Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier: xC3GagKsJ/TXKZLxfw9y53SJRraP3QPrWIUuH3Og1JU=
Subject key identifier: 80:96:B5:8F:7D:10:B6:69:97:79:5A:F4:D1:92:63:AB:26:BA:A1:00
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 0194BCA9D08D6E060735EE6B593A606691CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number: 0340
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: zlG9wTWcf4NZ0ef4Y654P6/Qq/KIRjichPQKPQxyhhA=)
2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:8d:6e:06:07:35:ee:6b:59:3a:60:66:91:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=8096b58f7d10b66997795af4d19263ab26baa100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:ff:11:be:78:f1:5a:c3:b3:86:30:6f:50:
1e:5e:52:2b:2b:08:82:72:91:ba:12:1f:ec:81:06:
e7:03:4b:bb:f9:e4:77:11:43:26:05:99:86:e4:9d:
1d:3d:d3:ce:5c:6d:c7:8a:d4:ef:7a:27:7a:6b:e2:
12:ec:e9:97:92:a8:10:22:05:80:ba:bb:a0:45:0c:
17:85:c2:a6:a9:f7:ce:30:1a:80:1b:77:25:7b:3a:
fd:c9:9b:8c:ec:6d:7b:ee:80:56:02:3c:28:df:0c:
71:fb:18:fb:61:ae:8e:09:a1:96:47:45:3e:c6:e8:
ba:28:0f:b6:a2:9a:82:bf:5d:02:f9:ad:f0:72:80:
c1:c4:e5:02:22:6d:7c:b6:28:77:7c:3e:1c:a0:83:
c1:76:f5:2d:78:fe:74:64:b8:61:12:1c:40:f4:25:
4d:ce:7f:12:96:81:2d:2e:fd:3d:c3:9d:a6:a0:5d:
b1:28:33:9e:cb:b9:fd:2f:d7:97:f9:bd:2b:ab:8d:
77:c0:e9:b5:29:fe:5c:5a:15:17:86:29:2c:43:39:
6b:34:52:fa:54:e7:0a:02:fe:ac:1f:f0:fe:b9:55:
d5:93:fb:f2:29:db:72:6b:37:79:78:44:44:3f:54:
87:30:fd:10:c7:8c:53:0c:a2:08:c0:96:21:66:b1:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:B5:8F:7D:10:B6:69:97:79:5A:F4:D1:92:63:AB:26:BA:A1:00
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ef:4f:40:5e:eb:68:d0:e2:60:59:03:65:90:e1:97:91:f3:
a9:f7:e8:d0:21:cd:37:85:dd:5d:12:8a:7a:ce:de:2d:08:eb:
c1:c0:2c:b6:81:ed:23:c0:4d:2c:7f:bf:ce:f8:3e:d1:2f:46:
0a:f4:b2:40:f7:26:89:d6:e1:03:b7:c0:9c:ac:7e:2e:b2:3e:
b7:5a:92:f3:64:f9:94:b5:dd:b7:e4:43:67:44:a1:4b:0e:f9:
fe:5a:93:2d:71:50:85:03:32:2d:f0:38:ca:5b:83:10:68:d9:
e2:46:28:15:7c:9d:ec:8f:1c:f2:fb:37:18:c6:e4:c4:95:7b:
46:d8:cc:42:0f:b1:ba:37:fe:22:9c:ad:bb:eb:90:ea:55:78:
4f:8c:b5:43:8b:42:0a:4e:f7:0f:99:d9:48:a7:a4:05:89:ee:
5f:ba:7f:1a:e6:16:52:3a:4b:66:3c:e1:a4:ed:c9:23:85:91:
42:59:9f:81:da:0a:9c:ac:f8:21:00:bc:cd:18:77:eb:e9:51:
72:71:fb:84:8b:2d:bd:27:ed:43:52:74:69:f2:60:a7:94:33:
6a:2c:44:e6:8e:ed:f7:a0:72:27:f3:fb:54:0d:7d:3b:b3:39:
04:33:b8:86:d1:ec:6d:cb:9d:6e:26:9c:37:5f:99:01:e7:69:
4b:82:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client