Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
File: BzzBj8cG31qZM7C-INzLBGdb9HQ.mft (raw, json)
Hash identifier: tkBl0be9Y92Y6iMYhC9vbML4QLfj7zQ8Yuh0ShrvGqM=
Subject key identifier: 9C:79:D1:8E:F1:C5:F1:20:16:B0:D0:1A:5E:A7:75:5B:D3:A1:B8:53
Authority key identifier: 07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
Certificate issuer: /CN=073cc18fc706df5a9933b0be20dccb04675bf474
Certificate serial: 0194BD8577BBB383CE67CE9465A20A3BEB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
Manifest number: 1105
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: BzzBj8cG31qZM7C-INzLBGdb9HQ.crl (hash: LCiBqWmOGXWKVuIfm71MgkA7wehWdA+olh/7j9DTphY=)
2: goFsxxYVVDsH1YxnuVEoHVEyuUQ.roa (hash: H+4TEC+hHsfjX7/LNloV4KRFUkMNXemYneHOCftwWZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:77:bb:b3:83:ce:67:ce:94:65:a2:0a:3b:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073cc18fc706df5a9933b0be20dccb04675bf474
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=9c79d18ef1c5f12016b0d01a5ea7755bd3a1b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:02:b5:53:c0:ae:8e:23:70:be:ff:13:79:
e5:85:08:75:2a:01:17:2a:f6:7b:be:c3:90:31:d4:
65:9c:ee:13:09:8b:b5:3f:b6:d4:c4:10:3f:05:78:
54:f3:d9:77:49:fc:4b:43:0d:e7:ea:75:0e:70:ac:
74:85:e4:4c:b0:bf:13:b1:d3:48:53:74:04:c5:cf:
91:95:1a:e4:bd:f1:9a:a7:d8:12:d1:4d:ad:e4:b4:
16:46:c3:78:63:8a:44:42:32:fa:13:dd:02:e6:07:
e3:94:d1:8b:39:7a:59:ee:d1:11:6a:89:6f:07:34:
8e:f0:8f:90:2f:da:80:ee:69:4c:07:08:5b:e7:18:
4b:e4:f4:79:e2:08:f8:7f:61:ff:54:ea:30:a8:c6:
c2:b3:df:97:95:26:ef:29:d9:31:50:5f:99:78:d2:
33:57:5f:78:98:58:ff:b2:b6:d3:a6:08:59:34:38:
7d:65:86:64:56:77:5f:97:af:83:48:85:f1:8c:1c:
3a:5a:cd:a4:aa:3c:32:d2:76:8a:0a:f9:03:06:68:
f6:80:4f:5a:0f:40:4e:e7:e4:5e:cc:b5:8e:23:6a:
36:e6:44:bf:cf:7e:a3:fb:42:c5:fe:4c:75:08:03:
da:16:42:8e:83:0a:3c:32:e9:67:c2:15:29:11:00:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:D1:8E:F1:C5:F1:20:16:B0:D0:1A:5E:A7:75:5B:D3:A1:B8:53
X509v3 Authority Key Identifier:
keyid:07:3C:C1:8F:C7:06:DF:5A:99:33:B0:BE:20:DC:CB:04:67:5B:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzzBj8cG31qZM7C-INzLBGdb9HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/433c47-bf3e-4728-8b93-b070ec34d4c1/1/BzzBj8cG31qZM7C-INzLBGdb9HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:15:06:a9:b3:b1:b1:1d:1d:26:a3:28:38:48:ed:4a:6e:
6a:c8:1e:b6:92:8e:a2:37:45:fb:80:b2:69:e6:38:54:03:45:
17:ce:ce:39:4f:be:5c:be:68:6f:74:c5:64:d5:36:68:ea:4d:
bd:ab:3b:5c:b6:40:be:2d:b7:d4:2d:e0:8b:fc:a3:6b:f1:f9:
4e:fd:b9:31:57:5b:b3:8a:23:8b:b8:48:72:b5:0b:f5:0d:49:
05:4e:a0:5d:43:fe:0a:fa:4f:f0:0d:33:34:0d:92:1c:02:11:
58:f3:6e:f1:5e:9f:3d:6e:5b:5b:25:3f:a5:7f:f2:a6:4b:c1:
c4:37:9b:4d:39:2b:5b:08:96:63:83:3d:62:95:c4:04:c4:91:
84:3e:81:a6:1f:fd:cc:5f:e2:88:3c:7e:d3:87:fb:4f:40:33:
99:f1:3b:9d:80:c7:63:f6:40:53:b2:ed:0e:40:74:95:8f:46:
d0:61:fa:fc:74:f7:e9:55:24:5d:0c:8d:52:fb:6f:48:ea:55:
40:c7:0a:6e:51:1b:67:86:7a:45:f8:dd:f0:a5:9d:23:c3:6d:
c4:38:0d:eb:67:30:c3:42:d9:33:6b:8a:3d:2c:cd:eb:01:13:
6d:51:e4:a3:3b:fc:a1:a2:e3:fe:6a:9b:b3:7a:9a:e1:15:c1:
af:67:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:59 2025 by rpki-client