Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: Gvj9o9zi0Ip59itKFWm/AFMWFqMs2djc8TgD+wcVyKk=
Subject key identifier: 9C:BE:38:AC:31:D8:A8:4F:94:97:FB:16:D6:58:9D:5E:5E:4F:A1:8F
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0194BD8548FBBE869FE5222B8C5AD7F3EEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: DMf87xTf+UoLJ/63iWcrgafYAs4ErzcyhEJyLoiFL3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:fb:be:86:9f:e5:22:2b:8c:5a:d7:f3:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=9cbe38ac31d8a84f9497fb16d6589d5e5e4fa18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:ff:2d:18:43:00:8c:e7:c0:da:0a:ca:92:
98:1b:4f:12:8b:97:be:b7:3d:97:0e:04:28:39:77:
15:88:b1:b6:8e:24:27:25:62:5a:25:96:e1:cd:d7:
f7:27:bb:f8:25:dd:73:b5:63:52:16:d9:2b:e3:aa:
2d:cf:19:1e:aa:8a:a6:9e:e3:6b:7c:43:0e:ee:66:
76:da:a9:9c:49:cd:74:22:e6:46:80:22:ed:5f:58:
e9:a2:a1:13:f7:b0:2c:a3:62:5f:59:d7:22:83:c5:
45:73:e2:1e:6e:86:14:10:10:e9:e8:1c:05:dd:ff:
f7:e6:0d:64:b0:9a:b3:e4:ae:86:57:b9:7f:03:14:
a0:ef:a9:76:e0:d8:5b:92:1c:7a:f8:4f:7b:12:b1:
86:9d:78:22:e7:52:3b:5b:09:95:a1:ee:bb:b1:2b:
f8:39:d2:4b:75:75:92:b5:f1:30:a8:94:02:74:63:
fa:f9:a5:01:9d:35:c5:d3:2e:7f:87:28:f9:26:b2:
84:78:b9:3f:e2:c7:95:e5:f1:e1:b6:98:0a:cb:47:
30:a0:90:1c:82:30:4f:cc:3f:f1:20:f2:b5:46:09:
ab:19:1d:89:2d:cf:10:07:e0:bd:c4:a4:0b:54:98:
ba:6b:e8:8b:37:48:35:03:08:5b:7b:51:9a:d9:e9:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:38:AC:31:D8:A8:4F:94:97:FB:16:D6:58:9D:5E:5E:4F:A1:8F
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a5:ab:cf:d7:a0:af:e2:72:ed:34:88:27:2e:94:9d:5c:ca:
af:27:21:8d:f6:e5:28:6e:3e:6f:5a:92:ba:7d:69:1c:53:65:
ec:35:d8:b7:2b:10:f9:64:49:dd:81:a0:8f:0f:52:9c:5d:53:
91:6d:21:c2:0d:b8:c8:cf:cc:a4:bb:22:0d:79:69:3f:bd:e8:
f7:2f:d5:7a:55:54:3b:74:c0:5d:de:e8:66:48:b0:d5:3a:37:
74:bb:8a:cb:15:b5:53:89:3b:fd:42:62:bb:9e:63:85:41:83:
ec:54:1f:49:6f:53:db:44:28:3c:df:50:c9:64:0e:a8:4b:76:
9f:fb:16:72:07:f8:07:89:76:70:82:73:3e:de:c5:57:78:f9:
ae:2d:6a:38:4f:8f:6a:7e:01:3c:1d:66:25:bc:04:4c:4f:92:
82:26:3f:de:60:10:8e:9d:8d:63:d4:90:ce:92:f4:94:a5:d4:
73:54:05:88:10:b7:d4:77:71:d5:51:ab:9c:9b:0c:a7:83:1d:
64:9e:06:24:ef:c9:24:35:2f:88:94:2b:86:e9:24:15:90:73:
70:e0:36:05:2d:08:1e:ce:fb:42:a5:45:ae:b1:6c:4b:18:d2:
3d:6f:55:4b:e8:b9:1e:61:64:c3:ac:7b:63:7f:e0:1c:e3:52:
74:95:e2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:33 2025 by rpki-client