Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: g94oKZyJF5fwoJpMVDtEzI6P1Wi6u1ffrv0+Ff9fv/U=
Subject key identifier: 44:FC:47:07:04:33:21:7E:DD:E5:EB:D0:71:E1:E5:63:7A:C9:47:B8
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 0194BBCE3366B20F2C4C3C32CF89ADB4FF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0765
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: /cW5XM8chDc0WBt1T3MEDSR6YVLu9HxbUsJQ67NiIWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:33:66:b2:0f:2c:4c:3c:32:cf:89:ad:b4:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=44fc47070433217edde5ebd071e1e5637ac947b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:75:eb:b1:7f:af:e6:75:55:36:9a:f0:22:
00:bf:3a:ef:78:28:d4:90:f0:d0:6a:c5:fc:ab:3b:
28:79:66:be:ce:90:33:46:e6:92:21:32:c7:e2:98:
1f:e6:a6:df:0b:6d:b1:ad:4e:4c:cb:af:60:5d:1e:
ac:5f:41:5d:ad:b7:11:a0:81:eb:25:5f:bb:44:14:
18:48:48:9f:7f:c5:0f:45:a6:4e:95:12:a3:2b:e5:
5c:e2:9c:88:ae:e5:1f:8e:dc:b2:9f:75:23:83:dc:
da:77:cb:fa:fe:01:22:bb:b6:a9:b2:59:49:40:a3:
65:ca:33:a7:15:fc:58:18:6b:55:bb:63:c5:d6:35:
3f:be:d8:38:c9:3b:a5:b6:5a:70:e7:9a:a5:ec:76:
dc:fa:b0:bf:59:c1:6b:a0:c7:c6:60:84:04:c0:7d:
e6:5c:26:a0:4d:0d:ce:1c:8a:04:3f:de:6c:2f:bd:
20:b7:e0:22:c3:05:f5:72:ca:b8:fb:9d:1e:46:70:
c3:8d:6f:03:86:8c:8f:93:0e:bc:8c:09:45:00:0b:
e0:ad:52:7e:3d:96:da:ee:5b:a2:d6:03:64:ef:34:
a7:eb:42:d0:ae:57:84:fd:7d:18:2c:dd:45:30:bb:
f5:be:d5:c6:73:bf:df:83:f3:bd:b9:4c:c4:4b:47:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FC:47:07:04:33:21:7E:DD:E5:EB:D0:71:E1:E5:63:7A:C9:47:B8
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:92:6b:9b:7b:1b:c9:3c:b4:ce:70:a7:fd:09:fc:05:3a:60:
55:21:c9:19:80:a5:41:90:74:74:88:4a:0f:26:8f:16:30:42:
19:9c:12:71:6d:6b:46:45:8d:9f:e4:54:e6:ca:8a:ac:b2:66:
32:29:0b:cf:18:89:7c:b4:a2:d5:de:68:92:00:c4:3b:8b:f0:
a0:4e:49:f3:3e:59:6a:a6:e3:5a:72:03:3c:f4:23:fa:02:12:
69:e7:ba:78:d0:5e:32:9d:c1:8d:ca:28:1b:89:ee:58:5a:53:
89:a9:e3:24:60:37:d8:7c:4f:5b:8a:8d:2b:8c:eb:58:80:ed:
5e:0a:aa:4a:07:cd:c8:f9:38:d1:15:52:e1:6d:d0:a8:e7:f0:
ac:44:d2:6e:50:23:ae:b4:a5:32:93:8b:0b:8b:c0:1a:59:c5:
c2:bb:74:f7:4a:92:7e:db:8e:c1:b8:8d:d3:df:03:9e:ff:f6:
1f:c2:35:f1:1a:d1:a5:69:07:f4:65:02:e1:f4:e4:3a:a0:09:
67:49:de:c3:6f:eb:92:f8:d6:4e:3e:23:cf:a5:44:17:76:f2:
c7:ec:67:e4:f6:96:14:2e:cf:b3:2b:7a:58:86:c4:a8:8b:67:
8c:9e:b0:46:0b:56:21:de:61:58:c8:bf:b3:9c:04:e1:9b:37:
d6:4f:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:39 2025 by rpki-client