Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft
File: BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft (raw, json)
Hash identifier: 5ozi0WhHsv3iUz3miUtnI+3uZsBmdeNKCh+317r8nRQ=
Subject key identifier: 92:80:20:D7:C0:4D:AB:35:29:93:1F:81:9E:35:FD:1D:FD:00:C6:58
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Certificate issuer: /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial: 018BEC2D5F0BBBA330FC9EC87C87D79D856D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft
Manifest number: 08EF
Signing time: Mon 20 Nov 2023 10:01:18 +0000
Manifest this update: Mon 20 Nov 2023 10:01:18 +0000
Manifest next update: Tue 21 Nov 2023 10:01:18 +0000
Files and hashes: 1: 4VOATe19UgrR0od34o1n8YHlL2w.roa (hash: QIZvg2t58p6EwDGlOnRN2SvfYhgaj/Fmn4DzkkTK2nA=)
2: BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl (hash: 0sLT900/ZSZS69kaaLL4j6nbrd6hQdB5ujMtuCPUboQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:2d:5f:0b:bb:a3:30:fc:9e:c8:7c:87:d7:9d:85:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
Validity
Not Before: Nov 20 10:01:18 2023 GMT
Not After : Nov 21 10:01:18 2023 GMT
Subject: CN=928020d7c04dab3529931f819e35fd1dfd00c658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2b:c0:a5:9e:1c:d0:c2:b2:46:df:40:a8:6f:
68:cd:00:e0:42:32:1d:58:89:56:71:3a:4e:fe:17:
75:4c:bf:5d:db:8f:ac:aa:01:37:dd:70:9b:1b:44:
48:04:33:69:c9:0e:63:29:d6:24:bc:f9:78:b2:ee:
a6:bf:82:4d:40:b4:c2:14:5d:59:8c:ff:72:4b:3a:
a0:66:2a:6e:09:88:91:e7:97:1c:20:99:a8:10:5a:
16:14:0b:03:43:78:3b:2a:94:02:2b:a7:44:67:a7:
1e:2c:d3:6b:4f:8a:f1:48:49:a7:1c:5e:64:a7:3b:
45:0b:1d:71:50:a2:4e:e1:a2:2c:fd:e9:ad:36:a5:
f0:ae:3d:57:af:fb:96:85:07:60:d9:5c:24:c9:5d:
7e:6e:ac:25:c3:be:aa:7b:c2:fd:0b:6f:ed:a3:73:
fd:a6:1a:89:9c:63:12:6b:70:87:0f:db:43:ef:51:
9c:7d:81:6d:13:1e:b0:27:dc:be:9c:95:20:23:2b:
c2:ee:14:d0:9d:48:d3:c6:18:8d:94:9f:78:f4:98:
88:78:9a:17:bf:64:0c:9c:55:62:e5:0c:ad:cc:6a:
52:9c:60:5d:3c:15:34:d6:5d:f6:2a:71:ba:6f:62:
02:07:2b:f2:bc:38:f0:df:e6:7e:c2:03:9c:14:0c:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:20:D7:C0:4D:AB:35:29:93:1F:81:9E:35:FD:1D:FD:00:C6:58
X509v3 Authority Key Identifier:
keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a8:95:98:fc:ef:7a:dd:53:3f:eb:e6:b4:47:22:8c:d4:d4:
2d:e0:38:65:81:0d:fb:a0:94:66:d4:00:8a:9d:11:4e:ba:cf:
c8:09:d5:04:93:1f:89:1e:e5:ad:50:bb:3d:e3:2b:6a:7e:3f:
53:19:5c:ec:f7:1e:8d:b9:8e:c6:6b:ad:37:bd:03:07:32:68:
5c:e2:ab:da:94:98:3e:37:07:a7:8a:87:1e:7f:56:ee:81:0a:
10:7a:80:d9:f4:e4:e0:41:7d:b3:44:f6:ca:90:75:d8:9f:fa:
c0:bc:04:94:28:16:59:16:68:6c:df:37:04:48:ba:9a:09:99:
ec:60:b2:2a:24:3d:54:16:31:b4:b1:3d:94:8a:38:fa:c1:85:
49:05:63:0a:b2:28:c4:8b:18:78:fc:97:39:22:34:5a:54:59:
c5:65:fd:d8:29:a3:47:8c:b9:6e:d4:c3:13:1a:08:e5:a0:ee:
e4:1a:67:00:13:84:49:9d:20:5f:b3:01:e5:6d:17:42:a4:28:
68:59:e2:2a:bd:a8:c2:01:81:f0:a5:0e:11:e8:f7:c7:cf:57:
71:f2:25:59:14:c4:0c:ae:17:24:8e:d8:02:42:29:4f:02:c0:
1a:f0:b8:ed:2a:e9:c5:70:a2:e9:f7:20:09:1d:74:65:30:49:
07:2c:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:04 2024 by rpki-client on console-ams.rpki-client.org