Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
File: BWZHdQv1L3epyRwtaGToccGq-p8.mft (raw, json)
Hash identifier: c9DLC8AJcrdrN0fuzShXxvD0LT3z3usC1bLlHerLNW0=
Subject key identifier: E8:DC:71:8C:68:77:70:FD:2E:46:D0:80:DF:1B:4E:C8:51:60:24:04
Authority key identifier: 05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
Certificate issuer: /CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Certificate serial: 01864A86C2B4670B46A31F6358373E69B6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
Manifest number: 0C
Signing time: Mon 13 Feb 2023 11:26:31 +0000
Manifest this update: Mon 13 Feb 2023 11:26:31 +0000
Manifest next update: Tue 14 Feb 2023 11:26:31 +0000
Files and hashes: 1: BWZHdQv1L3epyRwtaGToccGq-p8.crl (hash: rVCACl9HRo1U0lkguxoTj8lgi/HnI/cyMYJ/yiHviXA=)
2: hRsYtAHK6OUgpqgxD_NS-Sq4hmA.roa (hash: fCipxWQscGJ90OzGt/J5+ar7VwxV6Q11iqKdTL+xf2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:86:c2:b4:67:0b:46:a3:1f:63:58:37:3e:69:b6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056647750bf52f77a9c91c2d6864e871c1aafa9f
Validity
Not Before: Feb 13 11:26:31 2023 GMT
Not After : Feb 14 11:26:31 2023 GMT
Subject: CN=e8dc718c687770fd2e46d080df1b4ec851602404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:b6:1a:c1:b1:59:81:10:65:de:7a:4a:7c:
c4:3d:67:90:fa:b6:41:6c:42:17:5e:2a:24:99:d7:
d0:84:74:cf:df:76:a7:91:81:d3:93:38:f2:6a:80:
2b:2b:23:91:a6:5e:95:83:d6:db:12:3f:2a:f9:33:
21:28:5a:4c:2f:78:6a:18:8f:18:9c:a8:04:b6:cb:
0e:5c:67:cf:d1:03:a1:46:c7:c8:8c:7c:3b:4c:a6:
af:69:ff:e2:62:1d:b4:7c:ae:85:36:b9:b2:d0:bb:
54:c8:22:50:89:a4:4c:42:66:17:75:0d:c3:95:1e:
6c:3f:20:c6:b9:fe:56:03:dc:cd:26:bd:9e:b5:0a:
e8:11:38:b2:98:26:00:1d:6b:12:73:85:32:58:d0:
91:22:26:82:7e:a5:79:7c:3e:ef:d6:e9:2a:26:04:
b3:52:91:61:bd:7a:24:2c:8b:8b:1e:08:f9:86:34:
36:6e:f5:4b:91:6a:4c:37:5e:00:0c:2e:2a:e0:0a:
97:ad:6a:37:bc:34:d9:f7:81:94:22:aa:1b:bd:5b:
02:ac:15:1e:74:37:f2:4d:11:93:bb:82:f5:4a:4c:
e0:3a:6c:36:38:a7:e3:99:3f:2c:47:ca:45:e9:36:
dd:8c:09:ab:32:a4:c3:58:5e:e1:34:c1:a7:e1:d9:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DC:71:8C:68:77:70:FD:2E:46:D0:80:DF:1B:4E:C8:51:60:24:04
X509v3 Authority Key Identifier:
keyid:05:66:47:75:0B:F5:2F:77:A9:C9:1C:2D:68:64:E8:71:C1:AA:FA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWZHdQv1L3epyRwtaGToccGq-p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/edf795-ec92-40d6-b46d-afb1d85c95a8/1/BWZHdQv1L3epyRwtaGToccGq-p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:c9:bc:37:61:74:4c:db:b1:ef:0a:1c:99:08:c3:ba:db:
df:0d:61:2c:d8:10:95:c9:56:a5:51:f0:f6:91:d6:be:45:4d:
3a:b9:f7:f9:62:1a:6a:91:02:44:17:8e:84:ca:4d:57:c8:04:
ad:b2:45:4c:a3:6d:3f:8a:a9:76:c4:cb:33:b7:23:b9:3e:df:
8d:a2:70:77:16:a4:40:c8:8a:29:30:ce:3e:a2:05:23:7a:30:
8f:a6:6c:72:84:43:d8:60:d2:39:d7:4e:e4:0b:57:b1:3a:70:
fa:a8:c6:48:43:97:39:12:55:f7:05:91:10:97:2b:0c:fd:21:
45:a5:05:b9:c3:d3:b4:cc:51:7e:bb:c3:3e:55:64:e4:73:d8:
f7:c7:b9:2c:39:8a:dc:c1:91:a4:22:5f:b8:49:3b:49:4a:bb:
af:54:fb:3f:b7:9a:0b:d4:0f:fb:41:18:97:41:27:9d:b8:14:
eb:3b:11:e2:83:ba:97:98:56:04:c0:36:e7:cd:63:8e:da:32:
ac:37:d1:93:16:b7:1d:47:1c:28:bb:b8:49:33:e5:91:c1:8a:
d8:1d:54:bb:2a:97:02:93:db:d8:31:01:51:d8:da:0f:f7:33:
fe:a1:41:b1:33:d5:cf:f1:9b:fd:3b:61:db:5f:32:62:22:b8:
50:3e:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:35 2025 by rpki-client