Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File: BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier: qw6TqT4/iEAxS98g4wyofdbVh/Am2yylDJtxfwslWjA=
Subject key identifier: 8B:B4:B7:5A:86:E7:48:02:AC:97:A8:AF:5A:DD:CD:91:F1:67:D7:7C
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial: 0194BC3C105BC46B2216FB70342B58B53B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: H/GvMZ0qXzlxWoy0huVcWbRCHRUx8el2QgHHLiI+ILo=)
2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:10:5b:c4:6b:22:16:fb:70:34:2b:58:b5:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=8bb4b75a86e74802ac97a8af5addcd91f167d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:84:bd:f1:dd:f2:57:b7:93:9a:8b:fc:7f:
07:6d:22:1e:0f:64:d7:67:69:1a:31:7e:05:9b:39:
12:a2:f1:33:9b:8d:66:ad:55:c4:8b:4f:97:27:c3:
2c:0c:d0:8a:d9:c6:ae:ae:90:0f:87:de:92:07:d0:
33:81:a5:34:20:3c:4b:a3:64:e5:c6:24:e0:23:11:
d8:86:f4:4d:39:37:c8:10:3f:fb:9b:6d:1e:7a:d7:
e4:ad:ca:6d:32:90:05:bf:0f:33:6e:e7:f7:28:06:
cf:3d:cd:f1:73:b0:7a:f7:6b:d7:5f:68:41:82:87:
40:43:e2:12:49:30:2d:b3:53:c3:92:19:db:83:3e:
bb:9d:c5:ac:4a:28:db:2b:ab:0f:f5:d2:87:f7:30:
43:cc:1e:ef:dd:f3:06:8b:85:e8:06:cb:52:34:60:
c7:5a:86:24:53:8c:d4:c7:85:ce:06:75:47:4e:e7:
40:e2:24:2c:65:f2:05:27:88:06:09:52:7a:ae:4d:
0d:4d:48:42:1b:7a:c3:9e:9a:33:13:fa:0c:62:b1:
b5:29:a0:e2:f4:be:35:37:32:92:90:22:c3:23:68:
3c:31:f5:ad:38:51:39:bb:a5:ff:70:50:c0:a5:c8:
6c:1e:47:f2:60:8a:30:81:47:ad:b4:de:6d:01:f9:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:B7:5A:86:E7:48:02:AC:97:A8:AF:5A:DD:CD:91:F1:67:D7:7C
X509v3 Authority Key Identifier:
keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ec:c1:76:a6:f9:b7:b3:87:f9:af:e2:3a:b8:17:3a:12:f8:
f1:11:b6:a3:c1:e9:f7:d6:ac:ca:4d:0a:04:e9:a4:8d:26:5e:
e2:96:2b:b3:32:85:13:64:8b:e6:67:62:00:38:cf:7a:8c:ca:
95:3f:02:7b:72:65:99:cd:99:52:ff:9b:81:d3:c2:f5:07:c5:
f6:7d:ca:e8:32:cb:19:55:6a:00:77:33:eb:64:f0:23:2a:19:
69:79:f2:dd:99:24:31:3e:26:1c:09:c8:e6:69:d7:1b:5a:46:
c9:e4:7d:ba:42:3b:eb:ba:ff:37:fb:fe:9c:28:56:d8:2e:4a:
62:75:8c:61:4c:48:59:2d:72:bf:92:62:6f:7e:17:d2:31:86:
fe:50:0a:b4:ac:8a:4d:20:8e:a4:04:ee:cb:78:be:0e:36:37:
68:7c:4c:7f:a7:c5:c7:88:bb:c4:69:ca:58:c7:cc:6c:4c:42:
3e:64:0c:7f:3d:74:4e:35:d3:61:39:17:13:6d:e7:4d:96:75:
d9:16:3b:01:17:6b:3b:8c:e1:0d:64:28:d2:c5:ea:83:7c:67:
e9:4d:33:8c:e5:16:cb:83:01:f9:b7:73:4f:59:16:d9:c7:21:
6a:fa:4e:f3:2c:09:51:06:52:a0:69:74:13:c1:8e:88:d6:b4:
28:48:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:31 2025 by rpki-client