
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
File: bss_s76ozI4249p9nEcEm_xv-xQ.mft (raw, json)
Hash identifier: oYY0ogCCrlLG+JzyEoFohcCcPC8MG0hEraQ9sO3hMag=
Subject key identifier: 42:9E:18:A0:F2:33:77:43:F6:43:41:C3:D7:D6:66:37:D2:55:36:91
Authority key identifier: 6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
Certificate issuer: /CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Certificate serial: 0194BD178462D0256696D2D5A2743C79FDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: HpcoPHWXelsEc83A5lrjHQcz4ck.roa (hash: z5HkkcDJsILTMlUiHF/hxZcjE8u956W+aTccBwWVcDI=)
2: KaQ1cbhsU-_BkoECZGtKOYFMwp4.roa (hash: l5AAqJ6KrxG8q9wOC3vocpvn5IVvSVAwWKvgrRqMXhc=)
3: SA-FzbdtGCCG9QKC4S4YHJSWsmI.roa (hash: PGidG7Ka16kE9y3JRE1oncEZXH6tKTIKybnjJfvB2js=)
4: bss_s76ozI4249p9nEcEm_xv-xQ.crl (hash: XB2LwqblZE/8J3o+F3utt84xbcIDc8gS7Y0Z/LTpvLI=)
5: uipqeN76722FPmspleIyOjfn3Zk.roa (hash: gwJEBBmEVVFOjb4Xj28XR2GIE/hpooHskPB8J+P99Gs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:62:d0:25:66:96:d2:d5:a2:74:3c:79:fd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecb3fb3bea8cc8e36e3da7d9c47049bfc6ffb14
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=429e18a0f2337743f64341c3d7d66637d2553691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:fb:94:47:25:29:c8:f7:b8:01:e3:9e:f1:
49:8f:71:8e:c2:ad:a2:78:36:e3:6d:02:4a:36:23:
5e:bb:59:a7:21:d1:e5:d6:88:43:16:8b:b4:be:08:
35:69:03:63:ff:33:0f:31:a7:f8:e8:90:af:8d:a3:
75:9e:96:59:06:7f:ff:23:67:a4:58:c9:7c:d9:a3:
b7:9e:2f:4b:09:9c:79:98:c8:31:27:9d:15:2d:d6:
a8:2a:24:10:e6:6c:5b:d4:d1:e1:d2:48:b6:63:e8:
2d:fb:19:44:0d:e2:d3:49:6b:a4:b8:ae:3b:b4:42:
97:e6:d6:d5:aa:5e:e5:a1:dd:32:9a:57:e5:cb:92:
55:81:49:c6:29:ec:cf:38:16:78:7f:8c:6e:66:df:
c9:3d:26:31:69:c4:6e:22:95:22:04:6f:43:a5:f4:
a4:38:24:86:8f:f6:37:24:d2:e6:dd:7b:8d:a1:78:
7b:aa:4d:c6:a5:b8:ad:25:62:bf:26:33:34:b8:5f:
c3:e1:67:b2:86:f6:bf:ed:d8:d2:89:e3:95:17:23:
d1:34:47:30:40:6d:0e:60:28:00:40:90:ba:79:91:
57:75:57:2e:31:11:47:9f:5b:e3:55:9a:88:5f:3b:
d3:29:2c:0d:86:8c:00:05:be:4f:3b:aa:34:57:3d:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:18:A0:F2:33:77:43:F6:43:41:C3:D7:D6:66:37:D2:55:36:91
X509v3 Authority Key Identifier:
keyid:6E:CB:3F:B3:BE:A8:CC:8E:36:E3:DA:7D:9C:47:04:9B:FC:6F:FB:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bss_s76ozI4249p9nEcEm_xv-xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0ba7e2-63a2-4c41-86b5-a370f4ba2d2b/1/bss_s76ozI4249p9nEcEm_xv-xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a9:a0:12:0c:87:af:2f:38:40:bd:88:ad:ce:c9:1a:02:7b:
69:d9:ef:0d:59:fe:a3:6c:46:14:d9:37:5c:4b:95:e3:07:ea:
e4:75:41:e2:88:73:26:53:e9:3a:bf:66:2f:9e:be:65:7b:83:
2b:bf:d7:ea:ac:12:d5:53:9d:c3:db:c9:e5:6d:b6:b3:59:bc:
25:9d:a4:8c:16:69:b1:8e:d7:04:41:1b:16:77:b7:2a:76:c3:
16:c3:59:5f:b4:e2:c8:0a:9f:c5:c0:cf:61:9c:7a:99:3c:2a:
72:6b:f1:95:b0:8d:86:49:96:c7:15:d7:34:e6:7d:05:6f:bc:
64:02:33:fd:ee:e8:58:9d:35:68:3c:b3:c8:ee:07:48:03:40:
1a:1b:6e:59:64:b1:92:a1:9e:d9:d1:1c:50:d4:11:49:6b:f5:
27:94:01:72:e1:bb:c8:76:5d:48:04:60:ff:f5:36:0e:26:bd:
51:37:6e:f9:b5:d9:fd:4b:96:43:25:90:30:4e:5d:8a:31:75:
49:24:ec:7f:78:b5:a9:98:56:c1:1b:4d:ce:ed:91:1f:4c:48:
e9:bc:6a:0f:3d:e8:ca:fc:9d:0e:bf:72:06:f3:64:40:7d:0e:
f6:81:da:1a:d4:58:8d:83:f0:6a:0c:36:32:53:c6:4b:5f:ff:
0a:81:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:16 2025 by rpki-client