Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: yHJ2k4dbMrc5ObveaQdqdqpDTNUAgJAk4LrPsrkZngU=
Subject key identifier: DF:28:1E:2F:04:E4:C5:17:AA:F5:BB:68:BF:CB:07:94:61:CF:D8:F1
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 0194BC3C936FEF12BD04B8DD68AA565BFFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: hKGcXwthe/SynaZk/4IxgUdZAEKjgxvEUajQOK5H6Hg=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:6f:ef:12:bd:04:b8:dd:68:aa:56:5b:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=df281e2f04e4c517aaf5bb68bfcb079461cfd8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:65:81:c7:56:7c:c4:57:cf:6b:b9:4f:b9:
5c:51:65:a4:2d:6d:c8:af:d9:2c:8c:6f:00:ca:40:
51:62:e0:bf:f2:94:08:58:ac:ae:70:c8:66:29:c5:
08:5e:8d:6f:a6:bc:0b:97:c9:35:d3:34:78:92:4e:
cc:40:f1:98:30:db:86:3f:a0:71:50:94:20:be:5f:
d3:35:bc:ed:01:56:9b:c2:5e:f6:20:d9:5f:65:7b:
8f:9e:fc:04:0a:a3:5c:45:8e:7d:44:c4:cb:0e:45:
f8:4e:e6:e3:fc:4a:6f:5f:3e:72:11:c7:4e:ce:4a:
7f:c8:bc:35:28:18:89:8e:83:c1:cb:81:c4:c2:03:
5a:cc:df:73:7c:24:a0:08:33:e2:88:f5:26:62:b2:
d4:7c:d7:1c:ca:bd:3a:c0:d8:ec:3e:a4:51:f0:00:
ce:89:25:7a:51:ff:49:6f:12:1c:6d:63:23:da:de:
31:b0:6f:31:25:09:93:ca:ae:db:18:4b:d7:ab:cc:
d0:8e:80:f9:03:cb:7b:fe:2f:6f:da:8d:2f:86:aa:
5a:97:83:c7:b7:9a:d4:88:1b:30:b0:d5:13:50:9c:
76:26:7c:c1:bf:72:b9:80:b6:33:07:a2:22:2a:79:
fa:0b:0a:39:fd:f7:5f:c3:19:10:38:7a:9f:63:70:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:28:1E:2F:04:E4:C5:17:AA:F5:BB:68:BF:CB:07:94:61:CF:D8:F1
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:e3:6c:ad:20:8c:39:a6:4c:b9:53:47:58:af:66:da:17:
f9:58:e4:40:c0:9e:19:f9:41:9d:33:98:3d:90:f7:e8:aa:04:
8c:90:7a:52:f3:5d:08:24:ed:a8:63:d3:20:d3:8a:a9:6a:8c:
39:8d:27:3a:b9:91:52:6e:99:91:64:64:39:f1:4a:07:d7:68:
13:3b:36:be:5c:2f:9f:3e:cf:26:43:33:70:9b:21:91:79:e8:
61:b2:61:1e:4b:05:db:3b:c4:4c:f0:9e:50:71:da:1f:c6:f8:
cf:6b:f1:c1:ae:68:19:b7:8a:c7:bc:5d:84:c4:7c:d3:98:13:
ad:80:b0:7d:70:9f:5b:c8:38:0c:0a:60:e9:5d:d2:bb:b3:41:
a2:a8:18:5a:88:21:0e:5b:e3:8c:7b:72:51:15:56:d7:63:5f:
1b:59:43:0a:56:e5:bb:b9:29:83:23:fc:35:5b:99:c6:4b:c3:
b1:b4:50:0d:40:ff:95:16:03:13:0f:25:bb:36:09:2a:c3:34:
b8:86:3c:dd:31:33:97:b6:a4:05:31:4f:d6:86:0f:be:46:35:
98:bb:3f:48:c2:b6:5d:4a:d1:85:bf:8d:b9:2d:f4:11:14:9b:
a6:68:59:b0:a6:75:69:df:7a:5a:d6:ef:dc:79:26:46:36:bd:
e5:a6:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:35 2025 by rpki-client