Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: UkXq/jbbXs2u/aTz5W66I5jJP9jeDFX8HyXpzD98Dbo=
Subject key identifier: D3:F1:5A:58:B8:04:C1:14:C8:75:91:40:07:01:66:41:77:0F:4C:04
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 0194BCA9C885EB53F38CEEEFE6DF00109D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: 8tQ+wWWzHFwvf2RdhHcrb73SpsXs4JXytjKmT7CfNB0=)
2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:85:eb:53:f3:8c:ee:ef:e6:df:00:10:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=d3f15a58b804c114c875914007016641770f4c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:a7:14:0f:45:ad:b1:0a:58:58:90:08:93:
46:fb:3c:dd:40:0d:53:46:6d:4c:73:5e:a2:60:0b:
1c:d3:ff:c1:2e:41:39:84:7e:6d:cc:50:d2:2c:b3:
c1:a3:f0:c9:5c:2d:e5:c6:24:94:11:42:03:9e:65:
86:6c:f4:58:b8:a8:f6:60:10:a8:2c:3b:77:db:22:
bb:64:c2:72:b6:51:17:a6:a1:6d:1d:a3:48:ff:00:
b9:70:5e:dd:06:26:8b:37:50:2d:10:69:2f:4e:e6:
3c:e8:fe:e5:76:f6:bf:43:57:8d:89:17:7f:ed:b1:
29:98:c6:2d:e6:08:0c:c2:08:c3:6f:04:05:6a:46:
63:72:82:46:27:08:51:d0:ff:6e:b1:01:9e:c3:c0:
0b:5b:cc:29:67:f9:58:16:2b:59:b2:b2:26:4d:7d:
68:a0:d0:cb:77:40:f0:42:8b:18:d3:9c:3e:a2:0c:
ba:92:bc:4c:48:f5:93:07:81:18:e6:80:5a:17:31:
98:ce:45:71:a1:76:ae:c5:73:0b:de:e9:51:9e:da:
88:78:d6:a7:e0:8f:11:41:eb:66:94:ed:74:7f:2b:
15:d6:fb:16:86:3f:0d:9f:4f:97:ac:b3:b1:b1:05:
30:bf:a2:96:c0:c2:3f:f6:dd:23:ee:3a:48:91:b2:
9c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:5A:58:B8:04:C1:14:C8:75:91:40:07:01:66:41:77:0F:4C:04
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8b:5e:dd:ea:43:29:88:2b:ef:97:35:c1:d0:58:61:0c:55:
f3:f3:7b:5d:05:f0:8b:fb:2e:1e:93:37:39:33:cf:47:87:b8:
32:55:ff:bf:c4:e6:34:b6:ac:d0:f2:2e:f9:66:0b:c8:0e:7b:
86:a6:7e:fc:52:67:bd:e0:a0:8c:6e:e5:e3:11:51:1f:7e:fb:
7e:a2:15:de:e3:97:9c:15:15:36:eb:62:25:48:52:9e:ca:a7:
d5:ae:dd:27:b9:f2:e4:46:78:d3:3d:ef:ba:b0:25:6d:65:2a:
24:95:56:07:71:ab:23:81:ab:b6:bb:c0:72:97:e6:a8:86:87:
bb:d9:20:e3:5e:e5:84:72:10:e8:cd:48:1b:c4:78:cc:85:03:
5b:ab:27:e8:d8:09:72:67:bd:88:6e:b1:52:4d:2f:22:5c:4e:
03:27:d8:3d:0e:df:35:f9:9d:0d:27:e4:ac:0a:9e:28:2b:8d:
a7:a9:1e:69:bf:b0:fc:02:ee:f0:6b:17:97:e1:5f:5d:12:d5:
75:71:50:ac:fb:b8:ca:52:49:94:99:18:0e:83:15:78:54:e6:
0c:86:87:b1:46:80:a1:8d:fd:b7:8d:ca:2e:92:8c:63:90:fa:
4a:16:8c:f5:2b:77:b3:bb:fd:42:59:a6:03:a7:dc:75:de:e5:
10:cc:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:58 2025 by rpki-client