Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
File: BFAQGURA7kD13kLwwbKz03G82GM.mft (raw, json)
Hash identifier: W7ZniGjt6CLH8ABX1Ai2RtOhWv9OrfdyJzVvzdsTYKc=
Subject key identifier: 07:12:CE:80:4F:A4:DE:14:5C:8F:AD:D0:C0:4C:C0:AC:73:07:44:71
Authority key identifier: 04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
Certificate issuer: /CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Certificate serial: 0194BC3CA256A2BB1D2E3AD1DBD00ECB1289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
Manifest number: 1371
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: BFAQGURA7kD13kLwwbKz03G82GM.crl (hash: baHJvVPVy71S6tIP/raJ7pGn3rjPQPPcq9t5bxkaUJ0=)
2: fNJzWMxwIRs-oxYj6gVLzdXlR9o.roa (hash: 2scd04V5Cfx10HVTv5lVQAKj0cVcY+kOPgXcQil/rZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:56:a2:bb:1d:2e:3a:d1:db:d0:0e:cb:12:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045010194440ee40f5de42f0c1b2b3d371bcd863
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=0712ce804fa4de145c8fadd0c04cc0ac73074471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:bb:c4:c2:07:67:1b:c0:13:09:7b:47:56:
90:e7:bb:2e:0e:46:e6:21:0c:9b:04:00:11:03:ff:
ff:9d:9b:c8:59:1c:ee:34:88:99:b4:9b:e8:e5:e0:
6f:0c:2c:7e:d3:fa:54:05:cf:f3:78:62:88:ec:3d:
cf:b1:a7:11:b3:07:2a:ef:76:fc:4c:5d:fe:79:a1:
b1:96:de:74:4c:f4:8b:87:ef:02:b6:a8:27:33:78:
43:4c:aa:d3:36:86:b1:0a:58:9a:bd:13:3c:47:ac:
7f:66:8d:f2:40:c8:72:5e:ce:0f:82:37:d4:b9:65:
15:9a:91:e0:3d:87:ba:0a:ed:c6:6a:46:6d:40:81:
c5:57:c2:ee:51:9b:ac:25:66:ed:c0:71:2d:a2:17:
b9:df:fc:c1:8b:6b:01:57:e8:12:cb:2d:4d:13:29:
75:63:0a:02:53:54:aa:fb:81:dd:9d:d0:e3:0d:18:
d2:31:70:46:74:a0:b3:52:1a:11:80:84:6f:10:ab:
0e:e8:a5:97:92:8a:2f:9e:12:3e:e6:1e:69:bc:73:
4a:e9:c6:cc:d6:40:7b:f6:1f:ec:4e:f0:14:9e:72:
20:34:5d:ad:0b:e6:9f:27:72:38:98:f9:ee:7c:f7:
3c:13:d2:01:24:8e:76:2b:5d:db:5d:bc:88:7f:f3:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:CE:80:4F:A4:DE:14:5C:8F:AD:D0:C0:4C:C0:AC:73:07:44:71
X509v3 Authority Key Identifier:
keyid:04:50:10:19:44:40:EE:40:F5:DE:42:F0:C1:B2:B3:D3:71:BC:D8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFAQGURA7kD13kLwwbKz03G82GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6826f5-f97e-439e-b199-b7bd10e4489f/1/BFAQGURA7kD13kLwwbKz03G82GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6d:02:83:85:6e:f7:ec:05:81:4b:8f:57:a4:e0:77:96:8e:
31:f1:10:d7:ed:47:61:5c:8d:fe:5e:d1:80:46:00:13:83:cb:
69:8a:57:33:76:b6:4a:b2:b0:3e:02:12:b7:5f:a8:10:91:8f:
67:be:37:c0:73:c5:39:cf:9e:1d:de:14:25:63:f2:9a:46:5c:
1b:08:0b:da:0a:1f:65:d1:1e:1d:5b:f6:fb:2b:f9:27:61:dd:
7c:6d:c1:20:bd:c1:d5:a3:48:02:f7:5e:c2:86:0e:16:ea:85:
9c:5b:36:d9:d2:ed:45:98:d3:0b:39:50:23:23:a9:6d:a8:6c:
d2:00:21:3b:36:5d:e2:5d:48:a7:1b:4f:a4:f3:72:94:67:ac:
2b:6d:80:97:f8:e0:2f:18:6c:29:75:ea:3c:84:d9:24:1b:23:
3e:36:ca:47:b7:8f:d4:9d:8e:61:a7:fd:51:d7:d6:6e:11:c2:
1a:8e:95:bf:b7:92:29:3e:1d:9d:2e:64:b1:81:8d:9a:69:fb:
80:ef:ec:55:ca:8f:9a:39:11:e2:d5:31:14:91:19:d5:f9:da:
5c:db:19:17:9a:25:41:97:e5:16:c9:d8:a4:99:3e:c6:c6:a7:
56:54:46:f8:b0:7c:a6:c1:a4:d1:8e:de:5f:94:de:92:d4:0a:
fd:26:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:47 2025 by rpki-client