Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json)
Hash identifier: E5g1bDWmPGE2YPUVbEKeDSjoi1eUCsTsSzWjdEgLGPQ=
Subject key identifier: A6:26:85:39:4E:F1:97:47:37:14:1A:AF:78:4D:9E:00:88:3F:88:2E
Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Certificate serial: 0194BC3BECF02A06F87BDD4E00491AC49E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: gmdEesYK9I8Qu0e3kmJj6dp6oMIa0m7Vl0tiRBKiuGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:f0:2a:06:f8:7b:dd:4e:00:49:1a:c4:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=a62685394ef1974737141aaf784d9e00883f882e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:59:fc:cf:06:1b:95:cf:7e:55:22:1a:65:
40:44:8a:9d:96:72:fb:b5:1c:05:dc:9a:5c:e7:ed:
f8:a1:a6:74:25:25:ac:1a:80:a0:5c:80:e5:03:5c:
23:93:6e:16:3b:f0:e0:03:ba:11:b3:87:4c:e4:16:
aa:7a:c8:c5:f1:cc:2e:89:30:dd:74:62:5e:a1:17:
5d:ec:24:3f:1e:cf:b1:77:8b:ab:c3:df:87:e4:8d:
2f:2c:65:13:2c:22:27:51:d0:aa:92:32:9b:9a:67:
f8:73:8e:21:ca:76:77:42:79:d4:41:a1:04:ed:ac:
fa:3b:b1:0d:f2:9a:2c:8a:12:e8:c3:19:09:e7:73:
46:7f:d3:14:b8:a7:44:e4:37:3f:83:18:68:ee:d9:
28:fc:2e:4e:ab:dc:59:3e:e1:3e:86:89:82:b5:96:
03:b5:6c:dd:5c:b4:d6:29:66:87:64:e3:62:02:76:
29:10:96:cc:c8:b0:45:df:31:42:c0:56:49:16:95:
24:ef:31:42:cd:24:6e:9b:5e:a6:d7:aa:21:08:85:
4e:86:a7:89:b7:28:4e:d1:48:14:90:05:3d:d6:f3:
2b:7a:df:c4:aa:39:8a:a3:e7:22:98:8b:38:5a:da:
b1:34:0c:d7:8d:fb:96:07:ff:4b:8d:67:99:8d:52:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:85:39:4E:F1:97:47:37:14:1A:AF:78:4D:9E:00:88:3F:88:2E
X509v3 Authority Key Identifier:
keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cb:a0:90:d1:ca:a9:82:84:bb:71:04:81:72:2d:40:e5:da:
2a:ab:cf:d5:fe:d5:35:30:52:17:52:44:f9:de:c8:42:6e:82:
ea:b5:3c:a7:1e:60:13:13:e3:39:d8:15:89:56:44:6b:b0:c3:
b3:be:5c:19:12:e7:64:aa:88:fd:b6:68:68:3a:02:20:9d:d5:
52:b4:2e:91:8a:24:1b:1e:c0:28:f1:93:07:e3:aa:b7:a1:e1:
8c:52:68:90:72:98:e8:94:61:77:38:99:89:33:f5:ab:fb:54:
17:77:ec:92:4f:40:58:b4:8b:e0:28:03:a2:38:74:ca:d9:99:
73:bd:8f:5e:62:a8:2e:b6:5e:55:57:c2:13:14:61:1d:b7:c9:
e1:a7:e4:43:eb:02:4f:1d:df:7d:a0:40:d5:23:ef:b0:23:84:
4e:78:6d:ef:8a:2f:db:3c:bf:c9:0a:f3:27:7f:2f:a0:f1:ee:
50:cd:05:af:c0:92:14:51:67:7e:c5:34:2c:cd:cd:dd:9a:da:
2b:ee:b7:88:bd:39:18:d7:0b:8f:53:77:8a:d1:21:39:be:72:
25:17:ff:67:4d:7a:d7:d3:e9:70:17:bd:39:99:1a:8c:4e:86:
7f:b0:c7:3e:81:60:66:17:6e:64:35:30:14:cd:b5:4c:5a:18:
56:56:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:02:11 2025 by rpki-client