
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File: BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier: hqqeSXoxACHXnxsNEWFmJ84gBu66ceRvKhzoHnXB0kQ=
Subject key identifier: 93:0C:AB:18:96:F5:5E:45:0C:7C:B8:15:97:62:CB:B1:53:C9:AD:E4
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer: /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial: 0194BBCDB60544074A69583EECD2C0EC9B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number: 0E5E
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: nOj2Ykl6e80iiq9YfWzZFM+jp8ELloOa9u/XLlw01WQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:05:44:07:4a:69:58:3e:ec:d2:c0:ec:9b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=930cab1896f55e450c7cb8159762cbb153c9ade4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:2c:b3:14:4f:41:17:d9:65:87:70:a7:7a:
1d:a2:a2:5a:aa:ae:82:f7:5e:60:52:0a:9e:41:dc:
94:7b:34:c7:12:d8:d7:57:54:8b:37:44:4c:ba:6d:
9f:33:c9:0e:7a:63:a6:bb:ee:cd:78:73:01:f4:68:
62:a3:05:6e:52:0a:27:62:3e:cd:6a:fb:98:d8:de:
f6:8a:0e:8e:f7:72:53:bb:94:b2:07:1b:5d:c0:65:
07:77:50:38:6b:8f:e1:5d:de:a1:7d:84:3a:35:15:
2f:ec:50:61:65:7b:62:72:98:19:d1:a0:91:59:7b:
f1:70:0f:38:ab:04:1c:67:d5:b1:b9:5a:55:4f:4b:
c0:dd:25:76:d3:57:a4:19:fb:53:c7:6b:0d:6d:ed:
45:fe:7a:ad:ad:64:f0:67:17:72:29:1e:92:79:be:
17:ed:ca:e1:93:e4:76:c3:f0:8e:15:46:e5:d7:ee:
4b:c1:a9:eb:21:b1:23:49:83:2f:d5:90:8c:f4:bf:
58:5a:87:1e:3c:74:17:14:c2:86:a1:ba:9a:ff:6f:
74:57:a8:7b:59:b0:e8:0f:5e:a8:a7:78:e5:0c:c7:
81:f2:d5:66:fb:96:95:8a:55:44:d8:29:c4:0a:a1:
c6:b1:1f:d3:dd:01:9e:11:5a:78:fe:b1:4b:fa:31:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0C:AB:18:96:F5:5E:45:0C:7C:B8:15:97:62:CB:B1:53:C9:AD:E4
X509v3 Authority Key Identifier:
keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8f:e9:d4:8c:26:57:c5:3c:d4:fe:0b:f7:bc:87:4b:62:83:
9d:f7:0d:c4:cb:c7:43:75:03:2a:f0:7e:47:9b:98:41:f6:35:
6a:65:1c:a9:f4:4e:cf:2d:37:1b:23:19:18:2c:2b:74:c2:84:
2b:1c:7b:94:46:d1:14:39:dd:12:31:23:d0:75:df:19:f4:a5:
3d:90:ea:1f:62:d3:08:77:df:de:4c:ad:b5:02:41:15:c5:96:
2f:59:33:91:e1:fa:43:c1:ef:5d:28:8a:e5:9c:ec:c1:b8:dc:
ce:fd:ed:d0:ea:d7:7a:a0:c5:30:9d:6b:71:7c:f3:4a:e9:1c:
1d:d5:5f:6a:bc:25:2f:27:65:f5:42:fc:e3:bc:02:8b:d8:64:
0e:a0:93:49:3a:1e:f5:22:f9:a5:66:44:bf:ea:2f:17:5b:98:
0d:45:8a:58:90:e8:6d:43:4b:f0:d5:ed:2b:32:fe:02:a9:7b:
62:67:d7:2d:e9:bc:78:9d:c2:72:7a:75:2c:3f:89:aa:59:93:
af:c2:72:ab:15:06:2b:2e:4f:4b:ed:18:d2:1c:23:32:87:f5:
55:9f:9f:78:f5:c3:6c:2b:1a:6f:2b:02:ac:f4:84:c9:b0:72:
34:47:fa:d9:2c:3e:46:ca:18:a0:44:c8:fc:5c:10:96:78:c1:
1c:6a:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:32:59 2025 by rpki-client