Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json)
Hash identifier: VnZv2uEk7guMhL8Ukt9ACBbKfuSP8Iq3cGImF6EVUUc=
Subject key identifier: 99:EE:46:79:92:BC:10:A3:12:D5:F4:EA:D3:30:B7:09:C3:AB:34:E5
Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b
Certificate serial: 0195E1591B6A68C1AA6E05DA901E97A130BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
Manifest number: 0802
Signing time: Sat 29 Mar 2025 10:01:08 +0000
Manifest this update: Sat 29 Mar 2025 10:01:08 +0000
Manifest next update: Sun 30 Mar 2025 10:01:08 +0000
Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: RgrSHc44SswkuB4lcMNV6Ap3IbhDHs1vulOFEjGDcv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:1b:6a:68:c1:aa:6e:05:da:90:1e:97:a1:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b
Validity
Not Before: Mar 29 10:01:08 2025 GMT
Not After : Mar 30 10:01:08 2025 GMT
Subject: CN=99ee467992bc10a312d5f4ead330b709c3ab34e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:68:d9:67:dd:2a:cb:f9:dd:8e:f7:05:47:
e8:08:dc:46:ff:d1:a1:6a:b8:3e:70:3f:22:07:a2:
ce:19:68:3d:64:65:90:c3:94:98:6b:db:56:d1:d8:
35:cc:92:57:18:72:72:98:74:ed:e7:16:aa:a3:fb:
8e:9a:ec:18:4e:11:30:4d:e9:8f:17:6b:22:e9:26:
fa:89:a7:dd:b0:06:af:1b:5c:03:cd:cd:af:32:48:
39:36:09:e8:12:8d:18:c5:c6:cd:b6:34:0e:a5:29:
f7:26:75:be:65:1f:af:6b:54:b5:c6:4e:a2:65:81:
16:4b:ee:d2:b4:02:8b:a4:c1:de:a6:f7:eb:a5:4c:
77:62:e6:29:1e:39:f1:e6:87:78:db:ea:c4:30:c1:
ef:a8:92:59:b7:0f:87:7b:45:e0:09:f8:0f:41:55:
09:75:b8:b7:d9:8f:34:89:d5:90:54:f8:e9:21:1a:
98:b9:53:cb:c9:76:9d:b4:a8:4f:ec:cc:80:4b:46:
94:67:58:fc:bf:ca:d5:75:e2:9a:40:fb:1c:b8:45:
7b:96:63:d1:73:65:48:bc:b2:0a:57:36:26:04:6b:
a1:6d:e9:f8:77:bc:ee:f7:09:bd:c8:ce:3a:af:a5:
ec:b5:a7:89:c5:e3:48:e4:9b:59:89:12:46:1d:31:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EE:46:79:92:BC:10:A3:12:D5:F4:EA:D3:30:B7:09:C3:AB:34:E5
X509v3 Authority Key Identifier:
keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:4f:e9:68:6b:4c:22:af:9f:0e:84:54:73:aa:03:b5:91:
65:56:31:61:b2:1b:78:a0:2a:8d:c8:dc:44:c2:2e:2f:92:96:
00:d6:20:0a:a3:53:d6:ce:03:8e:11:63:20:ac:2d:e0:30:1f:
94:74:87:75:a3:c8:50:69:d1:84:2a:5d:5d:af:af:94:ea:10:
9b:08:c8:de:76:42:88:63:64:cc:1b:b9:f6:7f:bb:9e:61:9c:
86:8c:17:cf:a8:71:93:29:a8:6b:cd:37:23:e0:50:37:ee:5b:
94:61:0a:0a:30:2b:d0:c5:e7:cb:aa:a6:f2:a1:25:d5:86:12:
a7:e9:db:0a:4b:a8:c4:a7:16:2b:86:a7:4d:d3:5c:80:3a:b3:
a9:7c:ff:05:0c:4c:e4:bb:97:33:a3:78:41:a7:fe:51:cd:38:
24:eb:f8:b6:30:a6:b3:a2:49:92:e1:39:32:dd:cc:f5:46:59:
c4:0d:68:0a:97:00:e5:39:0e:2c:5c:75:28:d3:08:2f:a9:c2:
e8:c3:a4:8f:f2:b1:f1:0a:72:13:21:57:e0:a1:f3:f4:db:72:
0e:21:a5:a8:03:56:8b:a1:48:e3:96:33:87:75:79:09:e3:18:
0f:1d:95:1f:7c:a8:4b:77:56:cd:6a:22:83:9d:7d:ca:6e:62:
2b:80:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:33 2025 by rpki-client