Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier: Oh5amzIOVKVUNiaMVRkMy1P+tFxegpRwF+o1usI86tA=
Subject key identifier: D3:56:0E:F6:61:C3:F0:19:26:B5:AA:FC:70:AB:EC:38:C3:79:B0:1A
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer: /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial: 0194BC729BCFD47175139AF7E637239F1553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number: 13DC
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: HnrNPwjt8ad8tw7uQ0mBwcSSfH0vOo2XYSKDSfX17zg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:cf:d4:71:75:13:9a:f7:e6:37:23:9f:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=d3560ef661c3f01926b5aafc70abec38c379b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:c1:90:53:6b:06:60:a3:d1:ab:55:04:73:
e7:0e:22:63:02:de:81:85:f6:c7:36:d8:37:73:7c:
b7:c6:2f:84:80:5b:b1:fc:c5:6a:b1:49:d0:78:6e:
2a:2d:87:26:b7:5c:fc:1a:51:c8:0f:8f:ff:d1:f9:
6b:a7:88:83:22:89:c1:24:d5:ad:d3:8d:5d:81:d2:
21:5d:b9:f2:af:2b:ac:f3:de:da:5f:39:9f:22:d2:
c1:1b:3a:07:28:30:48:d6:a8:ae:57:cc:2c:31:58:
77:bf:bc:ec:3d:19:96:22:49:63:b0:30:f8:b5:5b:
32:2d:64:0e:0a:a4:70:d5:20:b0:79:d5:52:6a:a6:
6d:97:cc:6b:c9:4f:2b:81:39:fa:4f:97:55:2f:0e:
df:30:98:ce:0a:6b:17:05:b2:ca:81:a3:66:37:83:
87:34:4f:16:d1:54:3b:9b:a7:c3:9c:12:ad:9a:2c:
30:ab:3f:af:be:41:5a:e5:57:2d:72:70:c8:35:98:
14:b0:14:13:ae:0c:59:54:b6:d5:f3:68:e0:c8:5c:
f6:ac:94:28:39:77:19:aa:9d:fd:66:b0:3e:35:be:
9b:d0:c7:b8:eb:3d:d7:2c:29:de:6e:4f:5b:9d:4a:
1c:de:1c:46:87:b4:fc:1f:65:36:85:da:86:89:a9:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:0E:F6:61:C3:F0:19:26:B5:AA:FC:70:AB:EC:38:C3:79:B0:1A
X509v3 Authority Key Identifier:
keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:df:a7:04:2b:d0:43:cc:f8:96:2f:a1:b4:bb:15:22:df:c5:
c0:6e:f6:7c:dd:3b:1d:e1:1f:33:ce:bc:c0:07:92:cf:72:ae:
be:ba:ed:76:58:fd:b7:2e:c2:6a:fd:15:41:f5:b6:50:a1:e1:
41:33:43:03:a4:38:cc:49:99:50:fa:e3:29:2e:c7:75:2b:bb:
f0:0d:bd:57:6a:48:4f:e9:d8:9c:25:16:2e:e7:20:af:c5:c8:
37:dc:c3:76:f9:7d:9e:83:b5:db:cc:5a:e3:56:a2:d9:0d:2a:
86:6e:4c:d2:68:92:76:3f:99:bc:ca:32:40:db:1f:53:78:55:
d4:8c:2d:14:2a:f8:65:07:cd:45:7e:c9:51:3e:f7:82:cf:56:
a2:85:8c:8f:bd:e1:22:9d:79:4c:97:7a:8f:85:69:c8:29:b4:
5d:5e:a3:33:19:a4:eb:d2:aa:92:34:4a:db:ad:f6:f8:7e:c1:
c5:08:b7:ce:f3:c2:f6:ac:e9:56:ae:fc:e1:8f:23:4c:1f:a0:
5b:cc:96:d1:83:98:71:82:ee:dd:5b:bc:73:54:73:86:8a:3a:
3c:b7:5c:d4:aa:35:86:8d:0d:03:27:63:3d:49:76:ef:34:a8:
e6:cb:43:4c:d4:05:0e:17:1d:b5:0d:c9:d8:9f:f8:f7:76:cf:
89:2d:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:56 2025 by rpki-client