Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
File: BkwamGxZM6O5EIToo_8IBm05jhk.mft (raw, json)
Hash identifier: bDDc+IzYMVtHNf0hHIVXvIIONySeNZ3UQkBdm4P0xys=
Subject key identifier: 9B:82:AC:1B:20:D6:48:90:D1:64:3F:01:98:6A:6A:38:3A:CA:4D:AB
Authority key identifier: 06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
Certificate issuer: /CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Certificate serial: 0194BBCDDE897BD8A8D8F93AC2913413A748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
Manifest number: 083A
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: BkwamGxZM6O5EIToo_8IBm05jhk.crl (hash: BuopLnN1kSl4RdaTV1T6OYrTOyv0cMQpliGrd0e3ODU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:de:89:7b:d8:a8:d8:f9:3a:c2:91:34:13:a7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064c1a986c5933a3b91084e8a3ff08066d398e19
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=9b82ac1b20d64890d1643f01986a6a383aca4dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:b4:70:e8:0e:0d:d8:e9:27:e4:33:77:78:
e9:a4:b8:74:18:38:52:47:af:45:51:74:a2:f4:83:
9f:f4:31:51:a9:d1:da:73:c7:4e:18:89:12:17:cc:
e7:08:3f:00:10:cd:bd:64:49:11:c3:06:ec:67:f3:
75:18:50:23:99:9b:fc:6a:e5:5e:da:07:c4:64:05:
da:59:d4:39:00:b3:11:36:c8:59:22:7f:1b:d1:38:
06:14:54:38:bc:7f:18:bf:13:13:a9:95:cd:30:13:
ec:39:3e:92:91:a9:7c:84:39:47:31:cc:a4:e2:7d:
5b:57:c0:87:f2:30:59:55:fc:9a:b1:92:1a:cb:f9:
2a:8b:d6:b3:3a:ad:0a:6c:3e:9f:48:d3:ab:2a:70:
58:2e:13:c7:1a:1a:32:bc:f6:f0:bb:d6:df:a3:bf:
8b:85:c4:4d:fc:e2:5b:8a:02:4f:54:45:2c:2e:c0:
ff:fa:e2:df:55:d1:a0:83:78:59:09:2d:4d:81:f7:
d3:d8:8c:7e:2b:4e:4f:35:83:52:84:0d:ef:f0:c8:
98:a2:31:4b:f7:4a:4a:8c:cb:35:dd:5b:d9:48:09:
3f:65:a8:bc:c5:41:f7:93:c0:b6:c3:2f:91:6f:e0:
2c:09:fd:6c:a4:ba:51:1b:11:f7:b8:c6:a3:c9:b3:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:AC:1B:20:D6:48:90:D1:64:3F:01:98:6A:6A:38:3A:CA:4D:AB
X509v3 Authority Key Identifier:
keyid:06:4C:1A:98:6C:59:33:A3:B9:10:84:E8:A3:FF:08:06:6D:39:8E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkwamGxZM6O5EIToo_8IBm05jhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f62552-14f1-499c-af78-7f6a655fd788/1/BkwamGxZM6O5EIToo_8IBm05jhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:01:d9:07:19:26:93:c0:0a:ff:c7:32:b7:52:3a:2f:40:36:
5f:b5:ec:2f:2d:22:ce:35:30:d9:db:99:70:1b:d3:94:cc:0c:
0c:ee:c7:db:41:44:cc:ba:3a:13:b2:14:4e:d2:45:13:95:25:
c0:6e:b8:49:c7:a9:4f:56:f9:e1:f6:f3:cf:88:00:8d:fd:27:
74:ca:42:94:d1:02:84:a4:b3:e4:07:84:45:51:a5:98:5c:d4:
1c:2d:92:e5:5c:fa:ac:ce:cc:aa:17:ef:ab:6b:e9:8d:b5:2b:
2a:28:db:e4:f6:ec:6f:d0:ab:2c:6e:4e:c7:64:49:7c:e2:0b:
37:83:db:16:ce:d0:90:1b:85:b4:5a:58:67:13:03:58:c7:f6:
4b:07:b8:76:77:11:68:19:5d:63:c1:6e:c4:b7:ce:a0:39:fa:
d8:42:a8:8d:1f:bf:88:c2:71:4c:0d:be:39:21:88:7c:57:07:
16:80:c7:1b:78:25:b0:6f:8a:a9:c1:0f:a6:d0:33:75:8b:9a:
0f:ac:8f:bc:a4:83:e5:d8:5b:80:25:d5:b9:6d:1c:75:98:f9:
61:5a:de:7c:60:f9:d8:2d:42:59:90:6b:30:7e:2b:96:2d:b4:
2d:67:f0:14:df:05:f5:c3:76:b1:6e:54:47:51:39:f6:4d:fb:
17:0b:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:42 2025 by rpki-client