Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File: BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier: ypNEVtW2/uwovWhGzUkT+5y670f2Jxs7NvtJTc/GTd0=
Subject key identifier: 69:BB:E9:40:93:EB:1C:B7:C6:DF:DA:80:0C:5D:EC:92:00:D7:77:AE
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 0194BC04F5E19A71F8A6ADEDB74E90F5AA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: L0loZZ93c79bEAbkMByWNPpBbIolM9V0X/khK+dDHsk=)
2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:e1:9a:71:f8:a6:ad:ed:b7:4e:90:f5:aa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=69bbe94093eb1cb7c6dfda800c5dec9200d777ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:25:69:c9:f0:5a:d4:ee:d6:a3:3e:81:59:
da:c0:27:f8:9a:de:11:43:f5:16:11:85:a4:9b:b2:
c5:9d:ca:8c:ac:b1:7d:fa:1e:ae:7e:79:ab:b9:86:
f9:f3:b6:ac:cb:f7:4a:d5:a2:d3:4e:b7:91:32:76:
e8:8d:4b:63:68:9c:95:24:5c:53:01:c5:b1:97:57:
6d:72:b1:31:98:49:e5:fc:a7:8e:9d:94:2c:9a:d8:
e8:04:1c:d1:df:f4:b9:09:4e:5e:50:3f:cc:44:8f:
53:fc:ef:28:7e:e4:0c:c9:e9:5f:c4:e4:95:9e:7f:
45:7e:b3:ad:42:d1:53:f9:76:1f:b7:f1:cc:55:fa:
41:5b:49:b9:bb:ec:5b:af:ae:fd:c1:65:06:d9:02:
ae:5e:91:d0:c0:86:77:f4:78:e9:69:2f:c2:53:03:
f5:fc:c2:98:55:3d:97:27:c6:8e:78:53:38:1b:4f:
6a:af:31:b7:92:31:54:69:0a:23:bc:f9:b3:68:b9:
f0:bb:bd:b3:97:e5:e5:5e:7a:c0:a4:22:d5:86:80:
d9:f1:c7:d4:ab:44:74:0a:1f:66:1c:4a:84:af:86:
a6:4f:af:65:d5:92:9a:ea:d1:12:a7:32:67:52:fe:
fe:68:fb:a1:98:8d:b0:1d:11:c1:2a:98:4f:34:47:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:E9:40:93:EB:1C:B7:C6:DF:DA:80:0C:5D:EC:92:00:D7:77:AE
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e9:d1:5f:ab:23:ee:89:df:30:69:b2:74:75:a7:f3:f4:2e:
ca:07:f9:d7:a8:66:d9:7c:94:ca:19:08:5e:33:0a:47:7d:7e:
07:13:e5:f0:61:9e:71:f0:70:a5:46:64:22:04:f7:59:1e:08:
05:bb:14:5d:5e:8d:9a:19:6c:e4:a7:0f:e7:39:fc:4b:7d:7a:
5b:2e:33:8e:c3:3e:73:f7:3c:c8:02:90:14:79:fb:fd:3d:86:
af:70:9e:5e:b2:76:cb:78:3f:b2:58:e5:dd:99:7e:e2:43:6b:
4e:76:37:e8:67:eb:bc:2f:c1:eb:23:d1:91:d5:36:fd:b9:1a:
c8:fc:8f:3c:0b:f0:e4:94:28:52:b4:18:21:0b:ee:bd:3c:4f:
0f:3b:9c:38:96:4d:27:f7:12:0b:9b:f1:d5:e0:42:fc:16:21:
f8:6e:fa:ba:0a:d6:59:99:e4:69:de:67:8d:d2:3f:44:da:99:
fd:7e:92:9e:43:ac:59:e5:71:bd:9d:60:b0:ce:cf:86:0c:e3:
3d:56:95:0a:05:95:fa:4b:91:f4:75:bd:50:53:10:df:fd:f6:
80:1a:ee:a4:bb:56:61:ac:9e:a8:b7:7d:11:98:fc:fe:f0:37:
73:2a:71:c8:29:83:75:7d:03:e9:3b:70:2f:b0:ac:4c:e9:1c:
69:67:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:05 2025 by rpki-client