Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
File: BZqsWXzkoNE7edIrO_GKSJnddk8.mft (raw, json)
Hash identifier: FAcSIArZnJ2OSYyxE7AZFQhYg7AmzUx0itgVbrV6xuA=
Subject key identifier: 95:C2:78:CF:F6:E8:FF:EB:79:18:3A:09:97:4C:3E:88:8D:CB:3F:61
Authority key identifier: 05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
Certificate issuer: /CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Certificate serial: 0194BC3BE286F7D2E2B1B1D9D6178836FCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
Manifest number: 08B8
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: BZqsWXzkoNE7edIrO_GKSJnddk8.crl (hash: s+8fAOKWFG6VvOuZygz2kULgF8lBNzZ1YWL6rt8MTVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e2:86:f7:d2:e2:b1:b1:d9:d6:17:88:36:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059aac597ce4a0d13b79d22b3bf18a4899dd764f
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=95c278cff6e8ffeb79183a09974c3e888dcb3f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:cd:a0:b8:e0:32:88:2d:0a:2d:38:a9:40:
93:37:f1:8f:29:c0:e5:28:7a:1f:d8:98:b4:25:25:
b7:9f:18:e9:b6:d5:6b:34:e6:17:1e:02:90:9b:26:
41:98:61:55:25:6f:9c:5b:95:8e:6b:85:11:06:7f:
d6:12:14:eb:2e:39:75:0c:9f:a1:aa:4f:4e:3a:32:
8e:ec:89:cc:91:a6:f5:82:fb:f4:ec:34:d1:ed:0d:
4d:93:4b:c8:d0:64:7b:18:50:c2:10:73:f5:3f:85:
1b:85:84:c0:77:74:af:9c:5f:cc:df:8e:1f:64:20:
dd:67:b0:71:48:47:b5:36:0f:64:b9:34:09:25:c7:
c6:bb:65:38:d7:80:74:ee:22:5b:37:70:1e:f8:03:
bb:1b:65:bc:7a:ec:be:e3:db:f7:25:3b:21:ad:1a:
24:c3:ce:03:f8:33:3f:50:bb:7d:2f:db:a8:4c:77:
b3:49:db:98:f0:4a:cb:d0:5f:d8:7a:55:41:b6:d8:
60:9a:d0:d9:37:2c:6f:f1:5e:5b:4a:ac:7e:3d:5c:
bf:b6:0a:09:1a:2a:31:ab:ce:47:7f:21:07:b3:eb:
21:ad:5e:a9:ec:1e:8f:b1:7a:8c:b0:57:8a:a9:9f:
7e:79:51:d5:1a:b2:a4:6d:36:f5:aa:3c:d1:8d:b2:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:78:CF:F6:E8:FF:EB:79:18:3A:09:97:4C:3E:88:8D:CB:3F:61
X509v3 Authority Key Identifier:
keyid:05:9A:AC:59:7C:E4:A0:D1:3B:79:D2:2B:3B:F1:8A:48:99:DD:76:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZqsWXzkoNE7edIrO_GKSJnddk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bab89a-d990-4fc7-86dd-e2c816db81cc/1/BZqsWXzkoNE7edIrO_GKSJnddk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:54:a8:79:7e:9e:a2:1b:f9:0c:67:71:d0:fd:6a:ff:49:cd:
ea:64:c9:4f:59:96:61:b1:b0:6b:2b:d1:b5:0c:6f:68:33:9b:
d8:bf:e2:2e:6a:7f:49:5f:fa:c2:06:34:1a:f1:91:b4:2a:d7:
53:13:55:d6:3a:80:f8:8f:f5:8d:63:18:73:dd:bc:0d:fd:3d:
17:8a:82:f3:85:8c:0b:1f:63:00:03:6f:43:f2:3a:30:bc:5e:
c3:db:e8:68:cf:fe:95:39:6d:7e:30:25:ee:5f:d8:be:5b:f5:
f7:60:82:68:93:e8:d7:16:ac:5e:4a:03:9b:25:a3:e9:29:0f:
9a:ec:af:3c:d0:78:a9:65:26:34:b9:c2:37:4a:a4:66:ba:c1:
8e:cf:41:48:20:2e:e2:4b:7d:bc:5b:12:09:52:cb:28:00:4b:
6f:7d:90:60:fe:af:d5:a1:81:68:5d:ec:3f:2f:4a:99:ce:55:
70:de:b9:dd:22:9b:05:d7:8a:aa:37:78:f2:57:06:56:90:76:
ea:9a:3b:2e:a0:9a:17:be:ae:e0:b1:a3:81:f6:e4:07:ec:99:
d6:2c:00:c2:90:f1:3a:4c:e5:fb:08:e1:b4:d9:ad:e0:7f:54:
ff:64:d7:0e:32:97:40:cc:c0:59:1f:85:fb:76:34:23:33:13:
af:ba:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:05 2025 by rpki-client