Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
File: BzptPeXBJcH-i1--iVhGVuWGGi0.mft (raw, json)
Hash identifier: H5GcNo8ny6Wulj+Ao8t/SsfslAmqghXshOD+YciCLGo=
Subject key identifier: 99:8D:A3:7E:B7:F7:82:C6:05:5E:3A:7C:10:DF:75:6A:0F:A8:FB:33
Authority key identifier: 07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
Certificate issuer: /CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Certificate serial: 018FBCB70B021BAD8B782C6B23EEFD8EF0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
Manifest number: 119A
Signing time: Tue 28 May 2024 01:01:03 +0000
Manifest this update: Tue 28 May 2024 01:01:03 +0000
Manifest next update: Wed 29 May 2024 01:01:03 +0000
Files and hashes: 1: 9oKcMDaiesNbrplqA5XM_jVahG0.roa (hash: Zjfrx4WPgo4k1uSXw5WH1H9Cp2RfWktwA9XHsrQAlGM=)
2: BzptPeXBJcH-i1--iVhGVuWGGi0.crl (hash: rqaZf2hpCFGxaTiSHvXOagUOqkEs8G3a1wMVZ17pUdQ=)
3: dwBVxZ0s6xdeNh1sBPtbF-qM8L0.roa (hash: nUibzeu7rD7h6rV4IIKVuNEfbJqPTEp3C1nMSr4qx1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bc:b7:0b:02:1b:ad:8b:78:2c:6b:23:ee:fd:8e:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073a6d3de5c125c1fe8b5fbe89584656e5861a2d
Validity
Not Before: May 28 01:01:03 2024 GMT
Not After : May 29 01:01:03 2024 GMT
Subject: CN=998da37eb7f782c6055e3a7c10df756a0fa8fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:f0:d7:88:bc:bd:d9:3b:33:8f:fb:f1:fa:
20:05:5b:31:5b:28:ea:6f:a0:80:cf:ad:87:6d:4c:
91:a5:49:75:10:69:5a:ea:2d:46:53:9c:c0:fe:15:
56:09:c7:f6:3b:f1:86:04:ef:ab:78:fd:b5:af:28:
8a:b8:0c:54:67:60:3f:c2:c9:c3:29:ea:65:1f:bc:
8c:8c:8f:c4:35:cc:ed:7c:41:8d:fb:a2:af:2f:85:
0d:8b:80:f0:38:ab:c5:44:9d:8f:2d:b1:47:cd:e2:
20:5a:07:63:9a:69:60:94:71:42:c3:41:b3:96:4e:
57:89:c5:73:4a:3c:6c:ca:f8:67:53:14:1a:0c:81:
3d:9c:9e:08:a8:87:36:de:96:7e:3c:38:3e:06:c9:
00:0b:dd:60:a5:63:f1:5a:80:ce:80:08:f5:09:5a:
e0:cf:20:7f:7c:8f:76:f9:47:26:84:d2:77:b3:3c:
23:33:8e:a8:ff:57:60:83:be:5c:1d:25:52:27:a4:
86:da:c8:6e:69:f3:c5:66:cc:d3:6a:d5:35:81:e2:
ba:76:8b:27:48:a5:60:9c:07:fb:15:fd:f7:1e:32:
69:27:78:01:55:84:46:00:12:3d:07:65:38:45:47:
8b:49:d5:ed:ec:80:ff:d0:10:68:25:f0:8c:73:99:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8D:A3:7E:B7:F7:82:C6:05:5E:3A:7C:10:DF:75:6A:0F:A8:FB:33
X509v3 Authority Key Identifier:
keyid:07:3A:6D:3D:E5:C1:25:C1:FE:8B:5F:BE:89:58:46:56:E5:86:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzptPeXBJcH-i1--iVhGVuWGGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8d7e7c-db7a-465f-8032-255100f2016a/1/BzptPeXBJcH-i1--iVhGVuWGGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f2:e8:bd:49:e4:d3:fd:b6:51:69:af:96:4a:f5:f4:ca:94:
db:41:f6:4c:e2:e1:fa:19:0f:f0:6d:42:53:68:0b:f7:3c:be:
ea:d1:25:d7:80:cc:da:15:99:32:4c:fb:fd:69:e1:45:8c:9f:
28:5f:d7:07:6a:71:81:0c:6b:3c:99:b5:18:ef:a2:4d:dd:64:
bd:07:65:95:c1:2e:32:fc:2a:4b:d5:58:03:ca:97:dd:80:cb:
35:7b:d7:4c:2c:c9:9a:2a:41:81:be:71:55:72:ff:f8:0d:89:
b4:31:9f:f3:42:67:28:53:ff:e4:e0:ae:a2:30:da:34:73:09:
21:bb:5a:21:f5:28:38:66:6b:ca:c0:fb:42:6e:fe:fd:7d:3c:
b2:6c:a7:05:64:a3:e3:ae:9c:4d:19:d4:48:26:99:b9:d0:c4:
81:f1:00:29:f8:47:a8:28:e1:5c:c0:2c:af:87:da:c2:d5:8e:
1d:c4:87:b9:e1:b6:f3:aa:ec:da:b7:f9:da:53:9c:f7:83:59:
61:d1:fb:68:d3:53:f6:f8:e9:32:43:56:9c:6d:f6:91:57:62:
a8:f9:7e:ea:24:4f:37:7b:54:10:2d:13:de:b9:ba:29:a0:7d:
08:5b:01:43:c8:b3:cf:79:82:da:3b:b8:7d:b5:94:87:a5:f3:
b0:7d:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 06:58:46 2024 by rpki-client on console.sobornost.net