Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: i2KaTUPczQKAXfNf7HniNn8u+W3xuiHkURptxNqE25s=
Subject key identifier: 16:6B:C6:44:47:A1:AE:D0:B8:78:BA:06:5B:E1:E2:28:53:F2:7A:A3
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 0194BC3C73998DB80B22278AFAFB65B38C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: Zr3o+XhsXn7kXq7fSPIkfIbbXRFquJVGv4oJ0geA73I=)
2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:99:8d:b8:0b:22:27:8a:fa:fb:65:b3:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=166bc64447a1aed0b878ba065be1e22853f27aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:47:d3:54:98:dd:ea:97:2f:cb:d0:8d:96:
33:f2:eb:74:6a:3a:f3:47:36:44:76:5d:27:df:51:
bb:28:73:1a:a0:37:db:99:4c:b4:84:24:bd:27:32:
02:e0:12:66:0c:80:be:d3:d4:59:bf:59:38:c0:77:
e2:b5:a7:88:27:cd:f9:3b:09:fb:cd:cd:fe:0a:ef:
88:56:f0:e2:65:78:b8:19:7e:34:0a:c1:d3:f4:47:
8d:8b:53:53:4e:74:a8:aa:ca:c1:cb:00:ba:ec:ed:
ee:31:3d:98:29:ae:f4:ca:33:99:b2:a5:06:23:f0:
f2:db:36:81:ef:e8:d9:c1:42:ec:30:30:e4:3e:21:
01:75:9d:2d:60:d9:a7:7d:97:e4:d4:4c:12:97:d9:
3b:bb:06:d6:27:22:b0:9f:cd:b5:b9:72:43:f7:e3:
ef:47:e1:1c:8c:e2:22:fb:b6:44:0f:a4:01:84:71:
bd:bc:24:eb:d2:6a:22:38:c0:25:18:65:0d:11:fd:
bc:db:4d:13:a7:0c:6b:06:76:d7:98:09:a1:16:66:
45:29:52:70:8f:02:df:ee:47:dc:52:38:2c:0d:2e:
0f:8c:4f:fb:6d:23:a6:96:62:39:68:27:d6:8b:d4:
61:37:25:f0:f2:9f:11:13:28:ee:fa:f4:3d:1e:cb:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:C6:44:47:A1:AE:D0:B8:78:BA:06:5B:E1:E2:28:53:F2:7A:A3
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0e:db:01:ac:6d:8e:83:9b:91:e9:23:fa:87:6c:f9:0f:93:
ae:6f:02:23:88:42:4c:4a:9d:63:4e:e1:01:73:83:13:63:c8:
d9:87:ec:1b:1e:d7:c1:c6:41:06:40:1f:eb:2e:3d:44:3f:b9:
9b:72:27:af:71:1d:8a:bd:a4:d6:47:2f:f3:c0:47:85:8c:c2:
72:a2:28:fe:4d:f2:05:94:0f:b0:92:52:7b:d9:7a:28:9c:04:
32:8b:d4:4d:d2:9c:02:71:87:f8:88:9f:6f:15:a2:0c:4d:55:
47:b0:79:61:b8:ff:79:70:1a:f4:bb:36:a3:0a:73:5c:d9:85:
b0:08:92:55:c0:b8:c0:75:73:09:0b:24:50:a8:b3:36:55:78:
8e:20:7b:ae:36:be:78:f1:ee:58:e2:fc:c0:aa:4a:6c:d1:9e:
e7:2c:41:5c:73:f4:ff:36:23:5a:8b:28:cf:b6:c5:ba:23:75:
5a:84:8f:4e:cb:46:49:d0:68:87:47:d1:61:c1:f4:74:16:5b:
49:72:80:04:b1:f2:e7:c8:ea:c5:5e:54:89:dc:6e:29:e1:7b:
83:27:b6:47:96:f3:59:8c:e7:2f:2e:b2:31:aa:44:a9:10:f6:
0f:35:b6:e1:f7:1d:8f:6a:81:63:a4:f3:43:74:2d:5d:2b:89:
85:2e:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:05 2025 by rpki-client