Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
File: blLhBfDoJucV9yzFywMSolNEJLo.mft (raw, json)
Hash identifier: jgw2RenFmHaHaQ57SX/ZOahr2RN220sgzpkGKQKCF7w=
Subject key identifier: 04:0A:79:89:1D:88:C0:36:0E:66:A8:87:FA:8B:AA:EC:79:C0:43:3C
Authority key identifier: 6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
Certificate issuer: /CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Certificate serial: 0194BCE0E6CC538D91BCE1EF5A24391A0D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
Manifest number: 055A
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: blLhBfDoJucV9yzFywMSolNEJLo.crl (hash: gcmS4ourlGGqGjxTC5M3yh4nATD0KRSu5r9DU3PZfag=)
2: u8V9QKBVG0Y86-vjzjyTisw0D_Y.roa (hash: KYGcbVwlMJi9uEEQnPMzkMYGof5+7MNCgFq2TVdNdS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e6:cc:53:8d:91:bc:e1:ef:5a:24:39:1a:0d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e52e105f0e826e715f72cc5cb0312a2534424ba
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=040a79891d88c0360e66a887fa8baaec79c0433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:24:18:5e:7b:18:c0:64:51:6d:48:17:26:
bf:d5:67:38:ea:76:ab:d3:35:cf:54:b0:ba:40:9a:
67:ed:7e:95:5f:0c:73:06:60:2a:6d:73:3e:35:fd:
74:db:b9:cd:2e:d7:81:af:e3:93:f3:f1:4b:56:eb:
0c:53:2f:2c:a1:19:67:0c:6b:82:d5:0d:65:7f:b3:
d2:32:27:f3:96:d6:e0:dc:e1:6d:82:f4:26:52:30:
29:72:01:b7:9d:da:4e:65:14:6e:7d:a5:f8:01:bc:
0f:fb:22:98:1a:e3:ec:6c:77:23:bc:fb:42:a5:53:
63:af:24:ed:99:71:17:60:b4:95:9c:b3:1a:05:48:
b4:f6:2a:32:5d:7e:cf:2a:6d:0f:46:ea:d3:03:53:
18:68:9e:71:4f:7b:87:f5:04:e5:b1:50:a2:2b:d3:
5b:54:bb:0e:de:47:5e:c1:44:c0:49:48:b8:43:4c:
ad:a3:14:e0:40:6d:7e:5f:3a:39:9d:26:03:a1:c2:
e8:92:42:14:41:42:22:7e:9f:b5:20:28:64:58:65:
cc:91:11:bc:e1:a9:10:a3:3b:5b:ab:f8:99:8f:35:
8b:e0:85:74:65:d3:4a:5e:07:85:f3:13:d0:d5:bd:
74:3d:7f:c6:6f:86:5e:ef:b7:fc:11:0b:fe:02:68:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:79:89:1D:88:C0:36:0E:66:A8:87:FA:8B:AA:EC:79:C0:43:3C
X509v3 Authority Key Identifier:
keyid:6E:52:E1:05:F0:E8:26:E7:15:F7:2C:C5:CB:03:12:A2:53:44:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blLhBfDoJucV9yzFywMSolNEJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d154c1-9d13-4340-a362-5dee1ea2973b/1/blLhBfDoJucV9yzFywMSolNEJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fc:73:97:16:71:01:88:76:3b:51:e6:70:71:52:a5:38:4d:
86:1a:e8:61:14:f8:4b:c6:fe:80:10:7e:ba:d0:52:2b:83:3c:
61:e3:80:56:07:7a:fb:28:93:66:ba:89:62:3d:75:39:22:fa:
25:62:4f:b5:29:87:36:b7:43:80:3f:a0:46:89:2c:fa:d6:6e:
fc:3e:c6:b3:1f:93:0d:92:56:3b:7b:28:81:b7:cc:3c:d1:02:
1a:16:48:af:74:9b:ee:b8:8b:66:b8:96:d1:f5:0e:ee:43:ba:
99:79:46:b1:8b:37:ac:aa:40:d6:2f:6d:c0:b9:dc:bc:41:49:
a8:eb:25:3b:30:61:08:23:02:eb:39:ac:69:98:e5:df:63:fb:
65:7e:16:95:72:a2:1c:78:ca:e7:41:be:aa:19:14:bd:fd:de:
04:76:d9:5e:d7:52:8c:45:07:f9:04:1c:b5:60:4e:eb:56:88:
e2:82:8d:88:59:de:07:fd:a8:d8:e9:97:e1:7a:4e:25:00:fd:
c5:2d:1b:7e:7b:08:7d:b7:f0:6c:19:e1:3a:1e:27:75:64:cb:
23:2f:e0:52:1d:94:ac:3e:bd:9b:be:e6:12:8d:89:e7:66:ef:
12:8a:9b:2a:0f:e9:3b:af:86:b3:93:49:bc:bf:e2:14:88:55:
34:1d:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:43 2025 by rpki-client