Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
File: BuSteIiwjKRTVje2CLt9whSmYk8.mft (raw, json)
Hash identifier: 4+APXKFZekx01IgNmDWfIdXAgBCSIdR72WgJ1TqqTOQ=
Subject key identifier: 3E:21:4B:D9:01:D1:7A:52:DA:72:4E:82:02:10:99:DE:C1:73:4E:B0
Authority key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Certificate issuer: /CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Certificate serial: 0195DFD939E58BCC7394123CC14EFF924A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
Manifest number: 0D5E
Signing time: Sat 29 Mar 2025 03:01:49 +0000
Manifest this update: Sat 29 Mar 2025 03:01:49 +0000
Manifest next update: Sun 30 Mar 2025 03:01:49 +0000
Files and hashes: 1: BuSteIiwjKRTVje2CLt9whSmYk8.crl (hash: /giggiPdTPobC235wEP+GxigzQtybmtGzEBfJaE/8rM=)
2: VeL5y4HMpx5YD59QdPaTm74Prfk.roa (hash: taJ8G/3jFfT5cHTT2DaciKHSFKOOu8+sE2xtCaVUK1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:39:e5:8b:cc:73:94:12:3c:c1:4e:ff:92:4a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Validity
Not Before: Mar 29 03:01:49 2025 GMT
Not After : Mar 30 03:01:49 2025 GMT
Subject: CN=3e214bd901d17a52da724e82021099dec1734eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:ff:a7:0f:18:b0:26:df:ce:b6:42:82:d1:
a3:f2:bd:40:28:c8:a7:f4:df:3e:31:09:a0:c9:de:
e0:fc:ab:e9:0f:4b:9f:2b:f1:db:56:3a:9f:51:d7:
41:ed:8e:09:bc:69:45:23:2c:3a:c8:5d:80:0a:47:
54:a8:0f:5d:c3:8f:e1:a2:58:5a:6f:79:0c:8a:ab:
a9:51:b6:87:64:95:a8:fe:2c:87:29:24:c8:2a:69:
b4:13:8a:16:f5:35:b8:45:51:56:fe:94:ea:48:ca:
95:79:f4:ad:b8:32:55:fd:49:cc:11:69:f5:81:d8:
8a:5e:12:69:79:41:4a:6f:26:67:37:22:31:5e:15:
81:47:dc:bf:ab:cc:a2:b6:b7:63:12:80:d9:a6:1b:
0a:22:1b:0e:0d:cc:7c:26:c6:89:85:c4:c1:41:9b:
ef:17:c5:a5:d5:f3:8a:63:68:9e:63:0f:b5:ac:e3:
90:c1:e0:48:b8:66:78:69:aa:7d:53:5b:c5:09:58:
10:ed:47:83:53:92:a0:51:21:e0:83:c9:23:ce:e6:
15:c7:6d:9d:57:24:f3:46:eb:68:86:7b:eb:0a:bb:
9c:1a:14:99:95:65:9a:bc:71:81:23:86:77:d3:e4:
23:92:2e:29:7f:6a:1e:90:c7:4e:a9:54:52:57:15:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:4B:D9:01:D1:7A:52:DA:72:4E:82:02:10:99:DE:C1:73:4E:B0
X509v3 Authority Key Identifier:
keyid:06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:32:13:2f:72:02:7e:7d:cd:6a:c4:9d:5c:9c:8a:6c:45:14:
d9:c5:c9:19:50:d7:96:13:61:fa:a0:b5:0d:4b:20:c1:d2:27:
51:ec:8d:ec:85:e1:ed:ef:0e:43:7a:1f:dc:81:72:30:eb:37:
00:d1:c2:e9:68:cc:9f:f3:a1:5f:71:9c:07:37:57:5f:7d:f5:
6e:2f:67:81:fe:7c:b8:1d:41:10:20:99:d2:8b:97:4d:02:cd:
d9:77:20:5c:98:4e:bd:14:e8:11:86:17:4b:25:6b:ca:30:22:
09:89:d9:a4:8d:54:83:8a:3c:0c:f1:fe:f7:0b:17:fd:89:9f:
f9:b9:82:a1:7b:5f:2f:8b:d9:80:ef:7e:79:cf:68:e6:16:35:
55:ec:13:a6:ff:a9:e1:4c:8f:3c:de:75:c5:39:31:45:fa:6d:
69:bc:76:4b:3d:d2:90:f9:71:58:b1:be:dd:ea:7c:2c:50:09:
a7:ec:57:ad:51:6e:f8:6c:3b:71:ca:f5:2b:4a:cc:a1:ed:1b:
33:49:af:37:58:28:78:34:e1:99:16:8e:6c:21:81:dc:24:ff:
df:b0:f1:c7:3f:64:5b:b1:1f:e5:3e:41:c8:ed:b3:f6:27:6b:
a4:f8:26:8a:87:b1:73:07:eb:5a:95:7a:be:22:6a:8e:3e:43:
d9:7d:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:18:11 2025 by rpki-client