Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File: BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier: 6yhn3XtyphVVCl8HfsPNzVnRgWg0gU4FIGk/PZvxHEY=
Subject key identifier: 8B:D4:05:67:EE:D2:FC:67:65:AE:0E:FA:D3:7B:74:F0:95:C5:12:F1
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 0194BD85AA1241350F63962179361C6F3840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number: 088F
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: IZT91FCL8YNU7UU+qtr9Tj3xa1/uExF1260n6yRfYm8=)
2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:12:41:35:0f:63:96:21:79:36:1c:6f:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=8bd40567eed2fc6765ae0efad37b74f095c512f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7d:4e:2e:b6:de:a4:81:4b:7c:95:e7:9a:fb:
9a:db:ed:be:e9:bc:ca:68:9c:13:0b:0e:86:71:c0:
33:04:14:0f:66:e6:e2:0a:90:0f:5d:5f:ec:f4:02:
03:0b:de:44:a5:00:9b:61:1e:08:26:10:25:fd:b2:
75:ef:53:2e:0e:6d:5f:89:0f:82:bc:23:82:2f:f8:
13:a5:6a:6e:f1:26:de:ba:4d:12:c2:04:e3:87:a1:
7c:62:1b:50:bc:c8:97:5e:5e:47:99:40:69:4b:51:
d8:d3:e2:e4:4f:1c:03:42:60:ac:b1:e6:ac:0d:0d:
6d:9f:c2:c5:0f:79:aa:cc:b7:b4:62:63:de:e2:0e:
6d:33:fa:53:be:90:ac:16:be:5a:d9:35:d9:0d:5e:
80:90:b0:d9:e0:14:19:c5:87:3f:d3:97:99:22:bb:
eb:00:31:a4:83:36:fe:89:17:58:ee:36:af:3b:93:
fc:f8:ea:a8:2c:1d:c2:7d:ed:5d:0f:f2:61:f9:fb:
ac:0b:8e:1a:86:1b:d0:d6:c5:54:90:8a:e3:8c:71:
21:70:b5:32:8a:64:14:27:08:02:8d:f0:1b:04:30:
24:9e:01:86:c7:08:bd:bc:10:11:d2:fa:4c:9c:80:
ec:b1:4d:88:65:4c:fa:73:06:87:f0:35:61:d6:0e:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:05:67:EE:D2:FC:67:65:AE:0E:FA:D3:7B:74:F0:95:C5:12:F1
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:82:8c:b8:dc:ed:43:f1:9f:d0:19:a1:c2:5e:69:3f:10:d5:
46:f3:96:51:85:91:2c:7a:81:4a:3e:cd:b5:b8:ec:ab:00:a8:
93:91:16:c6:af:7d:06:94:a2:f1:3f:57:a6:e4:2d:49:f3:7a:
2b:2f:37:e7:c7:ac:98:79:86:44:df:c8:d3:4b:95:f5:25:c0:
55:f7:70:4e:97:55:39:8b:f2:0e:75:47:ef:3d:7e:96:af:94:
d6:50:9a:7e:87:b4:20:be:57:92:db:85:8a:9c:f2:9e:8b:44:
aa:db:85:16:bd:ea:56:d3:54:30:b4:a9:b7:9f:39:5c:81:c7:
32:06:77:16:28:c3:cc:99:64:eb:a2:b2:a1:89:2a:f9:52:b4:
64:8f:79:6d:50:b5:02:68:fd:1a:f6:bd:be:80:b7:56:38:a0:
01:f5:9d:97:a4:07:df:c8:dc:84:b8:8a:26:d9:c5:91:1a:fd:
95:de:26:bb:be:c4:02:92:c6:11:24:a8:8d:b3:a0:c1:6e:d5:
fd:e0:81:e3:84:60:6f:3c:7c:e9:4a:98:56:9a:f2:6c:33:e5:
8f:a2:04:f8:e7:dd:1f:18:3d:74:c5:f7:44:d3:ab:d2:18:a9:
7e:91:b4:f7:b7:76:8a:53:b7:86:92:96:1e:06:e3:3b:4f:db:
5b:4f:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:50 2025 by rpki-client