Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: Q/lhMWJLugr1ZY53D0fSM8LjvoOi7oPQlA/5AYtPI3Q=
Subject key identifier: B9:FD:00:15:C3:22:39:96:BA:84:41:C6:08:6A:0A:58:34:16:47:8D
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 0194BD4E3E4EBF1862B7F300F6F747D9A263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: sSmYn+Y8N2BFvD53Z2mtXoQ41s+OAEM3dwq72MTWwdg=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3e:4e:bf:18:62:b7:f3:00:f6:f7:47:d9:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=b9fd0015c3223996ba8441c6086a0a583416478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:4a:f1:82:32:61:e7:d0:a1:8f:49:b6:b4:
34:27:4d:3a:68:4d:67:79:6a:79:9f:53:32:45:a6:
e0:3e:3d:f9:73:54:ee:77:fe:22:ad:7f:d7:5e:24:
39:6f:10:14:36:91:f5:93:ec:12:ba:95:1d:6e:f0:
fe:e5:ab:f5:7a:00:2e:4e:0d:5d:f2:81:91:95:c3:
d6:c1:de:05:19:e3:1c:7b:d7:1b:a5:c9:98:5b:ca:
13:3c:e9:00:d9:11:3a:d4:4c:2c:40:08:ef:e5:53:
1c:e6:ba:60:32:36:a4:c5:1c:3c:d9:34:26:11:7e:
33:b0:65:ff:c4:e6:4f:61:e7:2d:62:01:fb:aa:ac:
14:38:46:53:4d:89:5b:56:46:cb:7c:2c:ce:26:db:
62:71:d5:87:9d:b8:68:4b:2f:81:9f:9e:96:67:f7:
7f:39:7f:ff:db:3b:c5:5f:c2:79:4a:37:f9:0b:58:
4a:cc:96:ed:9e:c7:d7:37:7e:cc:b6:31:fb:c6:d2:
0f:75:d8:9f:84:f7:43:7f:de:71:3e:c2:1e:02:60:
56:86:83:8c:e6:a7:34:20:e7:67:4a:4e:03:80:cf:
32:13:62:e6:31:da:61:61:88:19:b8:b0:75:55:fc:
b9:2c:7a:2a:05:c8:2c:ab:ce:17:ea:ea:6b:f5:b8:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:00:15:C3:22:39:96:BA:84:41:C6:08:6A:0A:58:34:16:47:8D
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f2:48:72:7c:25:81:34:95:3d:56:55:4c:b6:62:86:e3:3a:
6b:6a:ae:3f:89:fc:fe:3d:9e:51:ce:64:c2:d6:af:26:5e:04:
6b:ad:8b:0e:63:aa:c1:64:7e:0e:a6:a4:23:e3:b8:16:dd:77:
65:85:ad:e3:60:4d:f4:99:ea:4d:b6:9b:83:84:c8:d4:97:78:
4f:11:4c:81:15:bc:0f:9e:a1:da:53:0c:1d:8f:11:32:53:b4:
2f:b1:b4:35:c3:c6:00:26:48:55:3e:93:b7:fc:46:f6:86:15:
87:aa:a4:91:68:d7:de:38:1a:37:55:39:23:c3:66:3b:2a:98:
78:1c:3f:e8:84:ef:b1:14:89:68:7a:a1:10:ed:40:0f:b7:97:
db:33:14:f3:d1:9e:18:11:7a:1e:6f:4f:71:8e:b1:92:b9:01:
a1:ff:fe:b7:91:07:8a:4f:ea:e6:b0:d2:fe:b5:53:f7:8a:7f:
94:a1:14:a1:d3:ec:25:30:c2:fc:7b:f8:db:6c:88:6f:72:6a:
ed:4d:ea:47:dd:00:69:01:01:9e:51:d8:78:0b:b4:95:fe:dc:
89:a4:94:79:f1:20:13:eb:e6:7a:dc:e9:2a:45:0d:c0:2c:e7:
95:41:7f:1e:f1:fb:91:1f:8b:78:e1:a9:a5:3d:00:7e:6f:3f:
42:fb:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:53 2025 by rpki-client