Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
File: BBnxl_FzEXt1MfrLmmOJainZqaA.mft (raw, json)
Hash identifier: siQ/G76sZaoLyFC412gWjnnSxjg05gPKrjwQp4uHfzA=
Subject key identifier: 3D:55:12:C2:AC:15:1F:85:6C:00:36:85:FE:00:98:AA:A8:1A:E1:4F
Authority key identifier: 04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
Certificate issuer: /CN=0419f197f173117b7531facb9a63896a29d9a9a0
Certificate serial: 0194BD4E642E3F49C34C7A8FD98B614C765D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
Manifest number: 0B52
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: 7nvwMdfL4Uh8JLIW4K1RfoR3-vw.roa (hash: CcK4SjzWgLuNPuqtdp0Teo6txyqnY3Mzipf8+pbRh/M=)
2: BBnxl_FzEXt1MfrLmmOJainZqaA.crl (hash: NOQrMPuai+DTtfx8IjB2+TknUbZ30P1g5sM9B0/D3QA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:2e:3f:49:c3:4c:7a:8f:d9:8b:61:4c:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0419f197f173117b7531facb9a63896a29d9a9a0
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=3d5512c2ac151f856c003685fe0098aaa81ae14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:57:9a:a2:27:88:21:f8:d2:c2:a4:b7:d1:
dc:dd:73:43:26:fa:82:7c:c8:84:04:da:4e:90:54:
e7:78:77:5e:bc:b8:db:f0:5d:d6:1d:f3:1f:8b:2b:
24:ee:8b:1c:f9:1d:2a:ba:8c:e1:61:92:3a:00:a0:
21:3f:1d:e0:3f:a4:c6:80:15:6b:cc:7f:ac:d3:20:
ad:34:f1:aa:13:5b:9a:d2:e8:ed:7a:9b:a9:83:10:
9d:e4:2a:aa:af:57:f5:da:79:91:46:5b:81:08:a1:
e5:0c:c4:b7:99:4f:b7:4c:36:5f:78:3d:39:57:48:
fd:68:f1:54:65:a0:3d:4c:90:65:04:de:f4:f9:36:
08:b8:12:bf:95:8d:a5:e6:b7:6b:8c:9e:49:bf:71:
2c:15:99:1f:f2:67:7c:fb:e9:ce:a6:9f:e7:fc:38:
af:bc:8c:2b:aa:db:cc:e8:de:05:20:ad:87:54:a0:
81:9d:46:f6:59:6a:23:d5:68:fd:24:24:5a:7d:f6:
dc:73:b8:94:82:0a:7b:7c:e0:a5:88:a4:6d:ac:6b:
64:ab:34:99:53:38:a2:e6:49:ac:e2:3e:32:8c:ee:
f6:c3:b0:49:75:e1:f9:67:a1:34:d3:3f:dd:f0:ba:
d9:de:dd:31:7f:59:18:d4:0c:e4:56:26:c3:6c:15:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:12:C2:AC:15:1F:85:6C:00:36:85:FE:00:98:AA:A8:1A:E1:4F
X509v3 Authority Key Identifier:
keyid:04:19:F1:97:F1:73:11:7B:75:31:FA:CB:9A:63:89:6A:29:D9:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBnxl_FzEXt1MfrLmmOJainZqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e28021-61d2-4a75-9c2a-b1cb03a3fd5c/1/BBnxl_FzEXt1MfrLmmOJainZqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:6d:42:b1:2a:2e:63:8a:f1:19:f9:fd:e3:fe:3d:93:70:
94:4d:b5:7c:2c:b3:79:f8:fa:cb:dc:24:6d:7f:b0:03:40:d4:
98:ea:3b:10:a2:f4:11:b8:d0:fe:6a:6c:9c:3e:15:b0:b9:40:
ef:6c:d9:9d:30:5e:22:70:b7:27:5c:7d:19:fe:e3:64:2e:68:
c8:d2:b4:27:43:96:31:85:33:ae:5e:f6:07:a7:15:5f:55:6b:
b5:41:92:ed:4d:b8:82:58:95:43:12:70:a3:16:d1:e0:af:07:
b1:f9:e6:58:98:03:b6:70:92:b2:2c:2e:94:af:7b:5c:49:11:
a6:2a:30:b7:f9:4c:a1:58:e2:61:76:6d:cb:9e:f9:2d:fe:c9:
9c:4e:e0:a0:65:9b:6f:38:cb:b9:8f:ce:0e:df:88:2c:95:3c:
c6:31:11:a3:ad:ed:ee:38:0f:ca:b1:4f:48:38:3a:29:54:ba:
48:c8:fc:88:c2:3c:43:73:b9:73:ee:62:b2:8f:fd:b2:31:9b:
ad:f8:d5:11:f5:1e:92:6d:e3:89:25:1b:4d:1e:00:91:f5:c8:
1e:9f:44:d7:84:37:2c:cc:8f:d9:de:c6:78:e9:2e:f5:be:d5:
64:b7:b4:62:5d:d0:3f:ba:fb:22:df:f3:d5:aa:a0:7b:b4:0d:
69:a1:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:44 2025 by rpki-client