Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
File: W22b4WZAvvk5HQeeD1x_blh-SXU.mft (raw, json)
Hash identifier: Lg1PYvBRlEKA57D8cE18GlVlTmvZTFiW1Gf/IlKC95A=
Subject key identifier: 10:89:68:F9:80:F6:0B:CF:9C:F2:4B:DB:89:3B:A0:44:E8:A6:DC:3E
Authority key identifier: 5B:6D:9B:E1:66:40:BE:F9:39:1D:07:9E:0F:5C:7F:6E:58:7E:49:75
Certificate issuer: /CN=5b6d9be16640bef9391d079e0f5c7f6e587e4975
Certificate serial: 01922B6A8BA06FE754A1095BA27E409563E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W22b4WZAvvk5HQeeD1x_blh-SXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
Manifest number: 86
Signing time: Wed 25 Sep 2024 23:00:55 +0000
Manifest this update: Wed 25 Sep 2024 23:00:55 +0000
Manifest next update: Thu 26 Sep 2024 23:00:55 +0000
Files and hashes: 1: PQyn8RdxSHXOJsRxaOf-6rNH_F0.roa (hash: BcK8SfGh6xhy1wwUZI32vTh3PC3CRfP3BFmOeQmzJVA=)
2: W22b4WZAvvk5HQeeD1x_blh-SXU.crl (hash: Gp2ag3zQCEiOItFWL2d0aKefDGJWWsfp3d6h/9u2/ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:6a:8b:a0:6f:e7:54:a1:09:5b:a2:7e:40:95:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d9be16640bef9391d079e0f5c7f6e587e4975
Validity
Not Before: Sep 25 23:00:55 2024 GMT
Not After : Sep 26 23:00:55 2024 GMT
Subject: CN=108968f980f60bcf9cf24bdb893ba044e8a6dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:a8:31:10:a2:33:fc:3a:e7:e4:7d:32:74:
8c:98:34:0a:41:25:a1:93:53:17:39:29:07:4c:32:
d3:de:15:a3:a2:f1:1f:04:6d:a9:c4:3f:e9:19:7a:
2e:1e:63:9b:6b:87:ce:62:cc:77:11:d3:75:24:5b:
d6:22:f0:eb:76:c8:67:ae:86:c2:72:d0:99:8f:e0:
d4:89:9c:8a:b3:71:db:a6:ef:9f:64:10:d1:5c:e5:
9d:d9:4b:62:ff:57:9a:76:6f:bc:2b:ff:5f:71:12:
83:2f:1f:10:75:cd:8f:ab:4c:ce:48:80:a5:e7:e3:
dc:f1:09:4f:9d:7b:24:83:98:14:e2:50:2a:63:a6:
ad:d0:fc:10:f1:9a:24:6b:af:a9:9a:42:e5:cd:b4:
f6:4f:74:10:86:c2:8f:39:a3:78:69:ee:7f:c4:2a:
ae:e3:ea:ec:e4:32:00:9d:e0:da:f3:fe:cc:8b:ca:
24:4e:4b:02:d9:12:18:cd:f2:e5:28:2d:19:80:b1:
be:61:5c:88:41:ce:92:2a:08:36:5d:e0:fd:c9:ac:
bd:99:b0:bf:02:5b:48:06:01:8c:4e:ef:99:f4:3b:
f9:9b:18:64:ab:c6:79:f5:8e:97:2d:4c:c9:23:c8:
2b:9e:3f:a6:c9:c7:c8:6a:cb:0e:97:a8:9a:0c:75:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:68:F9:80:F6:0B:CF:9C:F2:4B:DB:89:3B:A0:44:E8:A6:DC:3E
X509v3 Authority Key Identifier:
keyid:5B:6D:9B:E1:66:40:BE:F9:39:1D:07:9E:0F:5C:7F:6E:58:7E:49:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W22b4WZAvvk5HQeeD1x_blh-SXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ec:70:db:ea:63:95:5f:fc:63:a1:2f:42:ca:eb:45:8c:3c:
f8:a4:1b:04:9b:22:0b:66:4c:00:9f:f7:02:7f:d4:12:8b:c9:
04:bc:ce:c4:f1:62:f9:68:87:87:df:f6:ad:b0:d0:4a:5b:21:
b3:95:f9:ef:6d:b6:6e:86:bc:10:93:2b:a8:c4:68:9b:be:9a:
dc:8b:6b:93:b3:05:90:37:f1:a4:78:80:1e:c7:d2:28:50:be:
7f:eb:05:a4:af:2f:45:ff:e1:b2:be:e2:c1:2b:b5:1f:28:d4:
3e:ad:2b:1d:ae:1d:6a:9e:ab:48:0d:c8:01:a2:98:79:27:d6:
b9:0b:37:59:75:46:9b:99:8d:dc:c4:6a:35:23:99:b5:4a:a2:
f3:55:61:e0:5f:db:1f:3b:61:d6:9e:b3:44:54:ef:40:2e:33:
09:a5:18:e3:ed:8e:20:bb:92:7b:ef:10:a8:a4:30:15:3f:26:
b6:ac:a9:98:b3:40:21:e7:77:f0:2f:62:ea:1d:da:b9:04:a9:
bb:de:11:6a:df:4c:8c:df:87:51:6c:07:48:78:c1:dd:7b:30:
bb:09:01:a6:d5:a2:12:72:92:89:36:6a:ab:d1:15:e2:74:8c:
7c:15:d0:9d:36:7e:4a:4d:60:e7:4c:bb:71:fe:10:8e:49:89:
af:2d:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:41:21 2025 by rpki-client