Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File: BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier: vZRAITnjgI8e/GJpbt+aaZ5VktHgmNB1kZNUMPtQgnY=
Subject key identifier: C7:77:99:41:73:45:70:4C:C0:1C:36:FF:1F:78:5E:07:17:8D:92:98
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer: /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial: 0194BC04C6332A752D7DCDA5A59652B6A07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: ZAmThF+MJClbtoLw+3PiVpRYhyBE/LxHzgAbLQxusoU=)
2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c6:33:2a:75:2d:7d:cd:a5:a5:96:52:b6:a0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=c77799417345704cc01c36ff1f785e07178d9298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:bb:07:b6:72:41:e5:ee:d6:de:ac:c3:cb:
2e:28:78:81:8c:0b:1f:26:f8:d6:65:9c:d9:16:61:
1e:2a:06:96:85:5a:ac:63:ec:d9:2b:a0:21:30:32:
0a:c1:fb:3b:0c:c1:11:64:f2:0f:0f:be:ca:e3:bf:
bc:d6:0e:25:53:55:29:2f:9b:00:1d:aa:81:26:29:
e6:cf:db:ee:5a:44:e6:b2:af:55:86:34:dd:b6:4c:
91:2d:33:f5:cd:c0:90:d7:da:29:88:99:81:61:31:
a3:4c:b1:d5:f8:5b:8e:c1:0e:29:76:33:d6:c1:5e:
68:6d:37:98:f6:a4:b8:e5:dc:49:01:22:eb:65:23:
bb:4d:21:88:9a:d9:a6:c0:1c:fd:c7:b0:b3:1a:d1:
93:a7:d3:8a:8c:22:4b:d5:6c:f4:2d:fd:5f:65:94:
51:8d:24:81:47:f8:a4:fa:e2:6c:50:44:2d:6e:a5:
31:87:b9:96:3c:81:d9:f5:00:37:9c:f6:56:f5:3a:
70:42:2c:73:d6:32:41:96:30:86:d2:ea:b5:29:9a:
7b:ce:51:61:4e:0e:40:15:33:52:44:dc:87:fe:e5:
3f:5e:2a:06:84:89:a2:1d:40:ee:32:25:c7:b8:b6:
ce:69:ab:31:ff:30:fa:2e:4d:a1:0c:a7:bc:35:2d:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:99:41:73:45:70:4C:C0:1C:36:FF:1F:78:5E:07:17:8D:92:98
X509v3 Authority Key Identifier:
keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:10:f9:81:26:c1:7e:aa:b1:1f:78:71:0a:f7:41:3b:79:19:
be:2c:52:8e:87:b6:7e:a4:af:6a:ac:81:77:e5:aa:c5:23:c7:
88:11:43:94:af:13:01:68:ea:4d:83:34:bd:2c:5c:d5:f4:87:
a2:6b:a1:28:f3:71:d8:a1:b6:d8:74:eb:3c:f5:3e:c6:89:51:
2f:fb:20:49:3f:d4:83:42:d2:ea:12:1e:62:82:8a:7a:02:29:
76:95:74:1a:8c:3b:36:d8:15:f5:25:8b:43:0c:76:3d:8f:77:
a6:ea:ac:3d:67:c1:f4:1a:fb:3b:84:89:2f:01:24:9d:13:91:
c9:72:c1:23:6e:17:a7:fe:b1:91:6f:36:9d:88:a6:26:ca:a5:
6b:68:5c:45:f7:2e:6a:4e:c5:31:ae:dd:2a:ac:bb:86:56:8f:
c2:f6:cb:d4:8c:4c:f3:97:da:52:90:8b:4c:e5:fc:1a:08:6b:
76:91:92:77:5d:29:74:64:b5:a3:a4:75:a0:be:31:ac:aa:2a:
de:8b:ad:32:c3:f5:70:50:b3:4c:0b:a9:33:b1:68:25:64:67:
7b:60:95:1a:0e:6d:c0:fe:b3:45:91:b8:0a:08:00:2f:bc:74:
3f:b7:74:25:cf:cd:7f:99:c5:ec:ee:8b:91:c3:41:29:27:60:
40:35:e8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:26:22 2025 by rpki-client