Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
File: bhWkM20vXhvWBzfelXlomSp0cOk.mft (raw, json)
Hash identifier: 1BYIBs+QBiWX7Wlv1fJrpu7omcRfyPMzHSQyWbYCd8U=
Subject key identifier: CC:2D:4F:4B:51:9E:27:26:69:B3:C1:1A:82:03:EF:59:F1:2D:8A:9D
Authority key identifier: 6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
Certificate issuer: /CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Certificate serial: 0194BD17ABBB4A19B030AC3EDDB4A044C75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: bhWkM20vXhvWBzfelXlomSp0cOk.crl (hash: cY2q3DXD6C2tiYm7tgG79YiqG//wVauyQ2o1ehcuQro=)
2: zgsEDv3otZRAtHyWvGAv7rzQjXg.roa (hash: ZyzEtsDUzNfUy6YLDq0VYYYmMcE0twVe+0tLjGTigwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ab:bb:4a:19:b0:30:ac:3e:dd:b4:a0:44:c7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e15a4336d2f5e1bd60737de957968992a7470e9
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=cc2d4f4b519e272669b3c11a8203ef59f12d8a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:95:0a:53:2c:6e:5a:75:f4:e3:08:cb:ec:
69:a0:7f:eb:d7:c3:41:1b:06:c0:03:4e:73:c7:9e:
df:e9:1b:a0:c3:85:90:81:f9:a5:da:c3:3c:ce:ff:
6f:5b:bc:10:9c:34:cf:88:31:e9:bc:31:cf:f2:db:
13:6d:38:b4:d2:08:d9:aa:e8:5f:c7:7a:9d:b1:be:
c1:99:7b:1f:79:79:b7:77:e1:0a:ed:06:2a:29:3b:
f2:fe:c4:ed:17:6d:5b:d0:e8:26:f7:c9:8d:fc:14:
0d:9a:1e:74:ff:8b:2d:61:9b:44:91:c8:e4:8c:cb:
eb:b0:de:21:a9:62:31:57:11:0c:79:b7:5b:34:a0:
6f:c3:cc:dc:a0:84:07:3a:ce:00:f5:fe:28:98:bb:
94:ea:42:53:92:69:78:9e:df:cd:d2:56:29:1b:56:
30:0b:88:d4:21:bb:f4:5f:cd:79:5c:f5:b4:1a:59:
75:b9:61:2a:38:36:0d:fe:fc:24:4c:da:76:9e:05:
84:77:e4:fd:ae:0f:b5:e2:58:99:52:86:6e:33:88:
23:31:32:7b:34:33:67:be:42:26:f2:80:5b:ac:72:
04:55:40:df:4c:0e:75:63:12:18:f6:d9:50:3f:9b:
38:86:c0:5d:03:a5:b0:ef:2a:7a:7f:24:78:3e:c7:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:4F:4B:51:9E:27:26:69:B3:C1:1A:82:03:EF:59:F1:2D:8A:9D
X509v3 Authority Key Identifier:
keyid:6E:15:A4:33:6D:2F:5E:1B:D6:07:37:DE:95:79:68:99:2A:74:70:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhWkM20vXhvWBzfelXlomSp0cOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/893850-a855-4a54-b5d0-8d5246a20245/1/bhWkM20vXhvWBzfelXlomSp0cOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a6:0a:75:ab:88:1c:28:44:be:45:16:fb:33:1f:4a:e0:cb:
fc:25:af:97:f6:e7:87:9c:72:d1:53:66:c7:16:45:80:ba:cf:
fb:0f:ba:5a:d1:98:70:f4:88:cb:d4:74:f9:d0:1a:ce:b7:77:
04:b2:e1:43:e8:a9:1c:4a:bf:31:78:97:66:90:06:35:98:bc:
f6:9a:a6:0a:45:52:c9:e3:4a:b2:b7:60:90:e3:60:94:d4:44:
fb:f3:65:07:d4:67:c3:96:78:34:13:99:6a:dc:54:72:39:5c:
6d:0f:0e:a2:6a:c2:08:e8:73:7a:74:87:8c:c4:5f:72:8d:1e:
5a:25:bc:f4:cb:e0:bd:fb:5e:ad:c3:38:96:d9:1f:fc:c4:95:
96:a9:53:f4:c9:69:49:a2:1b:6c:e0:8d:64:e0:16:43:da:7e:
2b:83:23:ad:4a:d8:05:99:a8:14:ea:5d:5c:6c:66:52:41:93:
0f:4c:f0:02:ea:08:38:d6:36:a1:2d:67:e7:9e:d3:02:4f:94:
50:68:5d:25:09:39:85:ba:89:de:14:aa:30:82:b3:77:b4:c0:
72:b0:8a:d5:d0:d0:75:53:1d:01:9d:c9:7d:3c:08:0a:6e:4b:
b7:a7:c6:0c:7b:ca:fa:a6:06:e5:b4:3f:b8:20:3b:62:11:e3:
32:72:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:06 2025 by rpki-client