:ae:17:5b:7e:34:eb:
58:d6:e9:a9:fb:1f:f7:80:66:81:7a:33:b9:a8:5e:
42:64:7c:0c:41:42:82:5f:87:f9:df:13:47:20:3f:
b5:fa:76:9c:e3:69:dc:cb:7f:fa:ab:92:2a:c1:3a:
ab:50:c4:92:bd:b2:e4:18:9d:bb:3e:17:6a:ed:5b:
e7:d9:54:7e:f1:6c:88:55:9c:b4:b1:6f:23:ed:80:
a9:40:cd:48:2f:57:cb:80:2d:d7:93:be:87:62:ed:
d4:fd:3c:91:c7:68:01:ee:09:c0:81:61:e1:e3:6d:
36:1c:4d:a6:93:e4:64:18:ae:34:31:d6:e9:09:eb:
85:94:85:42:72:aa:1b:0b:be:e3:a0:b3:e1:02:7d:
df:70:52:84:ba:0b:15:c0:41:bf:6c:44:00:3c:be:
2a:ba:a8:7e:f8:a4:6c:8c:0c:60:3a:98:c9:ea:7b:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:96:76:3B:57:D6:E6:05:70:8C:2F:78:E3:64:EE:8B:77:00:F3:36
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9b:0b:9d:88:7e:31:08:c2:f9:54:61:6a:0b:f2:9f:d8:7b:
e5:42:70:24:b7:b1:4a:31:7d:82:0c:59:4d:44:f3:55:a4:c5:
6a:3c:db:46:1e:96:a0:d4:6d:77:85:2f:c4:2d:3a:d6:29:d4:
7d:eb:e5:ec:19:9a:4f:e7:73:07:46:c6:3d:b1:87:13:a8:9e:
46:03:ac:75:df:f2:6b:99:2d:47:10:0a:be:32:12:4b:88:74:
72:ae:1f:3e:d1:82:df:2f:d9:92:dc:14:cd:0f:fb:ae:69:80:
91:19:29:64:0d:22:3c:6d:29:d1:68:2d:10:af:13:3b:fb:32:
d9:a3:07:2f:0f:79:a5:c5:b4:b3:ae:1d:3f:f1:cc:21:26:5b:
71:c8:48:4a:50:28:90:86:ee:38:3f:76:11:42:c9:85:43:cf:
22:e1:a8:03:9d:d4:53:71:0e:67:a9:bd:24:9e:68:65:42:18:
ba:ac:e7:c1:c6:5c:96:a2:53:e0:da:ff:7a:88:16:f6:49:8e:
a5:47:d2:26:4c:4f:d6:4c:bf:b9:8e:94:7c:09:f7:9a:e7:43:
ad:83:ba:90:c3:4e:93:cc:35:88:ec:fe:bf:19:8e:04:a9:12:
6f:ec:5c:cc:71:e0:33:a8:49:ac:8c:2b:ab:d4:f9:bd:47:c1:
6f:c8:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:22:33 2025 by rpki-client