Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: gpWMk9deaxg75Bh6QvsprcpP3KUGZngoKgDZzeZFMqc=
Subject key identifier: 76:E3:ED:DD:DA:68:F6:C1:02:D8:F9:41:ED:72:47:3A:4C:6B:1E:66
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 0194BCE0B9006F388D31F090E5AE72B3AE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 12E7
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: L6OyPX2tt18eOnWJ/emfcnBwPV5WMAyUcfSqSJx/LYU=)
2: RyM0TaDcy3MATcF4kZgnomIhcSc.roa (hash: u1hwu96g0Ti3Leptf/8mOz/le6P/VB383vy/UE8/YqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:00:6f:38:8d:31:f0:90:e5:ae:72:b3:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=76e3edddda68f6c102d8f941ed72473a4c6b1e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:32:d4:18:ed:84:70:75:05:24:42:48:3a:
23:7e:7e:47:b2:36:99:e1:b4:91:0f:85:8b:94:8c:
1e:e0:0c:fa:6f:eb:db:25:04:0d:6a:f0:bb:43:45:
9a:f0:11:d2:41:cd:5e:f3:df:83:0e:b3:3b:02:71:
41:b4:08:3d:aa:47:a9:a1:06:82:4c:ac:43:f1:63:
36:86:c2:f0:c9:c7:dd:cd:da:d4:06:29:bd:fc:e0:
f5:5e:40:0e:9f:27:f0:3e:41:03:ce:d3:30:9f:76:
c7:1f:e7:f7:b4:2f:7f:79:9e:c0:c5:65:e3:02:43:
56:6c:6e:c5:98:e2:92:b1:66:2c:df:0b:b4:c4:b2:
b3:8f:bd:e9:4a:82:fa:c6:81:b0:fb:66:57:2e:c2:
85:39:b0:00:d3:c9:a2:53:e5:24:af:14:14:03:6e:
4e:e3:2e:c9:9d:98:b8:6e:31:14:cf:77:aa:49:35:
57:41:91:25:5e:1f:92:4b:ea:ef:ab:a0:68:4c:28:
9c:45:14:c2:44:84:ae:31:fb:07:af:2b:c4:68:32:
8b:cb:ce:53:0a:74:4f:6d:2e:31:66:f1:b3:a4:f4:
b3:4e:02:8e:0d:98:66:45:1a:f4:2d:4e:3d:c0:0c:
f4:46:a5:21:86:39:1e:08:b1:35:90:01:b8:c7:e0:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:ED:DD:DA:68:F6:C1:02:D8:F9:41:ED:72:47:3A:4C:6B:1E:66
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:c6:0d:cb:fd:b7:9c:16:10:06:27:7a:7d:b4:b6:38:ad:
f3:bd:b8:28:87:e0:1d:84:11:77:ce:f0:d5:ef:2b:a2:31:1d:
22:78:cf:9f:e8:af:0e:12:d0:a2:d0:44:4d:c0:29:27:ef:57:
23:f5:c1:9a:5e:11:52:10:52:47:b2:86:bd:6b:f1:bd:18:58:
3c:2f:03:10:e0:e1:fc:f2:ea:10:41:16:1d:0d:ba:0a:79:fb:
b9:a2:0b:ec:79:78:9b:a7:57:cd:53:0a:51:db:58:40:70:a2:
ba:0e:86:8e:45:e4:df:0e:18:dd:e5:50:f9:ae:0a:91:dd:62:
8f:9d:9f:d5:46:ef:33:0a:0f:c5:26:26:37:42:ba:3b:76:91:
d3:4d:ae:e0:61:37:2e:0f:b5:1b:8b:a4:26:38:8a:d0:2a:18:
87:9e:da:8e:4c:7c:a6:db:9c:0b:f1:31:60:91:ac:09:03:99:
49:0b:02:39:73:d8:53:f2:23:db:05:fa:01:39:23:1a:67:59:
b0:80:02:36:83:a3:0c:23:d3:46:7f:57:5f:9b:be:00:22:85:
98:d7:e7:8c:92:53:85:18:94:f9:ee:6a:5f:0e:26:7f:4a:60:
c6:2e:49:71:73:4e:6b:0a:2d:e5:85:05:82:15:10:95:61:f1:
d7:d3:d1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client