Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json)
Hash identifier: /A0/JYubwcUzOi+lnuojXzJJpzSO0trY4OMMlr2VV8I=
Subject key identifier: 2C:4B:5B:8F:91:5B:29:42:4D:BB:FE:B8:0E:3E:51:C7:5B:61:77:0E
Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Certificate serial: 01962E61F9A3B89673876B9654725F9EC4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 09:01:34 +0000
Manifest this update: Sun 13 Apr 2025 09:01:34 +0000
Manifest next update: Mon 14 Apr 2025 09:01:34 +0000
Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: R3YJ/fKDvAn0OwtXu5X/isGyuN0XEQ45jDTmhSzSO78=)
2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:f9:a3:b8:96:73:87:6b:96:54:72:5f:9e:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e
Validity
Not Before: Apr 13 09:01:34 2025 GMT
Not After : Apr 14 09:01:34 2025 GMT
Subject: CN=2c4b5b8f915b29424dbbfeb80e3e51c75b61770e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:c3:8b:1d:c5:12:8a:a5:17:a5:ff:ce:aa:
7c:52:2f:16:25:9c:d3:d5:dd:59:16:89:8d:0c:3f:
e2:33:a6:e8:ec:af:63:17:e3:ef:4f:96:2f:a3:63:
91:47:b9:ca:f4:e7:d3:da:f3:bf:80:24:6a:ff:f8:
ce:b1:23:5d:fb:67:5e:03:7f:2a:78:d8:5e:b6:48:
82:ff:a9:8d:4f:05:3c:20:e4:83:e4:7d:a4:9d:5f:
6d:50:ad:80:67:d4:fa:7b:8f:5a:d8:d6:7c:51:f8:
04:6f:3d:90:65:0e:d7:d6:20:51:6d:aa:28:4e:1f:
75:77:5b:a4:61:7f:e1:a4:c4:49:17:9b:01:e8:31:
b4:ec:40:0b:13:88:7f:bb:ce:d0:22:f5:97:58:f5:
83:fd:70:4e:43:f7:d1:84:9d:6d:46:33:27:65:52:
46:d2:62:72:03:fd:c6:d3:39:23:94:7f:e0:17:5a:
59:c0:6d:0f:9a:10:5a:72:38:55:8e:93:af:28:a5:
2c:65:ed:2d:d8:49:13:d7:0d:53:5f:1e:32:55:8f:
82:58:c4:41:ce:12:9a:4a:cc:b3:20:e0:c1:59:8b:
7d:76:26:39:54:fa:c2:79:35:a7:d8:e4:b8:43:56:
b1:77:3e:f7:a2:1b:b6:17:93:9b:1b:3f:9e:a5:db:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4B:5B:8F:91:5B:29:42:4D:BB:FE:B8:0E:3E:51:C7:5B:61:77:0E
X509v3 Authority Key Identifier:
keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b4:0a:bb:d8:11:3d:bc:25:af:d6:9e:69:3e:5e:33:ab:26:
fd:4b:09:23:00:db:fe:b1:21:71:63:2c:bd:09:2e:1f:a6:21:
68:36:8e:cf:8b:b5:1d:9e:40:c0:ee:16:89:d1:a8:83:6e:c2:
92:76:aa:85:53:50:39:fa:8e:eb:58:da:d9:60:5a:29:ca:92:
2f:80:56:7d:47:3e:11:1e:6f:a6:02:9b:d1:be:9b:db:5e:7e:
73:89:22:e3:04:89:38:e8:5b:b8:92:b5:0c:7c:62:bc:e6:56:
21:66:c6:51:f1:e9:63:77:cd:01:e8:af:ee:54:80:df:04:71:
1c:24:9b:7e:e1:a7:c1:76:6d:a0:f4:81:3c:90:3d:3c:2f:9d:
f7:b3:31:6e:81:6b:ef:9a:63:7b:31:2f:2d:fd:c4:52:b1:cd:
36:61:57:2a:74:5c:2b:42:bb:6d:4d:90:b3:39:ed:1e:96:20:
ab:44:07:fd:83:4f:54:df:86:e3:8e:cd:7b:f1:31:b6:94:99:
33:f4:a7:c1:98:5f:03:37:ce:60:c0:36:42:e1:d8:c4:0b:74:
4a:9d:c4:79:14:5b:a4:cc:e1:09:66:28:a5:9e:89:4e:55:c3:
b9:5f:a4:0d:32:00:f7:00:17:69:d8:08:ea:e4:18:a9:87:07:
29:a1:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:31 2025 by rpki-client on console.sobornost.net