Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: gXWsNeISquUsBlGuSGGYJ3yU7t8HkkypB8isAea2li8=
Subject key identifier: CD:88:9D:C9:48:D6:D1:CB:35:1B:9D:26:46:37:66:A8:BF:43:4D:F8
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0194BCA974734C34E81FD1DEEDC1D2A23BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: 4Uc/zi5Nk8wewf+JSen8Ot3i8GGQRh7nkcZYqXHYLY0=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:73:4c:34:e8:1f:d1:de:ed:c1:d2:a2:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=cd889dc948d6d1cb351b9d26463766a8bf434df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:af:3f:26:d0:e3:1d:02:84:10:4f:98:4c:
70:86:7e:db:9b:5d:e5:70:ae:94:0c:db:f2:03:b6:
cf:bf:af:8c:8f:0c:eb:35:91:1a:10:a3:b0:14:19:
43:7c:f0:2f:52:9b:75:6b:89:cb:29:a0:78:98:93:
93:6c:48:33:36:47:4e:9e:8d:e5:ef:16:11:73:5d:
6f:ed:b4:c3:e3:50:89:11:57:0b:ba:9a:de:21:9d:
ff:3a:90:27:82:d2:99:56:c7:47:25:18:9a:b3:70:
6b:45:ee:37:e9:aa:a2:68:c7:4a:18:97:e5:5f:7a:
76:d5:f3:01:7c:f2:29:2a:92:9d:dc:3b:e4:ff:9d:
ea:cf:b1:09:8a:30:5a:9a:b6:31:d2:20:e2:2e:9c:
fc:cc:f5:d6:c0:6e:3a:f2:59:20:17:c4:9d:95:cd:
b7:d5:d0:22:44:17:46:85:30:87:91:87:ca:db:bc:
cd:96:12:e8:b3:0b:bb:ac:51:a1:85:30:cd:f2:4a:
a6:7d:16:cd:2e:50:d9:3d:cb:17:9f:22:05:be:3b:
03:7f:ba:88:e8:60:ca:f6:f7:fe:3a:4e:b8:b2:ee:
2e:09:d8:12:77:ae:f5:0d:f6:f9:0d:76:fd:f6:75:
f9:d6:ea:fd:10:e4:a4:a9:d0:a7:ca:d5:54:dc:f6:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:9D:C9:48:D6:D1:CB:35:1B:9D:26:46:37:66:A8:BF:43:4D:F8
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8d:1f:c0:9e:ad:b3:4c:e1:10:13:fc:7f:3b:34:0a:ed:e6:
fc:71:15:06:df:a1:b2:de:fa:69:a5:c0:f4:63:a2:f9:98:ab:
ec:67:8d:7a:d5:d5:71:5d:78:88:a8:00:90:a1:18:82:f5:b1:
17:61:f6:a6:76:bb:2b:13:18:3f:9c:ef:5f:57:14:36:f9:76:
f7:4d:3c:e0:dd:38:48:ac:d4:ff:1b:1f:9f:33:e6:1f:30:33:
63:22:e1:48:1a:34:13:9e:a1:fc:96:d5:fe:1c:41:6d:fd:cb:
de:20:66:e2:63:f7:a2:4f:cb:ff:a1:36:81:3e:44:f2:69:b8:
31:49:ce:64:cf:cf:c3:21:53:8b:5f:3d:c0:15:56:51:75:d8:
89:fb:19:1b:b8:2e:94:8c:73:b7:a4:07:05:7c:ed:79:62:66:
f0:2f:13:9b:e8:56:21:1d:13:b1:45:40:09:b3:fd:36:55:97:
c1:73:8e:71:02:39:26:ce:40:e5:62:8a:22:2c:7a:84:3c:40:
3c:8f:71:a0:90:0f:f8:4e:98:b3:9d:57:3c:06:12:05:04:de:
e5:b5:af:a2:04:58:8c:36:fd:6f:b6:bb:0b:1f:a3:e9:18:32:
2f:bf:18:87:b6:56:5d:70:f7:17:53:0f:89:80:03:b5:fb:9d:
09:3c:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:25 2025 by rpki-client