Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File: BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier: D7h1fsbNHkeEw3baHG+TTfYcPAvH52IuQrlVXP86uIU=
Subject key identifier: 53:A8:7A:0B:46:7A:E9:C1:04:B6:6E:FF:C3:6D:32:F4:69:62:AB:B1
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer: /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial: 0194BBCECFFE5AA813E111987B5CE5955759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number: 027A
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: HKqnXTTr6Tc3zz2HsoKYRc3kw2OaLY2fZMgRL6C8QvY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cf:fe:5a:a8:13:e1:11:98:7b:5c:e5:95:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=53a87a0b467ae9c104b66effc36d32f46962abb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:84:03:04:b3:b5:cd:18:b7:a2:fb:41:a1:a1:
99:6d:f9:9a:86:0c:b0:fb:9b:fd:56:18:0f:04:2d:
9a:d0:30:6d:56:2e:e9:8d:a1:73:a5:5b:00:7a:73:
fd:f4:4c:46:e1:94:77:ea:d9:ae:0f:bd:49:c3:2d:
25:77:6b:71:87:8b:47:58:92:dd:45:3a:e3:62:ae:
f0:44:c0:f1:29:3b:8b:4a:05:83:31:fa:15:73:28:
86:7d:0c:c3:e3:5e:e7:61:bd:18:42:94:1f:09:04:
26:ed:21:d5:2d:3c:d7:21:bd:31:dc:5e:83:60:93:
5e:ad:c4:99:97:4e:3f:c4:71:9b:e0:ad:64:a2:e0:
9f:64:bc:6f:58:be:41:4e:8c:1e:b6:64:08:3a:be:
d2:6b:b2:c7:1a:fd:de:09:7b:7e:5c:1b:50:07:ef:
8d:1a:79:71:59:89:b3:4c:66:ee:56:94:4f:a4:15:
33:4f:86:5b:9e:53:b8:f7:99:e2:88:fa:d6:0e:89:
90:57:5f:f7:d9:42:a6:c9:50:9a:f1:06:be:89:e3:
86:8c:96:2a:21:b5:36:74:e3:cc:0d:4d:11:e4:3b:
3a:c0:51:9e:28:1c:dc:25:7a:61:c4:13:40:87:1b:
94:71:21:4b:b4:2b:e5:e7:dc:3e:ad:29:22:af:24:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:7A:0B:46:7A:E9:C1:04:B6:6E:FF:C3:6D:32:F4:69:62:AB:B1
X509v3 Authority Key Identifier:
keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:48:5c:ad:d9:7b:fe:87:a6:1c:4f:7f:50:32:2c:22:19:
44:37:85:71:54:6d:18:95:76:7d:a4:8e:83:52:af:f5:a9:76:
6c:6b:b4:27:17:a9:a9:c1:7e:af:d2:42:52:43:3a:83:7e:07:
4b:dd:f4:55:28:53:95:b5:8e:9c:62:bf:76:90:b1:d6:8f:4b:
4a:63:ae:56:97:8a:22:f8:1b:e5:36:d3:bb:ed:7e:0e:5c:ab:
75:4c:11:7c:72:dc:7d:0a:15:4b:79:1a:64:a1:75:04:c2:22:
20:eb:fe:68:02:94:47:e2:18:77:99:d6:2b:30:74:df:d9:82:
f3:47:22:6a:d8:61:80:8f:2b:9c:fc:3d:c9:0d:4e:93:3a:00:
0b:03:f7:b3:22:44:d4:65:7c:49:e8:be:61:8f:88:1d:fc:7a:
1e:fe:04:f8:17:56:00:df:ca:1e:43:58:db:24:25:ff:24:fd:
60:72:80:2a:3a:03:91:17:f4:02:e9:1e:03:27:b4:95:0c:ab:
f8:7f:22:e7:dd:4b:22:dc:77:c6:db:12:78:88:69:d8:82:92:
21:b1:f2:f6:1e:a0:e1:2e:60:b0:8e:34:df:2a:59:30:dd:da:
49:0d:55:99:e2:8b:74:52:15:27:a3:ba:4d:33:2e:b3:9e:56:
9f:9a:ea:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:48 2025 by rpki-client