Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
File: bzOv1B6gEvsoA8cnRSPI7D8mExE.mft (raw, json)
Hash identifier: Ad1wwAcOwBrRFpv1iz5cOQOKLmj713G/0azcdC84J8E=
Subject key identifier: 3B:46:EF:0A:E9:59:B3:13:B0:D5:CC:7D:CB:5C:58:11:2B:2D:75:97
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Certificate issuer: /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial: 0194BC732A454373226D50764DA5AF63C82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: bzOv1B6gEvsoA8cnRSPI7D8mExE.crl (hash: C4qHafYqyGuyFQ9DKa8cXKMSWiQCb8VlnTz0tSP3LjQ=)
2: v8tpm7-4VwDQ4BW9MfFdtqRUZ9c.roa (hash: Xcaj7PWNKHBPkwnwanmCNYJ/FSFogXNO8sh3nrmk3Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2a:45:43:73:22:6d:50:76:4d:a5:af:63:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=3b46ef0ae959b313b0d5cc7dcb5c58112b2d7597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:3a:8a:54:71:99:70:be:b1:47:27:e9:93:
c0:b3:e5:ec:4d:43:dc:aa:b3:4a:c7:64:28:d8:f1:
b8:5e:9a:7d:01:cd:08:a1:15:6d:34:20:40:9c:5f:
39:49:6e:3f:9f:cd:67:14:24:de:9f:09:1e:9f:50:
7d:05:38:e5:73:e6:8b:59:da:42:4e:10:6f:91:25:
aa:3a:8c:fe:50:fe:d8:96:8d:ab:f7:b5:83:d8:d8:
6c:43:39:3b:ce:03:66:37:f1:2a:fd:77:e5:41:77:
c9:a8:09:75:26:a1:85:bb:c3:d8:b8:ea:01:a6:97:
4c:b3:d9:99:61:81:6e:a0:2f:23:c8:2d:e9:85:73:
5a:37:4b:2e:c6:9c:80:da:63:0d:0f:c9:59:6b:0d:
84:6a:da:13:e8:29:51:12:c7:39:4d:12:fd:65:6b:
c2:cf:e1:9e:21:78:06:92:a0:fa:67:dd:aa:67:34:
98:60:5a:79:e6:04:b7:89:7a:13:5f:2a:d0:7e:bd:
47:75:8c:ad:31:13:66:89:73:2c:38:c8:f9:e9:d4:
78:6d:83:d3:56:92:90:45:0c:b0:bd:03:d3:b0:a2:
6e:8a:07:6c:ff:5d:79:36:9d:6c:5c:dd:46:b5:e6:
11:9a:7b:73:14:d6:97:3e:15:38:53:02:a4:29:7d:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:EF:0A:E9:59:B3:13:B0:D5:CC:7D:CB:5C:58:11:2B:2D:75:97
X509v3 Authority Key Identifier:
keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5e:c0:09:c7:73:83:af:d5:bc:e2:7d:a4:d1:de:4d:fa:3d:
c1:93:ec:74:d5:2b:b7:55:e8:82:62:3d:f9:93:c2:06:59:78:
0c:3b:d8:44:78:ce:28:19:84:73:f1:b4:9c:d1:2b:cf:a0:9c:
71:a3:43:ec:a7:f0:88:59:c6:8a:44:ed:d7:eb:4f:f2:ed:83:
a3:e8:dd:0f:7c:d8:b5:db:4a:d5:0e:0a:22:8d:72:83:0c:98:
45:2f:22:34:2c:ba:08:92:c0:93:ae:e3:fa:b3:1c:07:07:ca:
e5:51:70:c9:89:2e:3d:92:65:ef:3e:78:95:d5:e5:af:8e:df:
fd:e4:ce:d2:29:18:28:41:a5:97:7f:58:f3:42:e2:7e:9e:d2:
d0:90:94:64:88:14:44:f6:b1:5a:17:9c:d0:2d:5a:04:c3:ec:
12:91:33:ea:b6:cc:a8:17:23:eb:66:97:3d:4c:e1:9b:6c:82:
fb:4a:aa:17:82:bd:c8:7a:e4:54:a3:b1:b1:a7:c4:8c:a5:80:
d7:dc:3a:1e:08:bb:5f:e2:72:1f:3e:97:3a:4b:23:83:1f:a4:
f5:8e:30:69:a5:74:c4:59:cd:92:4d:b0:d9:28:af:95:39:33:
19:c2:bb:c4:14:f4:2f:3a:52:4e:4d:67:ca:7d:66:cb:fc:9d:
a4:86:cc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:29 2025 by rpki-client