Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
File: BkipkYBfk9JLvh7bPpYfWh0lskg.mft (raw, json)
Hash identifier: xp7LjjtJrDuNF9vatVXnF5ayuYGuqRhTQHPi0mmVL74=
Subject key identifier: F8:9D:AB:88:16:EC:CC:B2:2C:FC:27:49:F0:D7:11:33:6E:93:92:B2
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 019405D7EDFD739EA76325E8E5BFDD817151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
Manifest number: 0B51
Signing time: Fri 27 Dec 2024 02:00:24 +0000
Manifest this update: Fri 27 Dec 2024 02:00:24 +0000
Manifest next update: Sat 28 Dec 2024 02:00:24 +0000
Files and hashes: 1: BkipkYBfk9JLvh7bPpYfWh0lskg.crl (hash: Rewn3ypzB5diK5jS7AAwquNabFvp/pF4WXWCPEJ9N8M=)
2: JhwUgwtLWVO3UZzw6YxK9nTi424.roa (hash: E5hFc5oOSZPPENxpS1R+8/xdR9fMmigzOzlolhNZEu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d7:ed:fd:73:9e:a7:63:25:e8:e5:bf:dd:81:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Dec 27 02:00:24 2024 GMT
Not After : Dec 28 02:00:24 2024 GMT
Subject: CN=f89dab8816ecccb22cfc2749f0d711336e9392b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:1d:ff:e7:55:4e:53:0e:6f:69:d1:9f:20:
f8:be:19:01:b1:a8:6d:c6:e5:fd:cb:cb:7c:92:27:
4e:22:d3:41:3f:b8:9e:26:42:bb:81:cb:f0:67:63:
52:3e:b8:5f:83:98:16:64:26:c9:20:01:40:b3:81:
b9:d4:03:33:34:e8:43:0c:bc:25:7f:bf:0d:cf:99:
b0:4f:74:bb:aa:7f:83:ee:89:e0:ca:fe:e3:33:0e:
45:1a:38:ca:70:a3:d6:55:37:5b:15:dc:bd:00:60:
28:f0:48:d0:85:c2:59:27:33:80:16:8a:70:fa:b8:
18:50:d6:45:b7:4c:62:e1:b4:19:3c:77:e0:c0:8d:
5e:e1:bf:f2:ba:45:6d:8e:89:b7:d8:b5:42:8a:d4:
33:53:1a:7d:03:e4:9c:a3:35:33:59:36:a6:c9:47:
93:b9:a4:3e:86:60:54:f4:f0:1b:4b:f9:ba:03:81:
9e:96:9c:4b:53:d1:9c:c9:91:d7:7f:02:9a:0d:8a:
7a:be:f7:f3:b4:20:c8:68:23:23:de:55:15:8a:c2:
0e:b2:52:5b:2d:de:2a:61:bd:aa:46:16:e2:dd:cd:
be:cc:f1:a1:13:56:2f:d9:b1:03:f9:ff:43:89:98:
cd:92:9c:e3:b1:aa:8c:5a:09:b6:c6:e1:3f:17:8e:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:AB:88:16:EC:CC:B2:2C:FC:27:49:F0:D7:11:33:6E:93:92:B2
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:cf:e0:67:54:84:b7:33:fe:8b:aa:b4:c4:e4:06:bc:cb:2c:
4d:fe:54:77:a5:e0:4b:ef:f3:3c:d1:0e:03:94:51:84:b8:e6:
5c:5d:ba:57:84:86:94:98:99:03:17:74:7f:e7:a5:d2:73:ee:
b3:bb:c6:17:7b:6c:6e:82:48:ff:ea:79:ff:a3:bc:2d:af:e4:
c0:8b:c4:95:3f:84:8e:ff:cc:59:fd:61:3e:00:5c:40:f5:9c:
ab:80:67:42:51:c4:5c:8c:03:f1:99:76:20:cd:cd:7c:c9:f7:
36:a8:37:e1:01:2b:c4:5b:38:21:ca:48:a1:9b:37:ac:5f:69:
8e:c4:4d:1f:c6:9c:f0:58:aa:d3:ea:88:3a:af:85:4e:10:0a:
b4:8f:dc:3f:b4:9e:6b:b6:6f:91:cc:a9:7b:d5:3f:83:12:2a:
c7:e1:21:68:86:64:79:af:f1:12:71:84:c5:0b:b0:8e:b5:08:
cc:5d:d7:80:9f:43:a5:a1:59:1f:72:db:a0:d2:9e:72:75:42:
19:ea:dd:af:2d:36:66:84:d1:8b:62:a8:cf:14:10:80:eb:c5:
cc:87:de:bb:01:55:db:0a:fd:f1:e4:b4:8b:93:b0:8f:0e:79:
92:6e:fa:09:83:cb:7e:3a:16:a9:e6:67:94:6c:ba:de:88:f9:
fb:3f:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:36 2025 by rpki-client