Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: TALxqG/TTl8pzVKQB1lWyAwU+8ShfkroyiH6r/b2Fvs=
Subject key identifier: 21:07:74:C1:94:2C:9D:34:AB:60:C3:09:CB:BB:8F:63:39:D1:7A:55
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 0194BC3C7FEA9ACED31CC13A0469B18E4EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: r8cnhgYN0dbxvB+Ct9sBPSRZMccMQyfMBVn1el9rnBE=)
2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7f:ea:9a:ce:d3:1c:c1:3a:04:69:b1:8e:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=210774c1942c9d34ab60c309cbbb8f6339d17a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:63:3a:c7:8c:a8:1d:ba:b0:09:e6:1c:68:
3b:d3:6a:69:3d:f7:00:5b:26:66:91:ec:36:5d:bc:
06:cb:aa:48:dd:76:96:39:cf:36:9f:28:da:a7:39:
fc:43:ee:4e:62:62:26:5c:b2:03:2c:1f:cc:92:1f:
5d:1e:b1:df:a8:03:1a:25:72:4e:f6:62:92:48:45:
48:6a:d8:14:48:d5:72:39:cb:fe:98:27:42:d4:00:
b4:46:b8:9f:cc:13:41:ee:8a:94:cb:70:96:d2:7b:
ce:d9:2c:c9:86:01:83:4c:fe:7f:6a:2a:d8:18:88:
5b:6f:41:0e:04:c8:23:6f:ef:7c:81:81:a6:3a:b9:
cf:24:20:ee:26:64:e9:38:48:81:ac:59:0d:56:96:
47:cc:ca:71:6b:6d:d1:09:e7:1a:f0:2a:5c:37:ee:
d2:78:ec:54:c7:33:3d:46:6d:1c:c2:04:c1:1d:1e:
be:25:e5:a1:52:6e:4f:d1:97:77:06:37:78:30:0f:
06:dc:97:14:d1:66:94:95:b9:cb:df:6c:d0:fa:d8:
73:9b:8a:a1:da:9d:ed:5a:fb:a1:dc:1c:12:da:c1:
39:22:4c:12:50:e4:cb:a4:1f:07:ff:4c:ad:b2:f1:
5d:b2:49:2d:a4:6a:be:72:34:88:3b:e4:fe:55:00:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:74:C1:94:2C:9D:34:AB:60:C3:09:CB:BB:8F:63:39:D1:7A:55
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:78:dc:86:67:4c:1f:01:26:dc:27:fc:b3:cd:b3:94:be:d2:
a4:d7:25:ff:9a:b0:a6:56:41:38:85:aa:3b:0f:4a:2d:c2:18:
8c:87:0a:48:e6:ad:c8:08:8e:da:30:f6:db:4d:c7:a2:46:84:
7d:ca:47:e1:f7:5f:21:45:80:73:09:d6:39:bf:d5:08:9d:b1:
6a:af:68:5e:87:13:fa:7c:94:ac:c3:66:e3:e9:e3:13:2d:48:
5d:9e:00:3f:02:9b:ca:43:3c:f7:da:7a:ac:0d:18:7c:55:e9:
17:52:26:41:8c:9d:4b:92:32:01:70:2b:8f:23:f9:bc:31:8c:
69:bd:e5:e9:d0:51:c6:91:17:89:d8:ca:c1:8a:1c:b3:87:04:
09:f7:ed:17:a6:06:e4:d5:f4:8b:ff:2d:74:02:0a:6e:ea:ca:
a8:db:45:56:d7:bd:f2:cf:47:a3:84:a1:aa:f6:fa:77:60:ea:
6b:30:a2:1d:06:57:3f:33:63:64:1d:59:51:ee:de:23:58:02:
40:fd:89:d4:88:14:92:cb:8b:16:f5:25:2d:56:d0:0f:97:47:
ae:3b:5a:c3:da:dc:72:7b:b7:05:2a:18:4c:2c:4b:85:b3:1e:
ab:4a:3e:52:9b:57:cb:fc:99:02:7e:6c:0a:57:93:c8:bb:43:
36:a5:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:19:59 2025 by rpki-client