Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
File: bzg_Pxkxuo0uyixRv30n09wgVVA.mft (raw, json)
Hash identifier: 9E8WJQgPL3LNH+38zvWP3Tl3TNHQt6z/Y13luOrCWXI=
Subject key identifier: 2C:11:B7:C8:D9:12:18:CB:3A:F8:26:1A:0F:5A:24:CC:35:66:85:57
Authority key identifier: 6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
Certificate issuer: /CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Certificate serial: 0194BD4EBE86D44978A5EA767515AB77D345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: bzg_Pxkxuo0uyixRv30n09wgVVA.crl (hash: sbZpvwydG7fM1nZJj/X4ZRUDwIgijliuN4WRtSaanyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:86:d4:49:78:a5:ea:76:75:15:ab:77:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f383f3f1931ba8d2eca2c51bf7d27d3dc205550
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=2c11b7c8d91218cb3af8261a0f5a24cc35668557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:63:95:90:f6:92:3a:60:8b:d0:69:dd:b0:
09:7e:31:c0:b9:61:54:47:2f:8c:95:80:27:e9:fd:
82:fb:bc:4a:48:83:be:76:b8:22:0b:da:be:cf:fe:
64:b8:58:01:d3:07:aa:66:bd:b9:e3:66:70:af:41:
ff:b3:8d:17:24:1f:b3:d3:c9:7e:18:93:ca:b0:93:
aa:d6:62:63:5b:cf:e6:cd:0c:84:ca:56:95:7b:99:
10:ba:82:f0:a6:e8:b5:e7:e9:ea:7e:4c:ac:e1:c0:
e8:fe:d3:d0:ad:6d:a6:53:30:40:0d:23:46:e3:12:
e6:e3:24:30:26:26:16:97:fa:d3:5f:03:e5:56:19:
d7:94:7c:ea:01:9c:41:97:f0:2c:16:02:2f:14:f7:
f9:57:39:6a:4f:09:30:82:31:72:a1:83:a4:6e:dd:
a2:53:de:b7:23:04:00:95:b3:93:ed:6e:aa:77:45:
f1:0f:c7:5a:70:1e:61:dc:40:cb:aa:47:09:11:5e:
cb:09:00:27:2b:32:aa:3c:e9:33:bc:d2:83:1c:7d:
4d:f0:45:27:37:c3:fa:8b:c4:ca:d2:b6:97:e6:59:
09:6c:9d:86:da:eb:70:38:42:eb:62:1a:a5:57:b6:
be:e0:c8:66:c2:81:ed:8e:c8:13:76:c4:59:ba:d2:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:B7:C8:D9:12:18:CB:3A:F8:26:1A:0F:5A:24:CC:35:66:85:57
X509v3 Authority Key Identifier:
keyid:6F:38:3F:3F:19:31:BA:8D:2E:CA:2C:51:BF:7D:27:D3:DC:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzg_Pxkxuo0uyixRv30n09wgVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5dfeec-10a2-48b7-bcfa-a625ef51892a/1/bzg_Pxkxuo0uyixRv30n09wgVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1e:8e:28:9d:34:7a:d0:e3:19:66:9f:e7:61:d4:56:b8:b4:
8b:44:f2:54:d6:7a:0a:c0:7a:32:b5:52:90:91:90:d9:c0:df:
bd:22:4b:6b:1f:38:80:6f:27:1d:dc:d9:f1:a4:09:c6:a5:9c:
57:eb:b7:00:4a:43:08:1a:6e:41:92:f0:f0:6e:a5:b1:a1:04:
f5:aa:2c:af:2e:d5:38:06:46:71:7b:06:15:d7:e8:b8:01:a9:
36:ef:c9:5e:ac:7d:51:ad:67:30:b5:76:35:e9:8c:4c:96:32:
35:bc:bb:b1:c8:bf:36:e0:24:98:92:30:f5:be:14:25:1c:06:
27:b0:50:d4:37:24:f7:d5:fc:4d:c7:c8:b8:53:21:d1:b1:db:
40:2b:fb:fc:19:e8:8e:53:4d:e1:43:6a:6b:6c:5b:59:18:52:
ee:01:7d:2d:34:7c:f4:5d:f2:cd:1f:e5:03:07:0d:b7:84:45:
73:e0:42:bc:75:41:15:07:94:f0:67:2f:6e:6d:71:b2:49:97:
88:ba:a5:8f:99:a0:54:13:ba:a7:38:be:25:96:93:b2:a4:19:
df:3b:be:c6:89:12:54:d1:b2:30:e4:97:40:91:4c:03:aa:53:
f0:91:6a:96:f0:32:9e:f2:27:37:46:90:0a:17:ff:a1:fb:b4:
d4:2c:27:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tr6G1El4pep2dRWrd9NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzgzZjNmMTkzMWJhOGQyZWNhMmM1MWJmN2QyN2QzZGMy
MDU1NTAwHhcNMjUwMTMxMTcwMDQxWhcNMjUwMjAxMTcwMDQxWjAzMTEwLwYDVQQD
EygyYzExYjdjOGQ5MTIxOGNiM2FmODI2MWEwZjVhMjRjYzM1NjY4NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8BjlZD2kjpgi9Bp3bAJfjHAuWFU
Ry+MlYAn6f2C+7xKSIO+drgiC9q+z/5kuFgB0weqZr2542Zwr0H/s40XJB+z08l+
GJPKsJOq1mJjW8/mzQyEylaVe5kQuoLwpui15+nqfkys4cDo/tPQrW2mUzBADSNG
4xLm4yQwJiYWl/rTXwPlVhnXlHzqAZxBl/AsFgIvFPf5VzlqTwkwgjFyoYOkbt2i
U963IwQAlbOT7W6qd0XxD8dacB5h3EDLqkcJEV7LCQAnKzKqPOkzvNKDHH1N8EUn
N8P6i8TK0raX5lkJbJ2G2utwOELrYhqlV7a+4MhmwoHtjsgTdsRZutJp9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwRt8jZEhjLOvgmGg9aJMw1ZoVXMB8GA1UdIwQY
MBaAFG84Pz8ZMbqNLsosUb99J9PcIFVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEt
YTYyNWVmNTE4OTJhLzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81ZGZlZWMtMTBhMi00OGI3LWJjZmEtYTYyNWVmNTE4OTJh
LzEvYnpnX1B4a3h1bzB1eWl4UnYzMG4wOXdnVlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUx6OKJ00
etDjGWaf52HUVri0i0TyVNZ6CsB6MrVSkJGQ2cDfvSJLax84gG8nHdzZ8aQJxqWc
V+u3AEpDCBpuQZLw8G6lsaEE9aosry7VOAZGcXsGFdfouAGpNu/JXqx9Ua1nMLV2
NemMTJYyNby7sci/NuAkmJIw9b4UJRwGJ7BQ1Dck99X8TcfIuFMh0bHbQCv7/Bno
jlNN4UNqa2xbWRhS7gF9LTR89F3yzR/lAwcNt4RFc+BCvHVBFQeU8Gcvbm1xskmX
iLqlj5mgVBO6pzi+JZaTsqQZ3zu+xokSVNGyMOSXQJFMA6pT8JFqlvAynvInN0aQ
Chf/ofu01Cwn0g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:53 2025 by rpki-client