Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json)
Hash identifier: EClpzUhM4cYTZ6nrQ/NSPCNyBXX/cPBLU+MHUo7CNEg=
Subject key identifier: 8F:CE:5A:D1:6E:7A:ED:4D:25:05:78:D9:E2:98:BD:08:AB:26:31:22
Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Certificate serial: 0194BBCDFF9A4977928BB5AD78F7BA03CAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
Manifest number: 0817
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: ZuYp0btFZzOl9c4Z3dfkLMj/hcDU1NCssgQR0nQqs0U=)
2: inNKkDFxcUNq5FXZVVy7-DSSYCQ.roa (hash: k4FJ7ff3nr4506kIqSUj3qTtLfz2+PJT75ZSUSvS0y8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:9a:49:77:92:8b:b5:ad:78:f7:ba:03:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=8fce5ad16e7aed4d250578d9e298bd08ab263122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:ea:c3:c9:a7:ea:b9:39:5d:a8:1f:52:1b:
57:93:65:56:21:47:0e:89:de:64:52:e9:80:c2:69:
cb:4a:67:1b:28:d6:be:3f:67:52:13:a3:2e:9e:0a:
e5:06:71:04:97:e7:18:e7:92:f6:50:4c:fc:39:96:
a6:19:86:61:95:83:fc:b5:bc:47:e3:8a:8b:e3:51:
1c:1d:51:c6:82:07:7a:04:71:a0:73:72:e5:90:53:
44:69:90:11:a6:67:3f:20:8c:71:13:23:cb:b6:c9:
b5:e5:43:9b:d3:7c:65:bf:19:35:bb:f8:0e:a9:e0:
e4:07:91:6c:8e:0b:19:93:2d:8f:53:12:58:80:5f:
c8:d2:68:a0:7a:68:3c:ae:ad:d4:28:3d:c8:e1:2d:
da:49:1c:68:a5:a1:75:02:c6:17:66:a1:ac:a3:a8:
3a:e9:3d:b7:2e:dc:58:dd:32:96:83:c0:83:b6:89:
8a:24:b2:15:10:77:73:8e:c5:59:dc:7e:3e:0d:c5:
21:47:1a:7f:de:9a:38:92:a0:45:78:f1:48:4a:48:
cc:9b:89:e5:d1:2f:e2:93:fb:e8:3a:8c:57:c0:5c:
01:98:75:82:d2:cc:8e:71:b7:da:e7:0a:08:a6:b5:
a4:cb:60:48:91:09:91:03:1f:1a:a3:74:f2:b3:eb:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:5A:D1:6E:7A:ED:4D:25:05:78:D9:E2:98:BD:08:AB:26:31:22
X509v3 Authority Key Identifier:
keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:76:21:3a:ca:4f:b1:7f:1c:9f:cc:c3:7b:8e:4b:ca:d9:5b:
fb:5f:57:59:48:67:b2:f8:0f:f1:50:2c:92:89:01:59:5b:f4:
60:f9:c2:31:7b:88:c0:ce:1a:14:60:4e:71:65:cb:47:b8:ad:
59:25:3d:0c:0c:28:04:38:0f:a4:88:c2:fd:74:cd:4a:fc:f9:
8e:c8:48:69:08:b9:82:ae:82:77:c8:89:94:84:15:54:ee:2b:
51:f8:05:4e:8d:5f:87:68:d7:c6:04:f8:43:38:a3:95:af:6f:
31:04:60:45:8d:ea:b1:1f:61:75:28:0c:f8:73:89:a2:f3:f2:
b6:01:00:b8:ef:e4:89:1c:07:2f:c3:7c:b3:cf:32:fe:2b:63:
6c:33:7a:cd:2e:8b:67:8b:3a:91:78:e1:b4:dc:c6:cd:15:36:
35:c9:82:bb:4d:58:fd:42:dc:cc:01:d8:96:ec:0d:16:15:db:
5e:c3:ed:2f:32:80:69:6e:79:7f:9a:e7:6d:d3:93:62:d4:31:
86:cf:f6:b8:bb:52:be:33:31:bd:42:9a:91:62:93:08:10:98:
26:fd:62:02:b7:2e:64:79:d6:d1:55:61:8a:50:80:8d:2b:4b:
d5:7e:72:c1:dc:a2:28:0a:ed:c9:be:1c:6f:97:73:4c:b0:a6:
02:44:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client