Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File: BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier: KCVegJeUaRDnPbKANzeJYX2vVaqUuRmayRbJ4kKSOZY=
Subject key identifier: 17:88:F8:66:28:C2:2D:A7:B1:50:A8:A5:C7:47:7E:3F:D7:02:38:3D
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer: /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial: 0195E15941C28D3E6705548C99B6805CA198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 10:01:17 +0000
Manifest this update: Sat 29 Mar 2025 10:01:17 +0000
Manifest next update: Sun 30 Mar 2025 10:01:17 +0000
Files and hashes: 1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: OWZJyB2GwcBwTYuYXK719g0fI70YLn4YEU7La9BetU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:41:c2:8d:3e:67:05:54:8c:99:b6:80:5c:a1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
Validity
Not Before: Mar 29 10:01:17 2025 GMT
Not After : Mar 30 10:01:17 2025 GMT
Subject: CN=1788f86628c22da7b150a8a5c7477e3fd702383d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:c7:1a:aa:94:83:26:dd:3b:75:b6:17:89:
d8:50:2b:05:f8:37:01:da:57:45:76:78:2b:9d:1d:
a4:4e:20:41:d9:38:32:4b:a8:d9:84:2f:95:d7:4c:
1e:09:36:be:a4:56:42:3a:a3:0a:86:66:f1:e3:b3:
01:57:3f:d2:f9:22:58:42:ef:aa:6b:a8:6f:e3:5d:
38:f5:30:15:04:38:e6:4c:b1:df:35:30:d3:5b:60:
c8:00:a7:05:73:9e:2e:d3:3c:24:f5:c8:a3:a8:ce:
b2:a0:cb:a2:70:9c:c9:11:7a:d8:8f:7f:03:c6:ed:
d8:71:7d:7e:09:46:4f:80:df:9b:13:3c:b0:72:5d:
38:92:87:ad:75:44:3d:88:fc:ab:16:08:c3:bb:eb:
bb:45:08:8a:03:da:76:55:6f:87:ea:ea:11:1b:29:
6e:22:f8:8d:b8:6e:a5:09:3b:66:4f:5b:10:18:1d:
9d:9e:9e:56:8e:ab:f1:e0:45:d4:cc:33:37:ad:94:
76:87:ff:ac:4c:16:90:d5:ae:63:8f:be:24:50:2b:
24:6b:40:7a:aa:7c:b0:95:9e:29:b7:7a:ab:6f:55:
b8:24:e2:2e:f1:bb:87:f2:df:16:69:cb:9b:71:4a:
b0:af:68:a7:cf:6d:0e:16:31:62:ab:6f:99:7c:7f:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:88:F8:66:28:C2:2D:A7:B1:50:A8:A5:C7:47:7E:3F:D7:02:38:3D
X509v3 Authority Key Identifier:
keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:99:ce:4b:2b:28:b2:3e:c1:57:b7:fa:9c:40:74:ae:db:9f:
ae:61:86:9b:f9:44:5d:32:f2:96:d0:d4:89:5e:0f:70:67:03:
55:a8:6e:90:a8:6c:06:30:47:7e:6c:f6:56:7e:e6:76:f1:f2:
a0:69:c6:32:4f:b0:07:e5:5b:b7:db:e4:1b:5f:76:e2:23:64:
5f:2c:84:f5:bc:e9:8f:e4:34:6d:1a:d0:0c:13:37:b5:5b:23:
ea:07:4e:ce:a0:aa:83:1f:55:b0:d6:f5:d1:45:c4:74:3b:3f:
75:28:17:be:95:ea:5a:1a:2f:18:2b:50:c3:84:13:76:89:56:
ea:80:ed:6f:b7:9b:a6:15:57:e4:80:8b:b5:e2:45:aa:88:60:
8b:36:25:c8:7e:92:3c:0e:d6:1b:b1:73:c9:76:93:0b:c6:fe:
75:aa:e1:63:18:5a:6a:bf:a1:6a:c6:ea:38:b9:14:19:f2:6d:
32:ab:24:26:f6:72:00:80:12:b1:96:bf:f3:08:7e:84:14:74:
18:04:4f:c2:7e:a9:0a:cf:d1:bd:f7:70:8c:cc:4d:c0:c1:0f:
f6:83:3e:ec:e9:d0:76:0c:b3:b8:59:df:a9:14:59:b9:73:54:
8e:ba:5d:fd:e4:c2:11:38:67:36:8f:b8:24:1b:8f:67:23:9b:
d5:90:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:39:49 2025 by rpki-client