Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: kJ8QJHTR0jHpkTQ89UK8W0NGcQihCL/TL38H3S+Y1lw=
Subject key identifier: 93:40:A4:B9:2B:56:C0:B8:A2:75:BE:80:16:8E:CB:80:CA:E2:B4:63
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0194BCE0AB8897E19EA66EA13716F042ADC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: rjrRdcgZsnBZJWw+0879Tbne5rQ1DwZKk/NtmWLbilg=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ab:88:97:e1:9e:a6:6e:a1:37:16:f0:42:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=9340a4b92b56c0b8a275be80168ecb80cae2b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:bc:b8:ff:35:b6:2a:7c:95:48:21:1a:1a:
7f:12:0a:76:21:98:b4:92:b8:c3:fe:2d:59:9d:e6:
b1:5d:5a:18:bc:4e:23:2f:c0:5d:d7:a3:a8:fe:01:
65:87:8b:9d:df:2c:98:92:f7:55:1b:eb:f1:fd:19:
0e:7e:ee:79:5a:e9:78:e5:6b:fe:b2:3e:57:40:d0:
77:cd:de:43:48:5e:3e:0e:c1:1d:9c:7e:10:c8:de:
17:c9:8c:30:23:eb:e0:ab:e9:1c:5c:88:34:f8:72:
b8:8b:c9:59:ef:9b:9b:95:3e:35:71:72:57:64:92:
1f:45:b2:21:60:bc:bd:e4:2c:65:11:78:e8:e2:d8:
b8:32:90:17:3b:17:20:52:8b:6d:a4:8c:dd:6f:24:
f8:10:14:0e:d6:ce:0b:ed:b0:4a:4e:cb:d2:ef:dc:
88:8a:53:ef:81:5e:b0:bb:c1:93:ec:bd:f5:cc:ec:
0f:de:d3:f0:82:70:2c:65:70:03:2a:c2:b9:3c:88:
2d:a7:69:c1:67:87:bb:1a:c7:97:70:2b:bd:33:45:
c2:93:55:93:4b:08:f0:74:d8:f0:19:47:32:71:b8:
5c:bc:64:c3:d8:bf:80:43:a9:47:8e:5b:ac:00:55:
79:d5:d5:04:a3:66:21:78:ae:01:8b:c3:98:12:ad:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:A4:B9:2B:56:C0:B8:A2:75:BE:80:16:8E:CB:80:CA:E2:B4:63
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:86:e4:ba:11:6e:46:ee:89:4e:09:bf:eb:37:a1:9d:18:
69:a3:f8:c8:de:c1:22:1a:f7:6c:a1:e3:1d:67:e7:49:6b:15:
20:fd:6d:9f:da:f9:79:60:31:a1:20:d4:49:d8:19:f2:ce:ef:
ff:ef:62:b4:43:86:27:56:67:f8:01:cc:6c:14:79:e2:18:02:
e7:86:3e:a0:ce:ea:e9:ba:a9:b7:ee:df:c9:b0:e8:75:ac:46:
51:19:2c:00:9c:c2:6a:a8:53:90:ce:73:84:c8:5d:a4:8d:48:
20:9a:39:51:db:7f:85:e0:a3:65:af:ba:ff:f1:bf:c0:d9:65:
2d:88:84:a3:d0:b1:eb:12:89:a3:ad:5a:7c:68:58:18:07:6c:
7e:b5:d6:0f:de:d8:a9:04:37:f8:54:5a:c1:b7:f8:5e:55:d9:
66:ac:e8:e0:61:48:68:5a:c7:1a:e4:de:b3:85:51:fe:e7:25:
c7:f4:42:e6:d8:df:17:51:84:b9:f0:9b:28:8e:1e:d3:23:64:
05:96:5c:12:17:d9:60:2b:3d:d5:80:4d:5e:12:5a:72:be:07:
fc:d9:94:8b:ce:d1:95:bc:89:2f:0f:41:ec:25:95:60:b9:46:
01:1c:8f:9b:80:9b:21:e3:c6:c8:84:e9:d9:c6:83:e9:24:22:
af:fa:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client