Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
File: bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft (raw, json)
Hash identifier: TGpuD2f5qmX1Utwvg1CbikU1FTgtlO5GQDIgCp3yoLM=
Subject key identifier: 18:C4:CB:1B:CB:5F:8C:B0:C4:97:51:63:7D:73:E6:95:31:8D:41:1D
Authority key identifier: 6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
Certificate issuer: /CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Certificate serial: 0194BCA96F1F191F11694F68197C9777A54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
Manifest number: 034A
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: YPlrVoHYh91BGfKIK-riSMNPkDM.roa (hash: rUAwyMrSIPpYNGCl+hxr0gD/er7wZt7UZ89gUWN3Vec=)
2: bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl (hash: hFd1XlDSC0afSr+dljfXo43DcD31MexM1CnweQCeVKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:1f:19:1f:11:69:4f:68:19:7c:97:77:a5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=18c4cb1bcb5f8cb0c49751637d73e695318d411d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:91:c0:4a:85:bd:e6:2f:e2:11:41:80:c3:
3e:45:5f:4b:0b:9f:3b:4e:b8:0d:c1:e5:c8:57:10:
c8:dd:bd:e6:7a:2a:04:0f:f2:3a:90:ee:65:99:99:
02:a5:b0:09:04:b9:f4:62:e5:3b:c9:e6:bc:90:e1:
f2:5c:d9:90:da:2f:14:03:29:91:86:c5:4e:f0:b9:
88:a0:07:41:be:07:4b:52:db:68:9b:cb:8a:d0:97:
c2:5c:6b:8f:e7:ef:5c:16:98:e9:93:ba:ad:ec:04:
d5:25:54:8d:6d:0f:75:a0:24:48:3a:79:89:b1:68:
36:39:4f:b3:3e:65:87:17:34:aa:56:ad:f8:2a:e6:
01:81:ce:f6:d2:84:45:a5:b2:49:23:e4:45:02:c6:
82:fb:2e:2f:b1:f9:b8:69:69:2c:af:cd:88:e8:11:
c7:8f:d9:de:4f:01:c0:47:2b:05:00:d4:01:ad:ba:
4d:d5:b7:67:93:d5:40:9b:20:49:96:48:fb:41:e7:
28:03:a2:58:f4:4f:10:c1:1b:49:91:3b:c4:03:8c:
76:21:aa:13:5f:8c:a6:54:1c:37:97:40:0c:f5:46:
61:f2:fe:10:b9:95:2b:52:e0:c1:40:b9:d4:d0:62:
d0:94:52:85:74:92:b1:f3:1b:39:19:8a:b9:23:3b:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:CB:1B:CB:5F:8C:B0:C4:97:51:63:7D:73:E6:95:31:8D:41:1D
X509v3 Authority Key Identifier:
keyid:6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b7:93:6d:c3:41:1b:7d:33:0b:cb:bc:e7:89:0e:a2:38:f5:
80:d1:bd:45:1c:62:8c:d4:b5:f6:58:11:b3:f3:5e:48:f5:b6:
1c:10:1d:ea:9c:06:3a:8c:99:d4:d9:85:e5:34:b0:ad:c1:9d:
b7:1a:99:57:14:04:5d:17:6b:79:d9:37:b0:30:30:68:91:f3:
e6:82:07:1e:91:03:4b:6e:58:39:fd:5b:8b:00:af:77:14:09:
b4:62:ee:48:2e:c8:e6:a2:f0:b2:64:8a:0f:4f:cb:b0:48:6a:
b6:79:56:4e:e0:ae:b2:7b:b9:b8:f5:3b:27:e3:4e:9a:cd:b9:
d5:83:fa:72:c1:91:bf:38:1d:ee:5a:b0:b1:91:6f:bf:ed:c1:
87:b6:f6:40:f5:83:00:02:e1:b9:a1:5f:8b:4c:85:66:c4:fb:
af:55:24:e0:97:4e:d7:cb:86:ef:c9:35:62:79:b8:4b:11:26:
43:b6:09:d6:b7:a6:61:f8:d3:7c:8d:3f:01:4a:9a:bf:f5:3e:
05:96:19:c1:fd:ae:ad:d1:63:da:33:a9:fc:32:2a:c3:8d:35:
a1:87:d6:d1:ce:f4:c0:d7:ea:50:5d:7d:98:02:2e:b8:09:ad:
11:28:34:b0:f1:fe:cd:06:b8:dc:d5:1d:d1:4b:8a:a2:64:86:
5f:75:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:44 2025 by rpki-client