Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: R2HXX6CIMTjQHu42j5PxApkIbvjz8ghGVO3N7JsBkbs=
Subject key identifier: D8:81:1C:C1:04:3F:F7:11:CF:F7:80:D2:98:FC:C7:C1:4D:1F:B7:F3
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 0194BCA98804EB5CC82C5BC7168DBD2883CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: ZThVMKlVnN97UOKwjG566LYzg/TOPlaEOcWLf08i0B4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:04:eb:5c:c8:2c:5b:c7:16:8d:bd:28:83:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=d8811cc1043ff711cff780d298fcc7c14d1fb7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:90:43:c5:3d:51:35:b8:78:6e:c4:91:5e:
1e:06:8a:db:05:d6:fa:b9:8d:13:76:a1:aa:77:17:
47:f6:3d:a4:46:64:b3:02:c5:a9:21:3a:a9:b3:9b:
c5:c5:aa:07:32:4b:c9:95:06:fd:52:0f:85:cb:2d:
b1:89:64:92:02:65:75:bd:4c:65:3f:66:f4:aa:10:
98:5b:73:06:3a:f7:15:a1:48:cd:fc:b4:de:b4:d7:
28:c6:6c:fb:8a:a3:71:f6:13:52:ac:68:c4:a0:1c:
e7:1f:b2:d2:18:43:fc:f0:01:b2:01:a3:07:d1:16:
c9:23:fa:63:cb:89:57:8c:51:ba:10:61:19:b4:0e:
a4:3c:18:a1:71:c3:cb:6b:20:cc:48:91:9b:b1:67:
32:0a:cd:98:86:a1:b9:54:aa:18:28:1e:74:ea:58:
05:b9:1a:11:c1:83:ef:f0:38:f7:37:1e:34:29:ef:
37:69:8a:59:4f:64:7a:9f:77:42:e3:ea:7b:5f:4b:
87:13:a3:22:64:99:33:0c:5e:53:56:fa:32:3a:58:
6b:7d:97:c9:02:af:83:da:be:80:22:ab:b8:b4:0a:
59:d7:36:79:e9:79:7b:22:ea:46:48:4a:21:14:e9:
f2:88:86:7c:5c:83:f0:67:56:c3:2a:59:9b:16:d7:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:81:1C:C1:04:3F:F7:11:CF:F7:80:D2:98:FC:C7:C1:4D:1F:B7:F3
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:40:ab:b9:e9:ac:d1:b9:c9:8c:f7:cf:ba:5e:ea:fb:34:
e7:da:6c:e5:91:7e:80:67:d9:97:a0:a1:59:f8:cf:c5:ce:45:
c8:cf:ab:74:17:de:b5:4e:32:c6:4e:89:72:ee:f7:1c:0c:83:
73:57:00:20:5a:ea:3c:0f:51:25:dd:ad:c4:24:dc:69:0e:f7:
a3:03:3e:20:6a:e2:64:ff:e2:24:f3:34:c4:c3:ce:98:81:ce:
35:11:5e:bd:09:24:37:77:dc:ac:87:50:64:80:ba:2d:8f:38:
72:64:fc:12:53:51:16:8f:33:cd:1a:52:b5:49:4a:e7:f5:f2:
32:8b:cb:f5:b9:f5:f5:37:b8:70:24:ef:e8:92:77:1f:5d:c2:
7b:48:85:70:ec:69:fc:99:12:21:0a:68:d2:68:7c:3f:17:ad:
ff:53:56:77:48:fe:56:45:3d:69:0f:24:53:2f:70:70:8a:72:
08:20:5e:3e:aa:5e:a9:51:ef:99:00:56:c5:0b:dd:db:24:de:
35:2f:80:b3:17:c3:c4:15:89:2a:42:50:61:bd:50:ab:be:3b:
03:52:bf:3e:e3:08:a0:8b:fc:59:e0:44:d4:23:5d:22:36:87:
d7:21:75:32:ce:e5:e3:28:02:db:09:b4:19:66:9e:6c:4e:50:
8b:64:52:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:44 2025 by rpki-client