Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: 0YJwugNd5lcEn8UjJzQBLDYkNqHv6lA9/SHHWTMOEXw=
Subject key identifier: F4:34:D5:5A:01:57:AC:8B:CE:52:D1:BC:7D:F6:AA:1F:4B:8B:AF:4F
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 0194BD4E5F8677524D2ACA6CC8D0413776D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 0FB9
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: uaYYs6fyKhhSIBR3ANWho6q5/eg5gEAMXZw++j49X/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:86:77:52:4d:2a:ca:6c:c8:d0:41:37:76:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=f434d55a0157ac8bce52d1bc7df6aa1f4b8baf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:0c:d4:59:6e:ad:a1:c9:84:37:c7:5d:8e:
31:e9:65:bf:b5:3f:3f:78:9c:74:cc:0f:ca:9d:4f:
a4:6e:5b:46:ca:b1:0d:b4:29:94:b6:32:ce:9f:4d:
9e:43:f1:9b:7d:ec:50:12:e3:f7:cf:dc:f7:2a:ec:
f9:b0:0e:dc:8c:1b:eb:38:7f:40:ce:29:ce:b2:8b:
8b:a0:f3:ef:8f:54:f8:7c:c5:f6:40:d8:7c:32:09:
fc:02:04:9f:b8:41:23:e1:76:b7:e4:44:9a:71:3e:
27:a0:0d:82:62:9b:8e:f0:93:53:12:61:8f:ad:34:
51:95:23:a2:51:93:5c:20:3e:c6:da:70:b1:e9:01:
d9:07:a9:e5:fa:5c:24:a0:45:44:3b:c1:06:e8:b0:
9a:a0:3d:83:27:aa:4d:1a:33:d8:51:cc:b8:31:de:
1b:71:3b:4b:50:dc:83:a8:ad:c2:f6:da:70:b4:44:
0d:80:f1:be:eb:18:8a:ca:d1:87:cb:e1:76:61:a6:
6d:4d:2f:79:a6:96:10:8f:71:ba:07:fa:30:fb:ea:
4f:55:79:48:81:d2:8e:b2:f3:32:20:d1:3b:21:3a:
38:68:e4:15:7a:07:f2:dc:76:78:63:fa:17:0d:15:
57:ba:b0:f3:81:fd:19:45:34:54:6c:09:22:ac:38:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:D5:5A:01:57:AC:8B:CE:52:D1:BC:7D:F6:AA:1F:4B:8B:AF:4F
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:cd:4b:a4:62:ff:9b:51:a4:2e:80:62:25:15:19:52:63:
e4:25:89:2b:21:3d:90:18:6f:1f:01:69:e7:b0:e7:23:9f:31:
65:ed:13:13:49:af:6a:41:62:40:8f:11:55:a3:70:8f:31:d8:
21:df:04:7d:79:6f:35:27:ab:b8:f3:8f:14:b7:47:ac:76:92:
73:28:6a:c9:e8:3a:e6:38:f1:84:cb:b8:c2:f2:15:fe:77:d0:
40:04:31:f5:be:91:3a:43:ad:71:17:47:94:ce:05:8a:a2:20:
a5:f8:d1:a0:18:4b:af:79:a7:1a:ba:c3:7c:f2:86:ef:ac:15:
31:46:a9:f6:74:72:a8:71:0e:ec:68:dd:95:3c:c6:fc:bb:7d:
b3:a3:10:8c:63:97:cf:42:a3:a4:30:db:88:56:6b:7c:f8:54:
a8:4c:81:4b:bb:ef:b8:c1:c7:1a:68:1e:83:82:ff:51:ec:9a:
fa:ab:15:5f:ed:96:3b:ab:57:e0:ae:19:75:db:45:e6:2a:ab:
15:3a:ab:d0:e6:b1:4b:61:62:db:15:f2:46:e6:3b:72:5c:25:
0d:b6:4c:c8:63:92:7a:8a:4c:cd:bc:f1:fd:5d:57:13:68:9b:
01:b1:e0:4d:db:94:bd:b0:38:4f:49:b0:5f:f3:e2:47:32:f1:
32:28:98:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:13 2025 by rpki-client