Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: rz6pBcAEQRYwa7OQE1nTgIiW5Bv383dQX8yYEWfFxAQ=
Subject key identifier: 94:57:DC:9F:68:FF:C9:68:5D:CD:BF:8C:CD:44:25:F5:AA:C3:39:9C
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 0194BD17C108E10A376E4D13DB73E8D6521E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 12C0
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: C2L6PQoNjukD/IxXw+HJcE7ip4rsNUNo8NjVdZwpWrM=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:08:e1:0a:37:6e:4d:13:db:73:e8:d6:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=9457dc9f68ffc9685dcdbf8ccd4425f5aac3399c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:57:c4:1e:48:37:9d:62:af:70:e9:84:20:
4d:ea:8c:09:37:d9:c7:0f:4c:e6:f6:ae:e1:cf:3b:
2a:05:a5:76:34:f4:c8:76:f0:74:35:e3:df:70:5f:
11:44:00:d5:e3:61:1b:9e:b7:aa:4d:10:89:5e:4e:
0f:a8:7f:09:fa:20:c2:63:1a:90:82:1a:76:e2:0a:
37:6f:d0:38:3e:c5:7a:95:d9:69:c1:7d:65:57:87:
e3:3b:f7:8f:38:ef:65:06:e3:7f:a8:6a:79:7d:62:
45:4d:0e:cc:fa:7f:9d:9d:42:12:eb:f0:3e:f0:41:
85:8e:ff:a7:1e:14:e6:54:a9:ca:6e:a8:71:d1:f2:
54:b4:3b:e3:96:75:9c:23:d2:05:13:33:87:d5:8d:
14:aa:2e:07:29:1a:63:29:10:96:ff:0a:81:e4:fb:
82:00:e3:31:d1:f3:ae:64:fd:0a:fc:ed:89:44:32:
0b:f4:1c:ad:3f:61:15:f8:c0:0c:45:7b:4b:e2:f5:
b1:49:b3:6c:fa:d0:51:b0:aa:cb:d8:e0:ee:93:72:
90:df:ea:c0:b0:8e:f4:46:59:1e:ef:c3:f3:5c:44:
e6:2f:55:4e:e2:45:9e:c8:8c:f4:92:e7:58:c5:fa:
51:25:e0:66:33:f8:5d:ab:cd:4b:7f:f0:8b:b1:c1:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:DC:9F:68:FF:C9:68:5D:CD:BF:8C:CD:44:25:F5:AA:C3:39:9C
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:b0:47:73:fd:4a:e2:a3:1d:19:64:3a:51:ba:3c:c6:e9:
a3:dd:cb:84:24:fb:c1:e8:48:1c:5a:a9:ce:2d:b7:c0:80:65:
79:02:db:b7:a9:01:08:ab:18:2d:b7:60:ea:9f:91:c0:c5:f0:
7e:43:f2:50:56:11:a9:31:07:1d:8b:27:67:32:06:2b:66:0d:
ba:fd:20:75:05:6a:6e:bb:37:bf:e0:4a:c7:79:cc:ec:e9:08:
cd:50:04:1b:98:6c:52:99:0f:6a:ce:f0:d4:1f:9b:21:d5:42:
48:d8:55:31:39:d0:0a:c9:5d:f0:39:0d:04:d3:2a:d8:ac:2a:
f1:0e:ec:fa:7b:81:74:94:42:e4:72:65:d0:c2:4b:8c:b9:d3:
f1:4a:dd:6d:37:f5:35:c8:7e:1d:8d:3a:5d:c1:56:2e:42:74:
9a:5e:45:ce:7c:1c:d0:2c:c6:77:b1:07:de:43:1c:56:60:86:
3d:b5:5c:0b:43:d3:ab:c6:fe:57:cf:d4:f2:2c:10:37:a5:65:
56:4a:28:10:1f:8d:19:ec:cd:b6:09:fb:a0:ea:7d:2e:2d:be:
bc:82:6a:a0:c6:7b:2a:70:d9:b6:b4:ba:a3:2e:4e:01:c4:9e:
4e:09:7b:1d:90:a8:fc:27:57:cc:0f:51:e2:95:14:b0:98:03:
17:d5:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:40 2025 by rpki-client