Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: PoXPtZpu/VJC8OIat7vyStGn7wPdUaFUF0L3Cs9ts9I=
Subject key identifier: 2E:95:56:90:6F:0E:37:4C:99:B6:7F:1D:F2:3E:97:A6:66:43:6A:D3
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 0194BD17F7505E4394CE2B5976EE942FACB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: veYH/9+NW8sqpbf+hACpWc206zFd3VhGwIQEcDN0MfI=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f7:50:5e:43:94:ce:2b:59:76:ee:94:2f:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=2e9556906f0e374c99b67f1df23e97a666436ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:c9:f6:52:29:27:ea:7b:05:6c:09:d0:27:
64:c1:43:2d:fe:d3:6f:7b:6e:95:42:0e:01:6c:af:
6d:d9:99:20:6f:d1:68:ed:6f:48:41:53:a6:a6:dd:
8e:20:a9:b9:a8:2e:8e:38:22:ee:da:5d:1b:ee:d7:
2e:70:c6:80:f0:14:41:67:25:06:50:97:4a:13:32:
2c:21:26:60:37:0b:60:38:de:7f:44:44:7c:20:4f:
bf:5e:8f:d3:c0:d2:7f:e1:10:a0:cb:13:53:99:69:
1c:51:26:d4:84:71:6b:e9:a8:64:61:ad:af:69:3a:
55:70:df:36:2c:d7:44:10:55:80:84:8e:77:fb:cd:
1c:cb:b4:8b:ab:27:08:8d:f0:86:90:9a:5a:72:f9:
0b:92:7e:e1:d3:12:6c:be:82:fd:50:59:00:cc:57:
54:c7:8e:b9:33:68:8e:a9:73:38:31:9f:cf:b6:f2:
ab:11:62:57:a0:c2:33:a4:c1:48:88:9d:85:82:b7:
80:64:4a:a9:14:24:41:6c:92:1e:b7:5a:84:96:3f:
b9:77:40:6d:bd:4e:ff:f6:93:45:7a:c8:e4:42:36:
66:fd:62:f6:28:ae:fd:31:0c:f0:ae:34:3e:87:66:
5d:a4:8b:32:b4:1a:0c:fa:85:1a:aa:54:61:1f:70:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:56:90:6F:0E:37:4C:99:B6:7F:1D:F2:3E:97:A6:66:43:6A:D3
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:86:9d:2d:f4:aa:24:04:50:62:3b:85:22:07:ec:23:bf:5d:
fc:91:1b:02:9c:aa:34:fd:2e:b0:c5:14:2d:81:b1:a6:ab:0f:
de:ac:89:c1:a3:da:cd:a2:0c:a2:fd:de:d2:60:5b:bb:0e:29:
09:be:b7:05:1e:52:f8:e3:8a:67:ae:dc:bd:af:dc:1c:f9:40:
69:fd:aa:df:f0:8a:6c:bb:02:8c:b7:61:5b:bb:f1:fe:a0:3b:
d1:a2:1c:22:30:ed:c6:d3:fe:e8:b6:0f:e0:86:c0:69:cc:0f:
4e:ef:cb:44:99:18:80:45:04:4c:31:e1:f9:bd:ec:4d:40:10:
fc:aa:93:2c:a2:52:ef:bc:11:f8:35:49:69:ac:fe:5f:37:9f:
d8:b0:5c:d1:4c:b0:eb:d5:4d:b0:9e:00:36:40:f1:19:9e:05:
88:3a:33:0b:f2:b3:fa:a3:7f:ab:8f:ef:91:dd:a3:0d:08:90:
6d:2c:71:79:33:3a:f4:01:7a:6a:9d:38:37:f5:17:8d:b2:4b:
47:b5:9b:bb:26:3c:1a:92:2f:a6:c7:0d:53:37:1f:97:f1:d9:
3a:bc:e3:53:2e:df:3f:b5:3a:c4:40:58:54:fd:ad:2f:fa:f8:
72:f3:8e:aa:5d:19:64:61:db:8e:97:6d:71:83:46:77:a7:42:
c8:30:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:05 2025 by rpki-client