Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: iCoETa3KB6g+hMQUHqocshykAJah+OFyv06cUsTixT4=
Subject key identifier: 85:58:2C:8C:11:92:A5:42:28:F3:04:D7:90:25:8F:61:EF:C9:F5:DA
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0195DFD9042B22B075C29320CC741C4995A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 1401
Signing time: Sat 29 Mar 2025 03:01:36 +0000
Manifest this update: Sat 29 Mar 2025 03:01:36 +0000
Manifest next update: Sun 30 Mar 2025 03:01:36 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: aBe41Fu4EYPR1wVjiYboRWT0eEasFsK/0DVeznby32A=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:04:2b:22:b0:75:c2:93:20:cc:74:1c:49:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Mar 29 03:01:36 2025 GMT
Not After : Mar 30 03:01:36 2025 GMT
Subject: CN=85582c8c1192a54228f304d790258f61efc9f5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:f4:9f:99:fc:10:37:28:57:be:d3:86:d0:
0d:46:46:99:4d:9a:56:23:c7:c9:1d:6c:25:c7:25:
6d:27:92:53:d4:f9:65:5d:16:07:0f:fc:64:bd:6a:
ab:ba:ac:40:f8:e4:af:d7:f4:06:f9:8f:31:83:2d:
3a:f2:cb:76:ef:31:97:52:f4:76:63:52:57:bf:da:
90:f8:a9:b5:53:65:43:55:87:e1:41:2d:c5:58:09:
32:fa:f0:0c:72:88:d3:95:54:46:c3:08:9b:92:93:
4b:74:5a:81:09:bd:8d:be:e8:7c:b0:61:f3:bf:69:
4e:0d:9f:25:e4:7d:1d:fd:12:0f:fd:cb:e7:1c:c6:
0c:96:21:0a:32:9a:e7:66:85:be:82:05:0f:be:60:
4b:d0:44:b8:47:06:fd:b3:95:1f:d0:5b:86:f5:9a:
08:42:0d:70:06:ab:c2:ef:38:6c:8e:7f:48:78:a8:
8a:f6:d4:b4:f0:07:26:47:bd:b1:e6:06:51:b4:2f:
5b:d0:96:f2:5c:6f:4c:cc:7f:ab:f1:77:7d:94:75:
7c:f3:d3:2f:1b:4f:23:c1:a2:13:81:8d:b1:ee:d3:
69:24:23:5d:93:a9:f9:61:71:0b:a2:df:52:58:49:
2f:14:91:43:39:d5:0f:7a:3f:97:1e:16:8b:0c:f8:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:2C:8C:11:92:A5:42:28:F3:04:D7:90:25:8F:61:EF:C9:F5:DA
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a3:d0:3c:f7:69:6a:91:4f:71:6f:1c:e0:c5:48:1b:d8:f7:
bf:04:6e:45:fd:f3:1c:e8:9c:4a:de:4a:95:29:84:d0:b7:13:
9b:b8:8a:cd:1e:60:5c:17:20:e2:92:7d:16:29:cc:3b:d6:54:
4f:ad:b4:56:2a:52:bc:4a:d2:52:ce:dd:2a:b6:98:20:3d:33:
a6:30:71:36:ac:c9:cf:e5:b5:fd:b0:9e:97:72:c8:ec:74:56:
e5:0d:3c:cd:39:c2:82:17:6e:6f:e5:fb:97:c5:0c:0d:d2:62:
65:df:1d:7a:6f:ff:e9:ef:8d:a5:89:f5:a6:c2:32:66:1a:54:
78:b3:13:95:4c:65:96:32:00:cd:80:aa:01:7b:22:6c:dd:7f:
70:05:90:d9:92:83:9c:34:dd:14:4a:2f:da:cc:db:51:59:9a:
c7:e7:c9:0e:9d:1a:79:71:02:b8:44:76:be:ff:9d:f2:2d:e3:
d5:2a:7f:f0:5c:52:5d:5e:38:eb:2a:32:55:00:0b:6e:62:49:
6f:72:9f:ba:3f:a4:88:16:57:0a:53:be:78:3d:0f:b7:6f:27:
3e:fd:ab:a4:be:3e:d1:82:14:64:7f:d3:c1:c3:4e:4e:b8:83:
da:a4:bc:6f:0f:e3:ec:15:f7:88:34:87:d3:f8:1a:61:27:c6:
80:42:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:55 2025 by rpki-client