Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: /YmHjvcuwvezoHFfnKagZ77nWERkw/WfBjv5bBG/0hk=
Subject key identifier: 99:61:39:7C:C2:78:85:D6:07:76:3E:02:9A:F6:F7:64:3A:95:3D:91
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 0194BBCDF33FD468C7FDB6D0361E53A8C4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 076A
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: QqMRwZcPzRqBn8vkjzFqAWnFF2eMDOiLKGfyhpj3gk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:3f:d4:68:c7:fd:b6:d0:36:1e:53:a8:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=9961397cc27885d607763e029af6f7643a953d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:92:f7:2f:0a:c4:ad:bb:57:bb:5b:90:70:
f8:84:4a:71:8c:ed:8f:bf:f9:25:54:e2:35:de:b1:
7c:5f:ac:e6:33:ff:54:47:3a:36:71:c7:bf:70:30:
6c:77:2a:45:4c:e5:58:a9:a1:a1:33:d6:34:a8:a6:
fb:ef:df:9b:e8:e0:95:a4:7b:90:f3:ab:8b:12:0d:
1f:1d:59:ed:6c:82:73:8b:cf:e6:91:5d:b9:80:10:
5a:28:76:2f:90:7a:df:07:62:ea:3b:c4:fa:f4:5e:
0b:31:ca:60:34:52:74:91:63:79:42:c0:d4:d4:3c:
84:02:19:66:3d:88:4f:35:86:a8:00:f8:16:e3:ab:
ab:b9:4a:bb:3c:8d:f9:6b:68:82:d9:cc:fd:a3:bb:
5f:a5:96:56:ef:44:e4:06:b0:33:3a:1c:8e:b9:93:
8b:93:38:8c:16:0b:02:df:e8:0c:d8:d5:35:bf:d9:
9d:ec:ca:ec:bd:c9:66:f9:87:76:41:da:3f:15:11:
f4:0c:7e:98:d0:92:52:81:1a:ab:4e:d6:72:c5:98:
db:1d:6c:8e:3f:c2:b3:b1:a1:a2:23:f8:45:36:c1:
fe:89:3e:60:a5:25:ca:7c:c6:90:f7:c1:87:f8:ea:
05:98:7a:2f:ce:26:01:84:c0:65:fb:7e:24:7d:36:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:61:39:7C:C2:78:85:D6:07:76:3E:02:9A:F6:F7:64:3A:95:3D:91
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a7:aa:65:fd:9c:2d:8f:32:39:ac:d9:56:93:68:d3:84:2b:
23:17:6c:b1:57:8a:70:a9:2f:ae:16:bb:2a:0f:1a:db:6d:a6:
8a:f5:30:87:e6:ee:bc:be:ac:26:0f:95:4a:41:b1:09:30:b1:
15:ae:e5:1a:1e:05:49:1c:97:0f:29:80:32:6a:d4:28:88:67:
98:05:4c:f0:4a:5c:fd:52:32:2d:56:22:2e:78:5b:4f:2e:bd:
d8:60:c4:ab:0b:3d:e7:9d:3a:59:a1:c2:49:8e:a8:14:93:f6:
05:f7:d4:e0:41:5d:3a:c9:d0:fc:5c:9e:a0:b7:f2:ee:04:f2:
d9:46:a1:91:7f:d9:7e:23:2a:8c:64:25:e8:05:54:f5:53:e9:
a7:67:98:5a:ae:06:28:b8:50:5a:f8:4a:77:21:72:1b:68:f6:
0d:73:89:96:05:f0:51:41:79:50:9c:eb:5e:b2:92:d7:51:b0:
c8:69:b8:82:53:ea:ad:3a:e4:73:ce:ac:39:2d:30:1b:89:0f:
70:45:9e:eb:1d:97:e5:95:69:cb:f2:22:ac:47:1e:99:8b:d5:
64:6d:1d:bd:50:78:68:dd:15:5e:49:55:ca:1c:aa:6c:19:69:
56:d7:d2:fa:3c:b5:3a:8f:83:1a:78:af:65:72:ff:79:cd:e1:
54:6b:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:53 2025 by rpki-client