Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: Bne1GPDtw9KnYEJRsAwr+2xOfF11giQBBtEDSbcCiBc=
Subject key identifier: 6B:2B:B8:AB:7B:0C:8B:BB:77:FB:EB:FB:D7:30:D6:0E:A7:F4:13:97
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 0194BC04CF85306025CED9FCA95C34C750DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 114D
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: utfT0XKnuq0ajehyKdylGPnZTaHwFIHNTUm+GDvpup0=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cf:85:30:60:25:ce:d9:fc:a9:5c:34:c7:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=6b2bb8ab7b0c8bbb77fbebfbd730d60ea7f41397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:bd:ba:e0:6a:14:0e:53:bc:bb:85:85:0b:
26:85:c0:a4:f7:d4:6f:cb:43:f5:2f:cd:e5:3c:c1:
03:0d:c6:38:a1:ba:a0:bc:e1:eb:94:31:54:ec:29:
4f:e7:e3:c7:e4:5b:61:3f:f3:17:5b:56:df:03:cf:
e7:2e:b7:8f:1e:60:bc:eb:a8:45:58:75:bf:a1:93:
12:3b:69:dd:1e:0c:31:e1:b5:98:3a:58:51:ff:0a:
16:4a:67:e2:22:14:34:f7:4a:78:34:17:11:a1:e1:
68:3e:3e:ab:ac:1d:d2:12:49:02:71:47:b0:c9:33:
5f:7a:99:6f:89:05:78:f8:9b:60:15:f0:92:29:14:
b5:f3:87:5b:3e:11:88:2d:05:86:da:35:cd:20:70:
15:a0:85:92:2b:c8:88:b1:dc:53:8b:e6:62:ef:71:
fc:09:57:c0:ec:7f:d7:b9:d1:a3:f3:e0:37:a9:54:
0f:d8:05:6b:22:d5:78:3a:ac:b6:9d:ba:08:a3:83:
d3:e9:49:14:95:22:21:23:78:77:00:3e:bb:38:3b:
a1:f6:06:79:c2:ba:4e:e8:f8:b2:0b:53:60:10:03:
d5:48:e7:9f:28:21:0b:66:19:8f:a3:db:1e:3a:68:
d3:70:5f:d0:9c:f7:ea:67:6f:c2:61:99:9a:23:b1:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:B8:AB:7B:0C:8B:BB:77:FB:EB:FB:D7:30:D6:0E:A7:F4:13:97
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:71:05:4c:0c:8c:c7:2d:d8:28:06:1e:5c:59:ae:8a:85:98:
d1:6e:c6:51:d9:23:8c:35:82:1f:ba:f2:d0:7e:90:be:62:e0:
6b:2b:55:3a:81:38:6d:d7:ba:c5:aa:c2:8b:88:c0:08:a4:b8:
37:7a:e6:e7:54:9b:dc:da:24:34:bb:ae:f9:91:f4:ac:a1:36:
4a:fb:21:bf:8e:64:f1:e5:3f:d9:e8:ac:33:6c:47:d4:bb:46:
11:28:11:22:dd:f2:00:94:93:19:f6:b6:7f:3a:58:69:f6:07:
7a:16:c8:b4:b3:a1:0e:9b:f0:7c:71:18:79:f2:d8:d1:4f:c9:
73:fe:e3:c8:4e:9a:cc:51:5f:68:25:2d:7d:84:16:8d:13:68:
12:8f:0c:97:0d:73:60:f0:f0:44:d8:f3:3d:4b:c8:e8:9f:ad:
77:d4:cb:54:c8:a6:e9:21:85:d2:ef:f6:6a:3b:eb:c1:a1:c1:
a6:aa:b1:f2:ee:94:17:1d:8b:7e:27:4e:10:59:40:22:21:0a:
bc:43:50:33:f2:7b:09:f8:92:47:93:c7:b0:cf:19:9c:86:83:
3c:82:e1:ec:7c:64:66:ec:14:ac:1d:fd:07:1d:ae:1e:a6:25:
a6:4c:09:87:56:f1:c6:74:d6:25:01:33:b7:6d:04:d5:77:23:
e6:41:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:31 2025 by rpki-client