Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: Ex6dJbj9EmsPHn1fKXPbiT3R54uCX4oQ9gsrmLkFluk=
Subject key identifier: 51:89:44:85:AD:E1:F9:84:EF:48:56:99:D1:CC:A9:BE:30:D2:1A:9E
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 0194BC04BB8B3BB2D3AC20769276C49EB266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: Zz8EqWOt3ZFQAIWqhDDIKA5yjjIozkMeraVFqcVLwBI=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:8b:3b:b2:d3:ac:20:76:92:76:c4:9e:b2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=51894485ade1f984ef485699d1cca9be30d21a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:e3:2b:dd:1a:68:87:e2:d0:57:d1:97:28:
5e:38:a4:e3:6b:83:6c:b9:51:c5:1c:d4:87:17:a8:
92:92:67:cc:59:be:ef:63:fd:0f:7f:ce:f0:b4:db:
69:14:b1:8c:c7:f2:4a:c8:e4:86:4e:6b:73:f2:6e:
79:f1:ee:77:4b:0c:a6:4f:86:06:a2:ae:b0:0e:0a:
b3:d0:fb:44:25:22:ce:64:bb:cb:84:2f:c4:c8:43:
e1:22:12:b3:17:6a:72:68:73:59:a1:02:e5:2e:d0:
f2:cf:d4:96:be:ed:e9:a8:a9:af:d3:bb:0d:4b:42:
ff:e9:e9:75:85:04:3f:04:9e:17:7c:48:ea:6c:e4:
02:7f:b8:ac:42:65:aa:d3:af:0c:14:17:c3:60:13:
7e:a7:3b:cd:03:e0:4e:44:7c:92:2f:da:d8:76:f6:
64:cb:a7:0f:22:97:0c:66:7e:7e:86:9e:4d:6d:59:
4b:6d:40:69:d8:74:3c:cd:20:98:0c:50:09:8c:ed:
c6:ae:bb:1b:4e:75:f7:8e:2d:e1:67:dc:5a:ef:35:
83:bf:14:ff:c2:ca:03:70:75:ab:fc:e7:6f:b1:ac:
ae:cb:ad:38:d7:0f:87:fe:4b:43:be:eb:39:e1:bc:
20:01:71:3b:b7:d5:c5:75:75:65:2a:06:44:43:23:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:44:85:AD:E1:F9:84:EF:48:56:99:D1:CC:A9:BE:30:D2:1A:9E
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:16:3a:e4:b7:fa:12:c5:81:2a:4e:7b:62:4d:d6:80:dd:a2:
df:c1:16:16:b3:93:0f:fe:0f:4f:2a:58:60:ef:55:e5:d7:dd:
ad:bd:05:82:79:db:a3:70:d3:c5:b3:fe:75:81:e4:c9:73:0f:
6f:af:f7:04:0b:b3:fe:2f:0a:96:29:5f:c7:69:64:52:d7:65:
35:4a:cb:ec:a0:2d:98:28:76:e7:ff:45:d5:83:b4:99:a0:68:
dc:ef:46:f2:8d:a9:20:64:d4:6b:1d:d5:eb:ce:1c:94:f5:bd:
64:82:ab:ea:03:f7:cc:c3:60:8a:76:99:b0:fa:ec:2d:25:da:
ba:fe:f7:ac:66:dd:50:65:5f:98:a4:8e:b0:88:2d:ea:30:73:
ec:f0:23:e1:9a:12:be:a1:62:09:68:43:82:1a:d3:60:6a:de:
01:e2:91:d2:60:6a:02:90:26:5c:dd:85:30:b6:7e:09:a2:d6:
b8:50:af:e8:2a:84:34:bc:cb:a2:4f:5e:61:ec:22:21:4a:1e:
77:17:f2:0d:b2:bb:16:49:34:b9:66:51:37:35:4f:45:9a:f1:
bb:df:86:28:14:9e:6c:3d:c2:a6:2d:90:1b:fd:3c:8d:a5:36:
85:8e:c1:cb:46:bb:52:ab:3e:41:8c:32:8b:0b:91:ef:0a:55:
e7:e2:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client