Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
File: BTNgxuPokttmsd9q1H94GOne64w.mft (raw, json)
Hash identifier: ac37NnfriAfeViej7ZzlRipdfIxvSGJTFriHqOYL7hc=
Subject key identifier: 71:E9:AB:E2:24:AA:A5:EF:B0:EA:F2:29:7C:F9:C8:D1:41:26:B5:0F
Authority key identifier: 05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
Certificate issuer: /CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Certificate serial: 0194B06E879375A8B51C6F137C45E9C690F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
Manifest number: 088F
Signing time: Wed 29 Jan 2025 05:00:21 +0000
Manifest this update: Wed 29 Jan 2025 05:00:21 +0000
Manifest next update: Thu 30 Jan 2025 05:00:21 +0000
Files and hashes: 1: 1-c1Nw9DVJu3cvIjUAmyvn40GI98.roa (hash: M1qOLnj7alq+U9DWhw4ho1Xpjt9dcoqxt/lGLcsPFtc=)
2: BTNgxuPokttmsd9q1H94GOne64w.crl (hash: ROm5E8EvY4w62NOPqdhP/weiPRHnC71N/eH+W6Z9CMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:6e:87:93:75:a8:b5:1c:6f:13:7c:45:e9:c6:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053360c6e3e892db66b1df6ad47f7818e9deeb8c
Validity
Not Before: Jan 29 05:00:21 2025 GMT
Not After : Jan 30 05:00:21 2025 GMT
Subject: CN=71e9abe224aaa5efb0eaf2297cf9c8d14126b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:08:0d:4c:3a:f3:40:94:5c:d4:03:06:2d:
14:bc:ce:87:16:e1:6e:3b:b1:3c:d7:08:12:7b:96:
5a:06:c8:40:18:92:75:55:08:55:e4:d5:34:d7:e7:
7c:c2:f0:30:b9:9d:57:bb:8a:89:86:79:26:d9:98:
d2:01:dc:ca:c6:26:13:47:79:bb:ca:9d:6e:82:d1:
52:a5:eb:67:d2:bb:1a:eb:4a:d6:66:fb:db:a4:ad:
09:b1:d4:58:ec:c0:bd:36:ad:5d:34:bd:0c:60:a7:
5f:9f:9f:0e:3b:ad:21:29:26:8a:4a:6f:3b:6d:98:
2a:8e:af:c0:dd:26:cb:f4:d9:eb:1c:ed:09:95:e5:
c9:b9:84:5c:3d:02:7e:10:23:7c:4f:fa:ba:20:cb:
3d:41:0e:d1:18:74:05:ec:bb:df:25:ff:76:82:95:
c3:e0:ef:cf:f1:3f:a2:08:44:ef:39:b3:e7:2e:6a:
2e:3e:55:21:9c:97:92:d9:3a:c5:50:a0:7a:c9:3b:
dc:43:3a:7d:f0:73:bd:b8:df:1a:98:55:1a:66:6f:
23:aa:23:4c:da:24:2a:c6:c9:40:24:3c:6e:1e:e2:
d3:e2:f6:e6:21:9a:b3:88:f2:66:15:06:51:c5:40:
a8:93:4e:10:b1:19:63:d1:88:2a:6b:ee:75:0b:67:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:AB:E2:24:AA:A5:EF:B0:EA:F2:29:7C:F9:C8:D1:41:26:B5:0F
X509v3 Authority Key Identifier:
keyid:05:33:60:C6:E3:E8:92:DB:66:B1:DF:6A:D4:7F:78:18:E9:DE:EB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTNgxuPokttmsd9q1H94GOne64w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/06dd83-07dc-40fb-923f-d91dce5db93a/1/BTNgxuPokttmsd9q1H94GOne64w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:53:ce:74:50:f6:d3:64:dc:d3:0a:1b:8f:eb:43:5e:b1:
f2:1f:ae:30:47:c9:a9:1c:6b:fe:ec:19:41:b7:c8:79:72:b7:
a4:67:d6:9f:5d:c1:16:4f:bc:44:55:f0:9c:16:5d:e7:6e:39:
32:52:b4:14:71:f8:ab:46:aa:54:40:59:87:b7:f3:a0:7c:5c:
1f:8f:5a:1f:7f:43:1d:13:c6:86:07:75:e0:18:6c:12:ea:8a:
48:e4:75:09:0d:a9:2f:c2:af:41:6f:d9:fb:d7:61:e1:05:d2:
df:cf:3a:ed:af:12:68:5d:9e:04:9c:c6:4c:28:49:4d:e6:0a:
83:82:56:12:15:5d:e3:99:f1:74:1e:d7:c1:ed:df:f1:76:92:
95:c7:1a:c2:d8:d6:1a:d4:9a:4b:a1:8f:e2:a7:68:9f:90:42:
6c:ba:b9:cf:4a:0a:65:0b:a5:22:b9:c3:cb:0b:c4:df:fe:ea:
4e:73:af:c4:ce:43:c4:a1:e9:d9:d8:e0:24:f2:36:a0:83:79:
7d:53:8e:dc:89:49:3a:56:c0:a0:56:84:e4:0c:83:94:7d:8a:
e0:f4:25:ad:09:64:c7:66:c6:a4:97:e7:e2:aa:aa:64:e6:f0:
5a:b9:62:80:db:2e:64:09:0f:a7:41:96:1f:78:f7:5e:64:08:
d4:e1:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:53:25 2025 by rpki-client