Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
File: BNm8gopWawavTXZd-12lvB12xyU.mft (raw, json)
Hash identifier: 5Tvz4NC4XgPsRmzqQV153W4463MQi3NReUMkjdf9kVY=
Subject key identifier: 41:8F:07:DF:18:62:CA:5D:A8:09:FF:CF:07:C7:63:89:69:47:F2:6B
Authority key identifier: 04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
Certificate issuer: /CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Certificate serial: 019053D73396B89FA3E137D46D5C805EE086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
Manifest number: 11E9
Signing time: Wed 26 Jun 2024 09:18:50 +0000
Manifest this update: Wed 26 Jun 2024 09:18:50 +0000
Manifest next update: Thu 27 Jun 2024 09:18:50 +0000
Files and hashes: 1: BNm8gopWawavTXZd-12lvB12xyU.crl (hash: Q5tKm0YJ7s1Tz0RXOkbOhslYn9knQktML0VferLQv7U=)
2: Wpa4hmGqaI75gZiUQXOgoxJKZrQ.roa (hash: u7n3bJbHGTqr0/m/Ag4/bTGdmq3uszY3dE70PEf9ZhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:d7:33:96:b8:9f:a3:e1:37:d4:6d:5c:80:5e:e0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9bc828a566b06af4d765dfb5da5bc1d76c725
Validity
Not Before: Jun 26 09:18:50 2024 GMT
Not After : Jun 27 09:18:50 2024 GMT
Subject: CN=418f07df1862ca5da809ffcf07c763896947f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:44:b4:e1:a3:6d:27:88:90:2d:2b:2f:55:
ef:56:8d:17:7e:73:76:09:02:0f:f7:3e:dd:f0:26:
b4:86:9e:65:68:2a:98:1f:a8:b6:41:b7:f7:72:2d:
fb:92:de:d4:48:d6:c0:c8:0b:5f:83:fc:4a:4b:b8:
aa:12:b4:5e:35:39:24:f6:34:43:72:87:eb:d0:63:
e3:b8:57:30:a4:2d:02:b5:e9:48:0a:79:9e:a2:c1:
d1:23:80:85:f9:dd:bd:76:c8:2d:f3:f0:d6:40:13:
59:2b:0b:9b:a4:cd:11:61:ca:2c:77:b6:f6:5b:49:
ad:4d:da:bc:87:20:0c:e9:d1:a5:bb:00:be:1c:b3:
2c:50:99:4c:f7:a0:ef:cf:62:cf:97:5b:54:77:cd:
41:01:76:b3:56:4a:ea:e9:d6:d4:c3:c9:6c:c0:7a:
6c:3b:18:56:7b:6a:9f:e7:ea:11:95:81:bb:a1:4c:
40:b7:f1:a7:eb:47:97:e6:06:f0:36:01:3a:03:12:
3c:83:18:14:95:3c:94:62:37:af:e3:bf:ad:88:29:
8b:d8:80:9e:29:e7:8d:d3:73:f1:66:e4:5f:0d:c3:
4f:39:78:7f:aa:68:60:7e:c0:be:93:f0:27:48:e6:
85:55:e0:67:75:47:32:7b:1d:5d:81:d6:31:74:53:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:07:DF:18:62:CA:5D:A8:09:FF:CF:07:C7:63:89:69:47:F2:6B
X509v3 Authority Key Identifier:
keyid:04:D9:BC:82:8A:56:6B:06:AF:4D:76:5D:FB:5D:A5:BC:1D:76:C7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNm8gopWawavTXZd-12lvB12xyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/72435b-7e7e-447b-ac24-982c429d4156/1/BNm8gopWawavTXZd-12lvB12xyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:26:8b:f2:4d:30:5a:d6:c8:51:a6:4d:3c:e6:c2:03:51:
97:ad:42:90:b1:b6:be:81:a1:01:15:f3:94:37:a7:a1:c1:dc:
5d:b8:d7:6b:f0:3c:98:e5:f9:80:da:a2:c1:cf:e5:6d:c4:e1:
d9:aa:db:ac:97:fc:06:26:61:43:af:4c:f6:98:30:45:8f:fa:
78:cd:d9:21:1c:9a:a0:58:80:19:3c:6f:1b:d3:55:5b:6e:66:
c1:a0:d8:3d:c7:e2:36:28:12:e0:d0:7d:74:a4:12:2c:ab:b4:
ae:1d:80:9a:79:8e:5e:81:68:c3:84:22:36:96:09:17:6c:94:
d4:54:d5:d0:f9:e7:05:58:22:d7:d8:1c:8c:f5:6f:3b:40:b3:
4f:71:5f:e4:e1:96:30:8a:ba:a3:eb:cc:dc:11:c7:ee:9e:49:
aa:e5:67:f7:1a:8d:a7:93:ff:78:4b:12:69:3c:0c:e6:61:7a:
f4:8f:58:4b:6a:7e:af:de:d8:b6:e8:dc:7a:4a:d0:0d:65:fb:
33:d9:42:0e:55:90:84:ed:94:4b:8a:49:5b:62:e2:41:ea:77:
98:52:10:34:6e:6a:94:4b:7d:38:81:d1:6d:e7:10:8c:8d:47:
70:83:a0:b8:82:3a:a6:42:b6:b9:cb:d5:ac:a8:bd:04:a0:1e:
ca:89:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:07 2025 by rpki-client