
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: n315zrIhKqOP6ezqA1eyeDLIWF4s/u9NVPrCyQMW0VU=
Subject key identifier: E6:8A:0B:E3:20:9A:FF:31:30:FD:76:BA:10:EC:64:4C:F6:B2:06:6B
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 01962F0711F049CEA65B4E5C39C90F129D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 12:01:54 +0000
Manifest this update: Sun 13 Apr 2025 12:01:54 +0000
Manifest next update: Mon 14 Apr 2025 12:01:54 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: APRDXo1D5zu0WC6x0s0PTC/HR740FL92It7nah5JWfI=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:07:11:f0:49:ce:a6:5b:4e:5c:39:c9:0f:12:9d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Apr 13 12:01:54 2025 GMT
Not After : Apr 14 12:01:54 2025 GMT
Subject: CN=e68a0be3209aff3130fd76ba10ec644cf6b2066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:2a:70:28:80:73:41:f0:f6:9c:97:42:1e:
50:d9:ae:98:01:20:51:74:29:f6:70:c7:4a:f3:74:
a8:ff:79:3f:5e:cf:82:10:9e:81:9d:b9:66:ca:ca:
03:43:f2:00:eb:ce:46:22:81:2a:c5:cc:19:da:2d:
ab:7b:9d:f6:ee:95:63:b6:f4:b2:0b:18:7a:7e:1b:
80:84:c9:65:02:4f:77:43:d3:84:6c:4d:a4:fa:f3:
99:ad:2e:ca:55:8f:6a:2c:71:c5:69:b4:2e:b0:82:
5e:1e:77:2d:b5:53:09:f2:87:26:25:c0:69:a4:2b:
8d:c0:4d:f2:6c:b2:4f:81:8d:43:ea:3c:bd:dc:7d:
74:ab:1b:ab:7b:c0:cf:bd:0a:d0:aa:b4:72:28:e3:
de:bc:66:dd:d7:7d:76:37:fd:88:17:50:bc:0b:ba:
15:f3:04:99:92:7f:5b:14:ac:b7:15:c2:f9:fe:ac:
48:35:69:ff:2e:73:6d:4f:c9:52:ed:a0:57:10:fa:
b4:43:0a:d8:f6:80:0a:15:63:be:f0:41:15:b7:8b:
87:49:25:6b:06:28:5c:04:dd:30:22:a0:87:7c:67:
fd:b6:a2:5e:41:10:b2:d1:f6:0c:2e:1d:ec:ad:6e:
ef:6e:e6:01:73:86:76:07:ea:20:7e:e4:9b:c9:d6:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:0B:E3:20:9A:FF:31:30:FD:76:BA:10:EC:64:4C:F6:B2:06:6B
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8e:8b:69:e9:c6:7e:7a:51:a8:b6:d6:57:ba:09:c3:84:96:
df:48:22:58:6f:a3:dc:ec:f2:cd:18:82:9a:97:dc:0d:ed:14:
02:33:de:d9:71:bf:0d:e3:be:9c:86:94:2e:3b:e8:08:2f:71:
76:c2:18:0b:19:d9:46:f6:9d:52:99:1a:97:e7:96:06:7f:be:
a5:50:28:77:f6:24:21:78:ff:6e:2f:c4:a8:25:80:12:6c:8f:
75:a8:e7:d8:e8:16:cf:26:bd:ae:42:b3:df:f8:5d:cf:8b:6c:
3e:3a:9e:9c:23:ab:02:ad:a2:e5:5e:ac:6f:f0:15:b1:38:60:
ed:86:92:b6:82:83:3a:00:1f:67:b4:ee:49:b4:9d:fc:1d:81:
da:09:53:38:65:40:d0:ce:f4:91:ca:8e:62:af:51:1d:eb:47:
37:41:84:6c:b3:d8:72:a9:28:4b:4b:f0:8d:55:3b:11:c3:81:
da:41:c3:d9:9e:f8:ec:7c:97:71:6f:d1:6c:71:f1:81:2d:7b:
a4:5c:2b:09:80:b0:b9:54:36:2d:f1:bd:f3:26:58:07:9d:b2:
65:5d:0c:eb:76:17:f3:05:79:70:26:83:32:d1:c0:6c:bc:9d:
4f:04:43:0d:46:8a:0e:a4:2d:4d:46:25:fb:71:ae:75:44:5d:
83:7a:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net