Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File: BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier: kGgzpYkJCeLAQ3sPZ5FrMBPcShoZBEAQsBi+0QBSUXw=
Subject key identifier: 12:82:A9:4F:97:07:67:89:6F:FD:86:46:04:F2:9B:01:58:0F:26:E2
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer: /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial: 0194BBCEA420CAD4B1E80BCE5772C82A108D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number: 0A82
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: LZi3yJ6cxk8IqDn5uYv/dU2KG50ZtmBxjlYkPYmDQmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a4:20:ca:d4:b1:e8:0b:ce:57:72:c8:2a:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=1282a94f970767896ffd864604f29b01580f26e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:bd:30:e9:c6:c5:16:7e:df:3a:66:80:f3:
4d:2a:71:c4:32:fd:7f:f6:95:d8:d8:c9:0d:b5:78:
eb:86:59:f6:50:b7:31:84:98:26:ef:d4:5a:a5:c4:
0b:9e:cb:06:19:3a:c4:99:38:03:52:e9:14:c7:ac:
b3:07:91:01:d6:80:b3:0f:00:ca:a4:66:af:7e:a2:
bb:5a:0c:a0:0a:81:89:45:d5:97:94:f3:be:81:13:
08:1f:2f:91:ea:14:80:1b:3b:28:8f:85:d8:be:76:
c1:9e:ce:be:89:85:af:c1:5b:76:28:a4:38:1f:61:
9a:7e:3a:81:82:00:cc:34:b0:37:15:57:01:85:f4:
cb:e7:36:ef:1c:51:32:55:ef:d1:0e:31:50:a6:5f:
da:07:a9:2e:56:21:6f:fc:ee:c8:d3:14:3e:d1:83:
b0:e5:a2:d6:20:de:bb:67:07:14:9f:de:73:76:36:
73:fa:2c:6f:cf:32:38:9a:ae:97:a6:d1:a2:6e:5c:
fc:5c:4d:8d:dc:55:4c:07:c3:17:06:74:cc:10:6b:
24:df:5c:49:ad:b9:78:74:07:94:9e:f9:44:29:ed:
14:50:5d:cd:d3:fc:4e:b2:d0:e4:47:4d:be:f4:03:
60:6f:c5:0b:54:8d:09:88:3a:5f:18:b9:c8:c1:cb:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:A9:4F:97:07:67:89:6F:FD:86:46:04:F2:9B:01:58:0F:26:E2
X509v3 Authority Key Identifier:
keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:0f:7b:64:76:73:74:68:13:cf:5a:ba:4b:65:3d:ef:36:
b6:ca:3d:d1:26:98:d1:e9:ac:22:f8:49:6d:56:25:f2:10:ae:
bf:06:58:53:d6:ea:0d:0d:bd:fa:5f:c8:99:7a:2e:5f:d3:93:
4c:f3:08:25:6b:82:b8:5d:c0:72:e1:02:d9:0a:2b:66:52:76:
ac:dc:14:c6:a5:05:4f:47:81:44:73:4c:b3:48:9c:0e:fe:57:
9e:81:38:98:e2:9b:6d:8b:13:66:74:4c:f1:a1:1c:17:2b:e8:
f0:39:fe:f4:8a:b4:8b:85:c0:07:e7:22:04:0a:ed:a1:bf:a2:
47:9b:d5:af:44:a0:bc:39:34:43:c7:c8:f9:ad:e8:16:ee:63:
ef:9f:05:a3:97:f7:c4:01:b9:67:37:0c:c5:65:50:12:51:2a:
23:2c:a8:74:9d:a0:f3:68:7d:47:4b:9e:84:08:e5:e6:01:f0:
af:a4:d6:23:e3:ba:c8:9f:b0:24:9d:10:c5:7d:73:f7:60:f4:
b7:9c:3c:c9:de:6f:c1:df:73:3f:8a:2a:f9:65:37:fc:ac:eb:
6a:d3:aa:c0:ff:fa:01:92:be:c9:83:ba:ad:d0:d5:81:75:7f:
a8:06:c1:cb:4c:2f:6e:3c:1f:b2:f4:4e:00:5c:23:fc:2d:27:
ee:98:6d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:42:53 2025 by rpki-client