Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: 4Nc8YxyMVsF+GwxcCTpLCteWxRA5VKxdMGy/aDwabw8=
Subject key identifier: 97:40:66:0C:11:29:F1:AF:2A:0A:D3:18:A5:E4:52:B9:7E:9C:36:7F
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 0194BD17E5A9362CE52B395C6394E1D01021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 059B
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: zW+scJTQcLsIhfqcTbxRa/HdxdO4ZlvJLL68ozdXeI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e5:a9:36:2c:e5:2b:39:5c:63:94:e1:d0:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=9740660c1129f1af2a0ad318a5e452b97e9c367f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:99:d0:0e:79:05:94:51:cd:79:bc:9f:89:
d0:cc:d9:c8:87:95:a7:68:2b:b2:2d:05:a9:dc:88:
e3:d1:62:3f:f8:f1:aa:42:6d:f1:56:ad:1a:dd:9f:
e2:1f:7c:fb:65:5c:b5:ae:43:9d:8a:23:c5:c9:b4:
b5:a5:be:b3:3e:06:ef:1d:c4:e4:7f:d0:84:2f:bd:
ae:2d:6d:9d:ff:45:1d:66:33:ef:59:a7:15:4b:3f:
a4:81:08:3e:dd:52:2f:14:3c:29:2a:9c:7a:ac:17:
6b:df:49:7c:3d:20:ce:2d:85:6c:f7:83:74:f9:a4:
3f:c1:08:f8:5c:39:f8:12:33:4d:2f:57:d7:08:da:
97:66:d3:8d:1c:fc:54:3a:84:9e:b8:dd:db:3d:f0:
5c:b6:90:8d:1a:6a:b1:ee:cc:09:fa:d3:5e:49:1c:
7d:a6:72:e8:72:57:a0:ef:7f:3f:c2:d7:2a:f0:9c:
22:ce:fd:5a:bf:a1:1d:c2:5b:76:2a:cb:50:29:be:
08:60:88:58:97:c6:bd:d7:86:05:80:51:ca:99:a3:
1d:f0:9f:97:e3:af:47:0e:cb:74:8c:4f:72:e7:89:
cc:0b:3d:03:fc:01:61:9f:c1:a1:bf:96:b7:de:29:
f8:71:51:1b:f5:fb:b2:e5:9c:53:7c:71:85:4b:a2:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:40:66:0C:11:29:F1:AF:2A:0A:D3:18:A5:E4:52:B9:7E:9C:36:7F
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:cc:2d:b0:65:c8:cc:32:2e:d8:35:02:91:e9:9c:df:d0:
53:dc:05:9c:a7:e4:aa:d6:1c:25:58:85:66:04:33:85:91:b9:
d3:50:08:fc:17:e6:1c:85:cf:ea:22:1d:29:7c:ba:9c:26:1f:
e7:fb:db:f3:38:03:b2:bf:9e:fb:ce:9b:4d:97:13:cc:c4:b1:
0d:5e:46:5e:20:fe:19:3c:64:e9:93:01:98:84:86:58:9c:ad:
8d:85:76:15:6e:ab:5a:65:73:90:81:fe:42:d4:a0:27:ba:89:
5c:4a:dd:00:4e:70:a0:94:5e:96:b3:f0:60:14:88:28:9e:ec:
de:d3:5c:08:30:8d:d8:ae:a8:6f:04:a4:48:07:1d:73:45:44:
73:95:ba:ca:3e:af:07:f4:87:67:54:76:bf:d9:bd:1a:1b:f2:
6e:a9:fa:dc:c0:4f:52:09:17:e3:3f:3b:53:2c:45:6b:e3:44:
14:a2:58:f7:5d:4f:3a:fd:b0:8d:26:c1:fa:c5:d4:58:77:43:
24:23:24:c1:2a:b7:87:7d:42:13:4b:f7:d2:aa:eb:bd:ce:da:
4f:4e:bf:c1:89:f7:dc:f8:e2:6c:6c:a2:42:9e:26:ca:9a:b0:
c5:6a:53:8c:a8:ed:21:b4:85:a2:c9:c8:3c:d9:83:48:e1:05:
05:ff:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client