Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: z/BKqcfRlYRnpJFqoREYsURW4d8sjFtf/ZiHUp8vLjk=
Subject key identifier: B1:07:46:AF:19:A1:29:DF:7E:EA:F4:84:BB:7E:CF:97:73:FA:76:B8
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 0194BCA98F04A943516EE767082DA26366FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: 43oOro+Ss6cm71O+0ygbljnpfNDr6L8jsmmdAjVN7BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:04:a9:43:51:6e:e7:67:08:2d:a2:63:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=b10746af19a129df7eeaf484bb7ecf9773fa76b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:2a:66:84:5c:ee:3e:15:b4:c1:75:e3:bc:
4e:0c:c0:7d:bf:25:01:d2:9f:96:28:dd:48:6f:e4:
ac:1a:a5:48:95:2a:ce:52:e3:74:d1:8e:e1:07:14:
80:3d:b4:12:a8:29:5e:d0:69:d4:6a:14:5e:75:16:
97:b0:ea:30:a2:2b:10:49:77:d7:18:6b:2f:26:d3:
20:b2:18:a9:66:62:48:d7:37:59:72:52:60:b7:01:
96:02:68:00:53:b4:5e:41:d6:e3:de:9b:37:32:10:
05:02:2a:de:8b:c9:89:9a:1a:87:22:de:f9:a0:a3:
bd:84:fd:d4:db:25:5d:50:c5:e9:72:25:81:3d:ed:
eb:7b:ca:3d:e2:c3:64:e7:06:38:e6:d1:e0:48:76:
15:13:7b:a0:9d:3b:75:1d:46:cf:a8:5f:7e:71:da:
10:bb:6c:27:ad:81:b4:8b:1d:68:67:17:be:ad:67:
cd:7b:b7:2a:f9:5d:29:b5:09:59:af:97:17:ba:fb:
05:04:63:43:36:41:cd:cf:8c:3b:48:68:0a:09:1d:
23:f2:26:88:39:25:18:87:fd:2c:20:b2:b6:a5:b8:
3a:0e:3b:b4:99:af:44:62:93:02:0e:6e:83:ae:8a:
7e:18:77:d4:09:f1:43:32:ba:76:25:57:75:b3:ee:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:46:AF:19:A1:29:DF:7E:EA:F4:84:BB:7E:CF:97:73:FA:76:B8
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:79:b3:7d:52:fe:9d:0a:cc:bb:17:50:c7:f3:53:0d:ef:0c:
15:45:4c:9e:ac:3a:ef:8a:55:a7:a2:32:69:7e:fb:90:fe:b1:
ad:61:76:0c:2b:e8:c7:fb:ff:6a:b9:ec:bd:11:b7:2d:f4:c8:
31:8b:13:c8:23:92:44:0e:0b:e7:0f:2e:34:a2:05:e2:51:9f:
05:92:27:af:7e:78:b8:44:42:68:99:56:6f:64:6c:3c:71:fd:
22:b8:48:33:47:c6:da:35:76:db:be:b7:4c:71:2a:02:3c:e8:
44:8a:f5:42:22:32:ba:5d:35:d6:b4:91:fe:91:b7:b0:74:d7:
cb:02:50:55:28:ed:75:3d:42:ea:19:71:ca:20:68:d5:1e:eb:
ef:59:40:bb:fb:5e:9b:78:f5:5a:57:d8:95:ff:7d:1f:c1:40:
e3:2e:38:ae:52:5a:80:01:c5:b2:63:28:8a:9e:e5:94:11:80:
a0:e7:eb:85:58:82:30:e2:f2:69:fb:7a:cd:61:51:52:fc:66:
c2:04:13:62:1b:36:ab:68:31:0a:1b:39:f0:da:91:44:52:24:
7d:57:80:91:47:bb:40:c5:59:6f:f1:cc:ee:32:d2:b1:64:ff:
8c:ef:61:45:29:74:61:ae:71:f0:50:a4:25:b4:94:c1:e1:66:
91:eb:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:53 2025 by rpki-client