Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File: BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier: Atm/H9cqpx1wJZl5wAJCH1lFa9BvZcLfCOfToG+fhMk=
Subject key identifier: C3:8D:15:2E:53:F8:FE:0F:D2:C9:72:28:56:69:1F:F2:33:F3:AA:6B
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer: /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial: 0194BD85B9FD557887348DE9933CFF8F9E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: /pLh4MwfWrO2TY+xtvksd4bHeOYe8F6nT3/KqZnnmjA=)
2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:fd:55:78:87:34:8d:e9:93:3c:ff:8f:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=c38d152e53f8fe0fd2c9722856691ff233f3aa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:64:4a:38:a6:73:43:f0:22:dc:f3:a7:77:
b6:4a:32:4f:5c:1e:c1:75:2c:23:bf:84:d6:bc:30:
b1:38:c0:e0:49:b9:25:1c:d7:e2:38:03:17:4e:d2:
42:dc:b4:3f:eb:7d:3b:78:fb:fd:1b:e4:f9:ed:c2:
69:75:db:bf:99:81:8c:b5:12:d8:84:b2:72:91:6e:
ca:64:c6:5e:a7:5a:0d:1d:06:a2:bc:e1:33:da:10:
bd:1c:ec:2b:05:9b:b9:0f:63:7b:db:a1:06:c1:5c:
a5:87:01:db:06:f6:95:5f:ef:37:f5:c4:5a:23:f6:
c6:6e:1a:11:14:11:85:ec:b9:a0:4d:96:a8:c6:03:
2c:a3:41:16:0a:fb:d9:6f:52:50:e7:58:b9:95:49:
82:cb:56:6d:74:8c:04:1f:30:a0:ba:64:7b:bf:ba:
2e:c8:0d:22:cd:cd:02:03:40:c6:8f:7e:c2:17:6b:
c3:42:5e:fd:15:01:d2:e4:c5:3f:20:47:96:1f:f3:
63:61:c5:d7:6c:5b:ed:fe:11:b1:04:26:68:42:07:
35:8f:cb:cc:28:50:bd:13:fa:3b:93:89:da:f6:4d:
de:0c:fb:b6:4d:0f:c7:7d:03:46:95:67:e9:90:22:
e3:af:0a:4d:1e:23:11:ad:c4:ae:74:eb:e4:be:c9:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8D:15:2E:53:F8:FE:0F:D2:C9:72:28:56:69:1F:F2:33:F3:AA:6B
X509v3 Authority Key Identifier:
keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:89:46:ab:9c:20:df:88:eb:d1:95:b5:93:7e:14:c8:d5:82:
d8:7b:79:37:41:fd:f1:43:24:8a:c6:5c:b2:c9:30:fd:71:a4:
a6:46:87:c6:d6:34:d9:c2:ff:d4:48:7e:cb:41:fe:ac:4b:b7:
e8:73:89:0a:eb:28:e6:53:55:d3:a4:65:38:c7:7f:bd:ef:c6:
ce:e7:3d:d0:1c:b4:35:ac:7b:85:f8:49:ee:92:de:4a:5b:a1:
9f:05:3c:04:48:7e:91:73:4d:f7:f6:93:20:8f:c1:46:be:6b:
5a:3f:e0:7f:2c:57:fc:d2:a9:ea:3e:a6:2b:c6:ad:ea:e6:66:
1f:67:f0:d9:91:1b:f9:26:cb:88:18:56:64:b4:48:fd:ab:ed:
f1:75:63:8b:7e:63:6b:db:79:4b:b8:f7:41:37:7d:e2:9d:75:
0f:c7:d4:5c:df:07:c2:fa:df:96:9c:08:3e:c7:14:85:2c:96:
c6:ef:db:3c:9f:10:bf:f8:37:62:85:48:82:72:77:bf:2c:5b:
b4:08:aa:4a:ac:43:eb:da:f2:00:c5:f9:e8:ca:02:03:7b:ae:
d2:5d:f3:f1:97:77:cc:ff:b3:e8:8c:60:a0:cd:14:5a:78:05:
78:31:c7:ad:47:9f:e6:b3:0f:62:f7:62:3e:8c:62:6c:fb:76:
89:88:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client