Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
File: W22b4WZAvvk5HQeeD1x_blh-SXU.mft (raw, json)
Hash identifier: 9cpLbJNC7ZKYMsjuCF28fNdq53XMCtPlb+xGFxYX3M0=
Subject key identifier: 0E:3F:8E:FF:DE:D4:BC:3C:64:31:0E:02:CA:F3:0C:B6:06:DD:93:2A
Authority key identifier: 5B:6D:9B:E1:66:40:BE:F9:39:1D:07:9E:0F:5C:7F:6E:58:7E:49:75
Certificate issuer: /CN=5b6d9be16640bef9391d079e0f5c7f6e587e4975
Certificate serial: 01922D59000C6170D064CD1249F1A51EA9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W22b4WZAvvk5HQeeD1x_blh-SXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
Manifest number: 87
Signing time: Thu 26 Sep 2024 08:01:00 +0000
Manifest this update: Thu 26 Sep 2024 08:01:00 +0000
Manifest next update: Fri 27 Sep 2024 08:01:00 +0000
Files and hashes: 1: PQyn8RdxSHXOJsRxaOf-6rNH_F0.roa (hash: BcK8SfGh6xhy1wwUZI32vTh3PC3CRfP3BFmOeQmzJVA=)
2: W22b4WZAvvk5HQeeD1x_blh-SXU.crl (hash: GMA59sXmzaHlr9KEZvHRxr2b31NT2OISICAvztomOrE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2d:59:00:0c:61:70:d0:64:cd:12:49:f1:a5:1e:a9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d9be16640bef9391d079e0f5c7f6e587e4975
Validity
Not Before: Sep 26 08:01:00 2024 GMT
Not After : Sep 27 08:01:00 2024 GMT
Subject: CN=0e3f8effded4bc3c64310e02caf30cb606dd932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:92:73:cd:23:e3:2f:13:e1:76:de:f4:d3:
fa:0c:84:ad:b1:c5:dd:b8:98:83:a7:96:f9:ff:c6:
8e:92:e6:7f:8d:3c:f0:a6:d4:f8:3a:ae:0d:d7:96:
41:c4:ff:d0:c4:19:14:d1:1c:17:50:86:03:98:39:
28:a5:f2:fd:e6:6e:ce:4a:41:df:13:2d:f7:33:6b:
fe:d9:14:21:86:2e:f5:f4:32:12:61:12:ee:3b:f1:
5a:b5:b1:73:aa:45:29:96:58:21:5e:4f:5a:6c:91:
74:bc:ec:2a:6e:5c:23:a5:ba:42:e0:b1:32:ea:34:
fe:7e:ae:d3:ad:58:cf:3c:02:ef:08:a9:c3:3f:41:
b0:1c:c2:d9:ff:f5:02:25:82:03:bf:5d:df:f3:2a:
e1:0e:0e:0b:0e:a9:1b:75:32:08:fb:58:8a:4e:2c:
35:20:7b:fc:51:fe:df:50:e5:35:54:49:2d:0b:44:
80:25:79:a5:c7:73:0a:bf:c6:8a:dc:8e:bb:f4:61:
b5:92:2f:ea:2b:56:41:d7:ad:02:68:11:8f:64:43:
9f:c8:88:82:3a:87:aa:5e:27:4d:65:4a:da:7b:93:
4e:7e:6c:ac:c3:f4:5e:90:9e:9e:a6:95:0b:d5:dd:
ae:3f:35:2c:7f:24:87:66:78:b9:bc:d6:9f:21:95:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3F:8E:FF:DE:D4:BC:3C:64:31:0E:02:CA:F3:0C:B6:06:DD:93:2A
X509v3 Authority Key Identifier:
keyid:5B:6D:9B:E1:66:40:BE:F9:39:1D:07:9E:0F:5C:7F:6E:58:7E:49:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W22b4WZAvvk5HQeeD1x_blh-SXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0095ef-8a39-44d1-a9a6-5baef3fc295d/1/W22b4WZAvvk5HQeeD1x_blh-SXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:35:a6:0f:5f:ee:dc:fc:dd:2c:23:30:45:bf:b5:ed:a7:
0b:09:8b:7a:36:b8:31:7f:64:ba:86:69:ec:62:35:5b:33:53:
e9:c4:51:cc:63:2e:ac:35:1c:de:af:8c:3e:3e:0e:c9:4d:b1:
a4:91:9b:26:fb:05:c1:2b:d8:32:d0:3c:47:ee:f7:4b:1e:ec:
1e:e7:8e:b3:a2:ad:6d:b4:89:48:9c:60:34:f2:08:bb:ec:67:
69:2a:f4:a2:a6:91:7a:27:a9:9a:01:b6:cc:9c:80:99:2b:a9:
56:7a:00:94:9f:48:d7:4c:40:81:a9:60:22:19:98:be:e1:0e:
cb:0a:d9:9d:03:af:80:fb:f5:9e:7c:cd:c2:7c:01:fc:b5:61:
3c:84:71:f5:5d:4e:51:91:02:b7:ea:e1:60:c3:b4:2c:26:c5:
6c:4c:89:49:91:f1:fc:c0:87:59:bc:c7:da:62:b1:10:08:17:
99:5d:9b:2f:ab:e7:fc:80:26:fa:60:f1:95:bb:66:59:94:0f:
90:ab:b9:ce:b4:81:7a:c3:e5:13:f6:da:0b:f4:a7:0a:11:27:
86:c8:e6:4e:09:a5:e4:b4:c4:c4:69:7c:b4:97:e8:c7:57:bf:
d2:c9:ac:66:70:07:8d:a8:4a:8f:89:64:e8:1b:47:79:6a:3c:
f0:49:15:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:37:04 2025 by rpki-client