Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
File: bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft (raw, json)
Hash identifier: DuCDnUhrziviUbvJ9svCYCPftrHhMIweo6aMwazJ1aE=
Subject key identifier: D9:10:F0:58:D5:1B:D9:B1:0A:B3:7C:F1:78:AE:0E:25:69:98:07:BF
Authority key identifier: 6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
Certificate issuer: /CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Certificate serial: 0194BC04BADD2106303EAAF3162B982668A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
Manifest number: 0376
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl (hash: X6pJ08bdqV/bzeB+2UMNfDyF/FsEEjpfad58m6/lVeg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:dd:21:06:30:3e:aa:f3:16:2b:98:26:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e68c1b90e45f91bab8d60788eed25cb4a010fe8
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=d910f058d51bd9b10ab37cf178ae0e25699807bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:95:ab:ac:53:07:16:d4:3f:5e:4b:93:20:
77:46:d0:93:c2:8d:5e:51:5c:ab:a6:16:5a:de:e2:
26:d8:33:61:71:76:bd:91:98:c8:e7:2c:10:95:02:
5f:e3:7f:60:56:75:5c:3e:9d:cc:c8:79:fa:c6:5e:
f4:23:33:a0:f9:0a:92:f9:b5:7e:6a:30:2a:5d:4e:
54:9f:c0:1a:0a:0f:1f:84:2d:c5:84:84:80:47:30:
f1:b5:f7:df:83:a4:ae:bf:af:a1:55:8a:5f:ee:02:
21:ab:ea:dd:c2:2a:27:df:26:19:8d:3e:6d:0f:88:
38:fa:6e:96:eb:ac:c0:c1:d0:00:8d:c0:32:29:cd:
6b:6a:26:d2:96:15:46:83:4d:9f:0e:82:cc:7b:1e:
0f:cd:c9:2d:c7:39:b3:05:fe:06:bf:2c:ac:95:ea:
6f:e6:67:30:c2:25:68:0c:d3:f5:b4:c4:ac:41:80:
37:cc:44:99:b8:50:13:76:bc:20:4b:cb:2b:a3:26:
b1:72:48:2f:9c:a0:7a:69:9f:7e:bc:0c:a1:60:44:
d5:26:34:be:b7:f5:bd:8f:c7:9b:20:74:1d:b7:b8:
6d:db:3f:29:08:34:f2:e1:95:89:ed:90:9f:76:f5:
c8:e3:c4:c3:7c:48:90:9f:4b:e2:3e:2e:1e:7c:c8:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:F0:58:D5:1B:D9:B1:0A:B3:7C:F1:78:AE:0E:25:69:98:07:BF
X509v3 Authority Key Identifier:
keyid:6E:68:C1:B9:0E:45:F9:1B:AB:8D:60:78:8E:ED:25:CB:4A:01:0F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmjBuQ5F-RurjWB4ju0ly0oBD-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bbaca1-f557-4104-b5fa-1740630fcc45/1/bmjBuQ5F-RurjWB4ju0ly0oBD-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:33:e1:44:68:4f:e6:06:cc:d8:1e:0c:d9:2a:a8:dd:d0:
c3:a0:26:d7:75:b7:81:38:56:c9:d6:19:23:59:af:2a:1e:4f:
4d:ee:59:b5:d5:17:9d:8b:3c:26:20:7d:03:4c:cb:7c:c4:6d:
51:a3:ce:bd:e2:7e:bb:77:0c:0d:85:da:ba:f4:ba:84:9e:f8:
59:84:f7:d5:50:f0:3f:e6:45:1c:f0:c6:8f:ca:f0:81:6f:b5:
01:78:6a:ec:ea:1e:06:76:46:21:e3:0c:c4:14:75:06:fc:f3:
42:76:36:a9:16:eb:a3:de:3d:ac:4b:52:d4:cf:52:05:7b:64:
07:62:a6:34:12:a3:cd:bf:eb:97:01:18:84:dd:25:64:54:e2:
2c:4a:d9:a8:b5:4d:ce:84:90:7a:5c:86:bc:a8:00:fc:ba:9f:
83:1e:ed:62:0d:e8:c8:6b:8d:13:94:3e:be:58:fc:e8:bd:97:
b8:3e:e5:92:7e:cf:05:a8:61:d1:12:71:77:b2:85:3d:5a:db:
08:d1:07:70:97:36:db:3f:bc:0b:6b:90:3c:e5:c0:c9:bb:81:
69:ff:0c:04:95:7e:32:e5:2f:fc:92:30:2c:60:4e:6d:02:e6:
b8:75:14:a0:c2:2b:da:82:4d:50:df:38:40:21:24:ac:38:e9:
af:c2:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:16 2025 by rpki-client