Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: b+787grolHKtRjnGHiNF2ptSkbyyJXlqgjx7AxF0jb8=
Subject key identifier: 14:CD:15:8B:E1:A9:4C:FF:28:B9:0E:3F:B6:76:2C:54:4E:3C:9D:B6
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 0194BC72BF10D9DA403132D381299ABF88E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 01B7
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: HpXFceipcS1LcfCM/jSVXJ/qUwRs4ZvoUaizZM3cY0Q=)
2: xfuYQjKIwNsH8n8qNl-5nn5swlA.roa (hash: EURGAPm/xAIC/hIpJIK0VPaCfzGhmdAUIaI/It3KKIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:10:d9:da:40:31:32:d3:81:29:9a:bf:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=14cd158be1a94cff28b90e3fb6762c544e3c9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:9d:2c:34:41:83:e6:9a:1b:f7:8b:fb:ff:
5d:6c:86:aa:fc:f9:90:65:5b:53:bc:b3:8c:bb:00:
dd:03:55:ea:eb:38:da:d5:30:5f:d9:b6:74:34:47:
97:f0:40:bc:99:e3:35:ae:f1:aa:bc:bd:65:08:1c:
16:6d:47:83:54:a8:66:4f:18:7d:b6:9b:bb:8a:cd:
e0:a3:95:0b:df:58:3e:4f:01:73:48:d1:6c:1f:3d:
64:09:b5:2d:3a:bc:66:f4:8b:7a:02:02:9b:63:9d:
73:fe:f3:1d:98:c1:1e:5f:82:0c:27:05:76:8e:9b:
de:fc:7c:7f:74:0e:a6:4f:db:01:82:5f:d6:94:23:
cb:e6:03:c6:6b:19:52:30:3d:ff:cb:43:14:49:62:
4c:07:4c:fc:79:3c:47:4a:93:a8:74:d0:71:8e:08:
bc:d1:7f:4b:4f:ff:19:f8:4d:fd:57:13:86:f7:d3:
35:ee:50:12:14:61:7c:d5:6e:cc:e6:12:3b:e1:e0:
33:35:18:09:c5:8e:2d:d5:ae:03:3f:e8:4b:6e:5b:
7b:42:09:46:f4:1a:a5:05:9b:97:5f:06:3c:29:9a:
da:b5:38:b4:4d:50:f7:1a:44:e2:47:69:a8:32:0d:
93:dc:d5:6d:a2:37:2f:c2:e1:3d:d3:ae:6b:79:b1:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:15:8B:E1:A9:4C:FF:28:B9:0E:3F:B6:76:2C:54:4E:3C:9D:B6
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:31:0c:24:4f:ce:eb:e8:ff:90:58:93:66:78:14:2f:b0:4d:
86:a6:28:aa:24:b7:fe:0e:a4:94:f9:c2:dc:67:c4:80:a8:77:
fe:98:be:0a:0c:eb:e1:11:d4:77:63:2e:0f:5f:43:8c:2a:fe:
d8:c1:29:f0:5e:a5:4a:bf:b9:7e:d7:55:54:62:48:5e:c3:e3:
79:16:62:91:27:ab:63:b4:96:a0:9a:da:86:99:81:f5:a8:02:
c3:90:b6:a1:40:dc:97:5a:b6:8d:ca:25:a7:7b:84:d6:3c:63:
c3:93:f8:62:76:21:cc:db:45:32:28:5b:18:b1:17:72:27:5b:
71:94:b3:85:85:2f:24:3e:62:78:38:77:80:2e:d2:b2:67:92:
65:b3:7b:0a:b6:1d:58:42:2e:81:81:78:17:d1:b3:7c:e1:27:
43:71:33:2d:be:ac:ed:b6:ba:b2:85:15:c3:9e:03:fa:57:3b:
8e:b1:44:27:28:aa:1d:ae:bd:16:78:6c:3a:63:a3:8d:c9:1f:
9e:06:a3:9e:23:a1:3a:f3:7c:00:04:c4:fc:79:e5:4a:56:55:
cc:0f:c9:d8:68:20:38:b9:75:4d:5c:c8:b4:06:a7:65:33:c6:
87:f5:dc:98:bd:e3:3c:2f:dc:e5:35:0e:70:f3:af:b3:fe:3c:
4d:b9:0e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:59 2025 by rpki-client