Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json)
Hash identifier: WIuY7ivGO3959GO057JAUvx6S+UVY8B0fPJQTPEin6I=
Subject key identifier: 2E:A3:44:48:FA:B9:79:CC:5E:09:CB:AD:76:CA:26:7D:16:35:80:39
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 01962DF3CE21806178C25E959FC6879C5712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
Manifest number: 0F20
Signing time: Sun 13 Apr 2025 07:01:14 +0000
Manifest this update: Sun 13 Apr 2025 07:01:14 +0000
Manifest next update: Mon 14 Apr 2025 07:01:14 +0000
Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: XPSqq8OpOYhW1p2aNikBxELTIv4MS2RMfoS2L4Ufn/A=)
2: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (hash: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f3:ce:21:80:61:78:c2:5e:95:9f:c6:87:9c:57:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Apr 13 07:01:14 2025 GMT
Not After : Apr 14 07:01:14 2025 GMT
Subject: CN=2ea34448fab979cc5e09cbad76ca267d16358039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:0b:f6:f0:c4:6f:48:0f:fd:b0:76:49:c3:
7d:7d:c2:62:72:00:f5:ee:4a:3f:cd:92:9f:a5:28:
7e:90:da:a0:38:cd:6f:d3:d2:be:f7:07:aa:68:8c:
f7:bb:93:94:f0:80:18:65:82:f2:75:af:56:99:6c:
8e:8c:24:fa:00:3b:a0:b4:cc:5f:76:d5:46:12:98:
09:ac:b6:2d:21:a5:87:8c:8c:eb:b7:d5:0c:b5:53:
2f:5a:38:31:5a:08:b2:24:11:7d:a1:85:5f:bd:cc:
b4:b4:a3:0f:31:67:e3:11:39:87:0e:fe:ef:26:4d:
b3:f5:bc:c2:ec:1e:8b:70:2d:4f:94:8f:ff:3a:cf:
62:49:08:fc:71:ce:58:d8:a0:7b:9e:e2:60:46:4a:
1b:4d:82:1a:8d:93:9a:c7:9e:55:51:76:31:c1:3d:
59:52:1c:7f:fd:85:22:b7:0c:14:ad:fa:0c:e7:0c:
8a:96:99:82:20:0a:bb:9d:fe:15:d7:23:2b:80:a0:
a0:7b:df:bc:76:6b:1f:04:d6:ac:0c:3d:8a:4d:56:
42:79:99:11:ff:9e:ab:6e:74:71:2f:b8:a2:8b:ba:
fc:20:ba:d2:73:99:51:1d:da:9f:28:28:0d:7f:34:
c5:b7:9f:b1:14:f7:49:7c:f3:1e:8a:0c:84:63:68:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A3:44:48:FA:B9:79:CC:5E:09:CB:AD:76:CA:26:7D:16:35:80:39
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7b:9c:73:4e:e4:c6:0a:ea:82:84:6d:41:ba:5e:12:e5:89:
78:0a:bf:5e:59:4d:b2:33:28:18:bc:e8:64:e0:74:6a:a0:0d:
7a:48:3d:f9:4f:81:f4:b1:75:b4:f4:27:1e:8e:9a:f1:cf:23:
a5:0b:2d:b5:db:44:1b:b6:c5:29:c7:1f:72:6f:23:16:c4:cc:
48:05:ad:c8:5a:1f:3f:40:03:9a:3a:1c:be:2f:38:02:5c:55:
a5:1f:72:71:96:cd:25:52:e9:f5:9d:76:0a:71:4a:cf:9b:e3:
e1:99:e2:53:14:a6:3e:28:96:39:d6:a8:29:2a:ab:6f:09:7b:
a8:54:97:98:d2:b0:17:0b:bc:8e:d3:57:da:36:14:0d:7c:28:
51:27:42:87:e8:e9:6b:4e:3b:c4:ec:4b:40:b1:6f:ec:ed:b9:
cc:10:88:5d:f6:4e:ed:ed:2c:a2:4a:9a:18:f6:85:e7:9d:1b:
19:0f:81:13:ac:aa:35:e7:13:f5:d9:5f:1a:b1:d8:4a:ac:c2:
f4:17:06:ad:60:a7:35:e6:cc:70:39:80:75:05:5d:0d:60:20:
11:ca:a8:df:d4:27:2a:d0:32:3b:e2:cf:bd:c7:34:05:18:ee:
36:4e:7e:42:d4:d8:4a:d5:f2:05:bb:28:c1:43:83:32:9b:bb:
7b:43:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net