
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
File: Bd45LPnOlCom18dqJcoPXuLVy-M.mft (raw, json)
Hash identifier: G1TNELnddKaaO/diw1DVyEcYOO0IwV3fvpG8o+IpyTg=
Subject key identifier: CE:B8:D0:9E:1D:7E:AB:43:4C:47:62:EC:0B:93:FF:5C:50:34:EA:8C
Authority key identifier: 05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3
Certificate issuer: /CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
Certificate serial: 01948C98DD9687A8D59096432B713A8F5C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
Manifest number: 0393
Signing time: Wed 22 Jan 2025 06:00:15 +0000
Manifest this update: Wed 22 Jan 2025 06:00:15 +0000
Manifest next update: Thu 23 Jan 2025 06:00:15 +0000
Files and hashes: 1: Bd45LPnOlCom18dqJcoPXuLVy-M.crl (hash: 9IV+kJzRh0GS0ABvsPpfl5da6uG4x7Hzn1VnkrI2wfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8c:98:dd:96:87:a8:d5:90:96:43:2b:71:3a:8f:5c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
Validity
Not Before: Jan 22 06:00:15 2025 GMT
Not After : Jan 23 06:00:15 2025 GMT
Subject: CN=ceb8d09e1d7eab434c4762ec0b93ff5c5034ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:18:03:ad:4f:c1:ce:21:5a:a6:e0:a6:90:
66:e0:3b:c7:5e:24:da:1e:02:84:84:0f:31:8d:09:
ef:33:12:2a:32:c1:cf:18:43:19:bc:1c:4a:81:cf:
22:33:06:da:d2:07:ed:71:6c:e8:b8:dd:8b:cc:c5:
e2:08:21:5d:e8:b2:38:b7:49:76:fe:43:98:e2:0e:
43:44:6e:3a:8a:d7:c4:49:36:12:28:0d:0b:1b:19:
43:09:8d:3b:1c:5c:46:c7:75:fd:24:0e:f9:ee:ec:
e4:ae:0b:b8:88:f9:0e:6d:26:53:df:7b:dc:00:72:
57:a9:00:0f:18:eb:a0:1f:92:e6:37:8f:f5:52:0f:
3c:7d:e0:7f:6b:bb:53:45:5b:45:35:60:b0:50:af:
d6:37:9e:25:8a:74:15:69:b3:82:f1:b0:88:27:76:
be:91:36:5e:9a:6c:51:0e:1e:b9:13:82:2d:63:1b:
47:fc:c0:7b:24:01:02:66:e1:c1:79:de:97:fc:33:
7d:f9:b8:2f:0c:19:13:2f:03:a8:82:ce:24:e0:e3:
60:a4:e9:6a:8e:3e:fc:57:57:a6:63:f6:47:aa:32:
6a:e9:fc:bc:73:1d:71:2d:a5:02:71:16:a4:8e:80:
3e:da:55:2c:93:02:41:f7:72:23:42:34:60:c5:8a:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:D0:9E:1D:7E:AB:43:4C:47:62:EC:0B:93:FF:5C:50:34:EA:8C
X509v3 Authority Key Identifier:
keyid:05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:eb:19:b1:eb:d8:2d:bb:90:5d:e1:83:06:a6:57:b1:ec:03:
4d:52:84:26:51:35:70:5b:37:8a:0b:a7:67:95:10:e6:23:41:
31:b2:b4:09:48:0f:f4:72:96:b3:49:8e:05:a9:35:b4:5e:cf:
19:da:40:11:b8:20:47:e7:a8:0c:41:90:8a:31:5e:f4:74:63:
cd:09:53:45:c0:74:ec:16:d1:3a:2a:0a:57:27:f6:47:bc:46:
27:cc:ab:e9:a4:3d:08:8e:8d:f0:1f:2e:fc:d6:67:0c:35:f1:
68:dc:99:ce:09:e7:0d:e4:fe:0f:24:b9:25:ec:29:3b:b1:7b:
16:b2:31:7a:e2:60:8f:c4:5d:45:e6:f3:08:68:b2:15:f1:23:
45:d4:15:4b:97:5e:4e:f5:32:07:46:48:9a:d0:60:2c:d1:f1:
c5:bf:7b:74:e5:2a:e7:61:26:5b:5a:ec:cc:9c:3f:46:cd:a9:
8f:05:2b:1d:59:a9:c5:94:ca:29:2a:72:44:ec:78:ea:33:ef:
ef:29:3c:60:6a:c2:6f:1c:3c:31:d9:e4:54:a3:47:0e:89:2a:
63:c0:ce:31:b9:c4:f7:31:9b:79:42:fd:4c:5d:46:55:42:31:
e2:de:12:1a:64:25:c3:60:e8:eb:b9:07:aa:0e:78:ce:b3:3d:
cc:f7:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:34:04 2025 by rpki-client