Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: Ll9Sk5rHwK08VnaQFtD71FNSY46WjTFeeM2U2iTja6w=
Subject key identifier: 1D:A4:5B:0D:02:34:24:CF:C2:C3:00:FE:D6:28:BE:9B:E4:87:8A:35
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0194BCAA258E758DF24D726049B281FB1FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: FIy6vwuLqpGVWoJ782rkciakcsE/a/vA6V1Efbnj55c=)
2: mz3469_dtACZeYaYh44O_260cfQ.roa (hash: h4u8i1vrzDz7y0aSq9vGoATyobilirV5QcjBH5QYLLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:8e:75:8d:f2:4d:72:60:49:b2:81:fb:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=1da45b0d023424cfc2c300fed628be9be4878a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:ec:25:da:2b:37:d5:e7:f3:b4:53:59:a1:
4c:3b:3d:71:ce:16:94:90:96:97:12:7b:17:b8:12:
68:e7:3a:69:aa:d8:50:04:08:af:02:0b:3b:34:26:
72:69:e8:45:f8:94:73:de:7f:48:bf:25:cd:be:a0:
91:9a:2d:9d:5b:9a:74:2b:22:80:64:b7:9d:44:b8:
10:e0:5e:6b:0f:a1:0c:18:7e:fa:df:fc:36:20:b2:
0f:bc:71:ba:31:83:ee:ed:f3:39:e9:cf:a3:d7:dc:
d2:e0:f1:f2:a3:de:67:c5:20:36:c6:0f:47:a1:ed:
a5:ac:b5:31:99:a9:91:1e:07:d6:5f:2a:43:cc:96:
43:0f:19:3f:9d:44:c0:48:be:c9:49:66:48:2e:21:
d3:99:90:a6:3d:4c:0e:24:f7:b2:20:81:24:3f:c9:
d0:70:87:83:78:7b:5f:56:d4:ba:a9:cf:97:83:d7:
23:7c:a9:e1:29:8e:dc:94:26:8b:6d:92:ce:10:a6:
76:63:1f:06:d0:38:a1:1a:47:a2:a4:b6:c4:2e:62:
71:8e:9e:42:7a:a1:31:15:00:ec:66:f2:ec:68:80:
51:25:ff:cc:1f:9f:cc:aa:13:4e:b4:4f:85:5e:d3:
ad:d5:94:d1:e4:29:e0:c1:a4:57:bd:2a:04:1e:99:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A4:5B:0D:02:34:24:CF:C2:C3:00:FE:D6:28:BE:9B:E4:87:8A:35
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:34:f3:8d:e6:91:be:24:b7:dd:25:81:ea:12:83:34:c1:e3:
34:79:54:64:5c:7f:c3:a8:15:08:30:4e:01:9f:c1:7a:a7:ef:
68:d4:af:4b:0d:ea:4a:aa:8f:c0:da:cc:3b:45:c3:e4:b2:5e:
25:c7:74:72:e2:ff:46:8e:54:54:30:c2:a9:d2:b5:f9:d3:78:
a2:39:4f:c1:03:a6:0f:a9:b3:93:4c:4a:58:5a:03:4e:01:d4:
3c:20:80:00:58:2e:15:b9:de:aa:72:c8:7d:16:25:1c:1f:9b:
3d:70:0d:ff:10:62:a3:1b:20:03:04:69:13:c2:17:76:e4:76:
0a:21:50:87:8f:4a:39:ac:a8:00:f1:71:64:c4:0e:d0:62:76:
83:2d:8d:90:fe:cd:33:ba:56:6c:5f:69:98:d2:0c:eb:00:ce:
5f:9d:ca:d4:f2:ff:c6:ed:a0:af:bf:c5:2f:18:14:6f:94:53:
15:2b:b8:60:38:cb:0f:b2:84:6b:7d:a8:7b:83:26:99:41:b3:
7c:04:98:62:38:af:63:1b:8c:95:ba:e1:71:63:53:33:1f:eb:
5e:2b:e7:be:e8:2b:3e:66:e0:d4:0e:d3:73:cb:f5:82:e3:62:
eb:05:9b:e0:f8:32:98:b6:bc:9d:ee:64:cf:cc:be:7d:6d:6e:
1c:41:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:32 2025 by rpki-client