Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: lApsjKRx63rs1rkTqdlSa2X+oAXbJEOrE82pVikNhmI=
Subject key identifier: 56:FF:47:84:70:B4:54:87:4C:22:81:34:13:28:BB:7E:CE:93:8D:9B
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0194BC3C5D4ABE3E134B37539A478470D106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: 8xtb2Qh4f1MX3Nln5nIatn0piMy5mX9X7UYq0FY1PnY=)
2: DKRXjeM9flU1JMJDLegBsjXPrAo.roa (hash: 3/HQJL+wkru+7pz6XKtv059oc5dtR7N3Z+D54pvxUlw=)
3: hOElLow0GDC_MeYSYyQtIC3PMlk.roa (hash: A9+MJu+DhgYz/Pw7HTVC22t0LXuV3VUYuTahobeq0Fw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:4a:be:3e:13:4b:37:53:9a:47:84:70:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=56ff478470b454874c2281341328bb7ece938d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:93:30:b6:85:22:27:d4:a7:eb:f7:8b:53:
d2:03:ec:71:c2:ae:78:42:ea:6b:6f:d5:62:0a:44:
3a:6f:36:0c:a1:c0:8e:9f:82:8f:aa:e3:29:ff:17:
c9:c3:16:92:01:cf:62:6f:9b:5d:b1:36:73:22:1b:
16:10:5a:e5:52:ce:66:6c:05:71:61:57:28:fd:b4:
d2:3f:90:25:b8:8a:8b:48:ec:bc:57:e6:66:07:f6:
c7:17:ed:8b:db:3e:98:a7:fb:5e:3a:c6:34:2d:88:
d4:92:e2:45:6d:6e:fb:f1:82:be:0f:71:98:cf:cb:
14:84:d6:87:50:47:2e:4a:58:69:51:1b:29:bd:d1:
14:9d:ba:67:ca:e0:37:9f:cc:a8:03:e0:11:d7:89:
60:87:7f:79:00:2f:3f:2e:6c:38:43:93:53:25:ef:
cf:8e:ca:94:ec:19:11:35:83:cd:45:f5:82:e2:52:
d5:cd:d0:0c:7d:1b:16:60:34:bd:1c:df:0d:8c:c8:
c8:97:e5:a9:c8:7f:44:55:ac:05:f3:d3:f7:a8:0c:
94:5e:79:ae:3d:9b:a1:5d:9d:35:c9:e5:d7:64:95:
af:29:24:f3:89:37:1a:66:5b:6a:1d:94:98:c4:3a:
9d:91:6d:63:70:54:98:8a:e6:c6:66:86:7c:47:17:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:47:84:70:B4:54:87:4C:22:81:34:13:28:BB:7E:CE:93:8D:9B
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bb:8f:ed:98:20:00:6b:a6:8e:b4:e9:59:02:41:13:0b:34:
7a:06:d8:10:2d:21:99:64:b2:2d:16:41:6f:4e:3e:b7:c3:00:
33:33:33:ec:9b:00:09:56:40:62:ec:a1:5a:72:d1:b9:ca:ff:
27:3a:eb:09:92:b0:8d:9b:45:c2:fe:c4:cf:f4:2a:4d:46:b4:
52:71:5e:6a:c2:ad:c5:e0:5e:26:29:a8:58:0d:43:7b:ee:89:
a6:7b:bc:3a:3f:0d:4f:c9:d3:9a:53:50:55:4b:58:4c:4a:20:
26:5f:2d:6b:d8:0a:a5:2f:52:93:ac:b5:cc:36:2b:41:1b:9a:
4a:75:44:cc:2d:fb:5a:e9:00:90:31:32:57:f9:f6:5c:65:83:
55:18:1f:3f:5b:89:bc:a5:08:07:55:a2:79:4b:eb:56:ab:18:
aa:d3:31:e1:7c:65:1a:4c:62:f9:a7:9b:f1:0a:39:cf:85:04:
09:65:52:a9:9f:ed:fb:06:76:6d:53:92:c0:d5:9d:bb:fc:76:
48:fb:06:3d:96:c3:11:ad:2b:74:9c:07:8f:08:67:de:74:1e:
9d:76:7e:44:9a:ed:b2:da:06:3a:40:c0:59:93:5b:d4:e6:1a:
4e:84:64:de:b2:ac:b6:9d:06:cc:cf:2b:b1:2c:a8:6f:2f:30:
af:7f:f5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:11 2025 by rpki-client