Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
File: BB0F8437DE6BB251821A7A5FB8111376F1709023.mft (raw, json)
Hash identifier: +3UCNYIyZ7xB6bve8KSKkbi2HV3dJ19vxYt4TZ4h8LY=
Subject key identifier: 63:4C:EE:E0:3B:E6:37:6F:BB:EC:B8:AE:D2:AE:2C:E8:A4:39:9F:5C
Authority key identifier: BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
Certificate issuer: /CN=bb0f8437de6bb251821a7a5fb8111376f1709023
Certificate serial: 4484322C541318EFEC1DBFF21C7B485516479AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
Manifest number: 033A
Signing time: Fri 31 Jan 2025 07:28:40 +0000
Manifest this update: Fri 31 Jan 2025 07:23:40 +0000
Manifest next update: Sat 01 Feb 2025 11:06:40 +0000
Files and hashes: 1: BB0F8437DE6BB251821A7A5FB8111376F1709023.crl (hash: YnSuXaqI4HOgGVE3uJv3pYYF1ml43OiqjWiGYq/YfyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:84:32:2c:54:13:18:ef:ec:1d:bf:f2:1c:7b:48:55:16:47:9a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0f8437de6bb251821a7a5fb8111376f1709023
Validity
Not Before: Jan 31 07:23:40 2025 GMT
Not After : Feb 1 11:06:40 2025 GMT
Subject: CN=634CEEE03BE6376FBBECB8AED2AE2CE8A4399F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:4f:f8:21:fa:9c:f2:6f:0e:dc:ac:4c:34:
56:32:f5:7c:54:06:28:31:ab:d4:99:78:fa:3f:51:
6a:07:76:de:74:32:a0:cc:9b:2e:c5:7d:30:12:9b:
26:31:59:30:42:4b:6d:85:3c:cf:d2:3f:32:21:db:
6f:3a:b5:2d:fd:37:7d:46:b9:91:a9:f6:6c:cb:3d:
21:cd:1c:91:9b:8e:92:84:dd:ea:b7:12:c3:d9:c1:
31:ed:b0:12:98:ce:bb:f9:22:cd:e8:91:b0:6e:d7:
8f:11:df:de:60:09:5c:fc:3b:4f:2d:e7:4e:e6:2d:
61:70:af:0f:68:e1:fa:d8:41:3b:05:d9:d8:cb:4b:
13:57:47:3d:03:de:53:71:8e:e9:49:c4:c0:0c:27:
d0:24:9e:1e:5f:f4:4f:29:95:ac:5a:de:39:93:6e:
f4:50:c2:0e:71:52:e3:1b:04:db:15:17:e6:63:06:
d9:e5:61:00:fc:36:8d:e6:13:7f:33:07:a6:ae:c6:
21:bc:d6:48:67:3c:84:48:48:c9:d8:90:eb:c2:fc:
09:14:83:9f:a8:3a:84:66:b8:c3:ce:48:73:93:1f:
ea:2a:09:03:81:16:66:4a:81:31:f3:63:1d:c6:3e:
0e:d6:ec:33:d9:c6:2f:28:b6:ab:20:cd:82:1e:6d:
95:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4C:EE:E0:3B:E6:37:6F:BB:EC:B8:AE:D2:AE:2C:E8:A4:39:9F:5C
X509v3 Authority Key Identifier:
keyid:BB:0F:84:37:DE:6B:B2:51:82:1A:7A:5F:B8:11:13:76:F1:70:90:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw-EN95rslGCGnpfuBETdvFwkCM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/0/BB0F8437DE6BB251821A7A5FB8111376F1709023.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0d:13:63:c5:05:cd:06:e6:e6:57:fd:77:13:80:bd:8d:99:
ca:b6:50:95:60:4b:b0:68:88:6c:c7:0f:17:67:ed:10:90:9a:
58:85:56:6d:70:b2:0e:b7:8b:9b:7e:fb:1d:d6:95:8f:7c:f6:
bb:88:ef:7c:f9:3e:bf:81:91:95:30:1b:2d:0d:e3:b8:fa:d3:
18:e3:f4:08:3f:54:2c:41:94:4f:8c:81:49:36:68:a8:b7:ae:
16:cb:f0:b0:c1:f9:a7:45:d4:95:ef:4d:78:b8:2c:07:a9:90:
6f:54:90:1e:17:e9:db:b7:33:e3:a4:d2:f4:c1:55:b4:56:d9:
5e:14:e7:43:2a:04:e5:6b:b2:a7:0d:b8:1f:88:62:91:1c:19:
9c:70:67:eb:dd:de:ba:39:f2:52:13:e7:21:c0:ef:cd:77:01:
83:32:52:26:01:a0:2d:e0:e8:b9:5b:e2:89:11:03:d4:c0:dd:
aa:b7:d9:c4:9d:01:09:4d:01:ec:eb:d0:26:59:a5:f5:75:d9:
4f:c9:f7:25:66:b9:71:7a:ab:86:68:69:04:70:6e:3e:15:f7:
1d:f0:2c:7c:8f:d0:a2:54:27:c9:5f:33:b4:0e:26:c5:d9:29:
fe:75:26:8b:e5:57:a1:04:8f:4a:b3:81:51:c3:79:af:8b:f2:
d9:06:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:58:40 2025 by rpki-client