Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: xGK2Sv87eb2J8qkTyC0cAknGaF94TRaUUWuHKGzuLHo=
Subject key identifier: 2E:7B:AB:65:29:32:D4:B0:57:3F:7B:C8:CA:6A:6E:F3:64:D7:4B:9F
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 0194BBCDF3F366A80598AF49D09D7288B85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 124F
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: HlrObtMO8See6TVg7EiYy1bb47niBhBIF0UtebSt794=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:f3:66:a8:05:98:af:49:d0:9d:72:88:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=2e7bab652932d4b0573f7bc8ca6a6ef364d74b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:dd:10:7b:33:dd:42:45:9e:cf:cc:61:dd:
f0:77:be:e7:18:92:cc:9b:67:46:38:5a:b6:7f:7e:
20:32:3b:96:02:a8:57:b4:b4:cd:4b:f2:4c:65:9c:
b6:46:e8:3c:29:9d:91:55:27:40:c5:31:42:61:0c:
df:1a:87:a7:cb:49:d5:63:d9:b2:1e:e4:72:51:a5:
13:6e:f0:c5:ae:b2:31:a4:77:a2:fb:7a:2e:21:d7:
84:dd:d0:e7:87:51:db:77:ad:99:b2:48:3c:74:32:
a6:8f:b1:4d:bf:b3:92:14:6e:51:b2:a8:7a:8f:62:
ae:af:96:1e:2f:45:23:b3:cb:03:a6:e8:0a:b7:76:
56:2a:59:c3:f2:5f:95:0f:54:fc:56:95:7b:6d:74:
b4:cc:6b:12:e8:98:f3:be:a8:81:64:ff:f1:28:6f:
bf:d6:8e:b5:fe:95:85:6e:ec:ff:21:7c:6d:e3:cf:
8f:3d:ed:b5:76:19:de:a1:c5:fa:47:5f:b4:89:9b:
37:bf:0d:04:a7:01:39:0c:2e:b9:b8:bc:e8:1d:fc:
2c:c9:4e:b2:2e:b4:c7:34:cd:fe:f9:34:b1:ff:b8:
c2:e3:3b:fa:ff:24:41:1a:23:52:11:bf:18:7c:af:
d7:80:41:78:c9:b0:1f:d0:f3:cd:93:94:84:3f:01:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7B:AB:65:29:32:D4:B0:57:3F:7B:C8:CA:6A:6E:F3:64:D7:4B:9F
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:3e:f9:07:66:c9:36:52:35:f9:94:66:c5:d1:9b:1c:17:
99:29:18:09:e3:4b:67:d8:8a:9a:ad:3c:75:eb:87:25:ff:6d:
4e:29:34:82:b3:7c:b6:44:ca:93:7e:0a:76:ef:24:3e:01:22:
6e:b7:4c:fc:ed:79:88:12:b7:12:d8:ef:cc:35:7a:9d:75:89:
77:67:83:e2:94:55:e2:71:88:80:e5:91:fe:c3:f8:b7:52:a6:
dd:4e:e3:6c:19:99:19:2a:7c:f9:41:c7:65:c7:be:36:ed:70:
31:37:a4:8d:dd:17:19:dc:dc:63:2d:fb:bc:c1:2b:bc:9f:86:
b7:3f:13:67:53:d9:19:26:74:43:8a:98:64:16:fe:e9:ea:38:
c4:95:fa:15:5d:e9:56:ea:b0:c2:cf:f5:cc:0f:d6:b7:63:99:
c5:79:82:2f:4f:8e:f2:6e:78:f1:35:4f:0f:f0:75:f5:7b:d3:
0e:f6:49:a5:64:b1:e7:8a:05:02:01:bb:65:61:53:65:8d:6f:
40:d0:46:ec:97:3e:56:fc:6d:26:7c:bf:4a:b2:fc:18:5b:3b:
5c:e6:56:e0:d6:d3:8d:42:64:32:dc:a2:25:b1:0c:89:e5:4b:
db:56:cc:8b:d9:10:a2:5a:05:d9:89:d3:b3:a8:56:3e:06:84:
7a:6e:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:37 2025 by rpki-client