Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File: bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier: 29Q2ZoJl+JN96gWGtwM5jCNbG1I5dB5bfTGCnVVfWjQ=
Subject key identifier: CE:3A:8C:0C:C6:61:39:99:B3:47:92:A6:B6:0C:53:D0:7D:83:B6:C8
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer: /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial: 0194BBCED717629860502940CC255F6D223D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number: 09C9
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: JePrcwXp05akQ2O5vImuTat+Cyqpy7TruEZx/1dihRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d7:17:62:98:60:50:29:40:cc:25:5f:6d:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=ce3a8c0cc6613999b34792a6b60c53d07d83b6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:bb:10:24:1a:81:5c:b0:dc:c4:5a:d3:7a:
1f:6e:4f:4c:e9:f4:62:09:e5:6f:00:83:cc:d7:78:
95:96:1e:00:a3:87:9b:cd:76:f1:44:b8:a8:57:c7:
ab:81:fd:40:6e:db:18:ac:9d:0c:1a:7c:77:38:70:
43:1d:52:f5:63:24:49:2a:21:9a:45:22:c0:68:e8:
34:b9:65:d0:59:de:7a:ee:45:d4:67:51:fa:6a:dd:
8b:72:dc:71:eb:95:e1:56:31:18:6b:06:89:ea:14:
be:0c:43:e1:7d:9a:5f:ec:2d:a0:2a:15:eb:45:10:
b8:af:ba:82:24:6f:a7:f2:c3:84:82:a6:c6:b1:a1:
fe:9a:b5:27:4a:d2:dc:07:24:91:91:d1:8f:23:2c:
9d:22:71:31:10:bd:c5:73:46:ec:17:23:b7:f3:66:
a6:c7:b5:11:7f:f1:ea:64:3d:6e:2a:9f:a1:ff:48:
01:96:e1:08:25:fd:74:d2:4a:61:9a:33:23:40:5f:
2c:d3:c3:ed:3e:13:d0:95:c8:24:33:c9:db:95:b6:
e1:90:0a:3b:51:e8:1e:7f:18:58:69:d4:d1:9d:8e:
f2:6b:bb:21:8e:3f:a7:46:cb:48:c0:06:dd:16:71:
f7:75:ce:6f:7f:ca:d5:0a:9f:5c:a1:04:be:2e:da:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:8C:0C:C6:61:39:99:B3:47:92:A6:B6:0C:53:D0:7D:83:B6:C8
X509v3 Authority Key Identifier:
keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:00:84:c5:f6:4c:00:2d:aa:1e:4b:8a:8e:b0:f6:14:eb:
28:52:c8:d7:62:99:a1:8a:aa:43:c1:0e:65:aa:b7:f8:35:8d:
be:18:e7:75:fd:25:57:c5:15:1f:19:e6:46:c4:a9:e3:11:7f:
90:40:d1:6f:a7:b0:b3:22:d7:c6:9c:dc:f6:e9:90:01:4e:a0:
fc:5f:96:46:6e:fb:19:3a:c2:70:5a:b5:fb:0f:03:88:ff:9d:
00:d1:07:b1:55:55:bc:94:1d:61:0f:4b:f9:ce:25:c8:e5:cd:
fa:0b:56:ad:81:c9:96:7d:dd:9c:34:2f:ce:7c:e2:8d:ce:1a:
f4:2f:e8:e1:b9:6e:a0:52:b7:aa:5f:3c:d9:0d:ec:09:65:dd:
74:10:b2:08:95:50:c8:e4:9c:be:81:d2:fb:3e:25:a6:9b:97:
21:0b:b8:fa:a0:7b:d0:3d:44:42:95:9d:85:bb:0a:39:d5:c3:
bc:a1:5a:d0:ad:cb:12:bb:bc:ce:17:11:d5:90:49:bc:67:d7:
29:36:d5:c8:12:2c:87:94:41:7c:c9:f6:ca:4a:f2:46:74:38:
0e:ea:86:e9:23:78:e3:dd:ad:89:45:e6:db:f3:88:2d:8a:e9:
7e:36:45:b6:c8:ad:92:f9:db:15:a5:02:be:aa:ed:ea:b9:d4:
1d:06:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:09:14 2025 by rpki-client