Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a2f6d8-e479-42b2-8e84-0ee68e166232/1/bHGp21PGQkgvl-fR_Aa-S4N9HFY.mft
File: bHGp21PGQkgvl-fR_Aa-S4N9HFY.mft (raw, json)
Hash identifier: BKNF+5xJ4FaiJFvcL6kVTPUizF79/lh6zZv31UxQnDg=
Subject key identifier: 56:89:39:12:B0:20:E8:E4:46:79:70:6C:13:03:51:2A:C9:49:F6:60
Authority key identifier: 6C:71:A9:DB:53:C6:42:48:2F:97:E7:D1:FC:06:BE:4B:83:7D:1C:56
Certificate issuer: /CN=6c71a9db53c642482f97e7d1fc06be4b837d1c56
Certificate serial: 018C581BF876BB8DC84A1EC81F724E52CB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHGp21PGQkgvl-fR_Aa-S4N9HFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a2f6d8-e479-42b2-8e84-0ee68e166232/1/bHGp21PGQkgvl-fR_Aa-S4N9HFY.mft
Manifest number: 05CA
Signing time: Mon 11 Dec 2023 09:01:17 +0000
Manifest this update: Mon 11 Dec 2023 09:01:17 +0000
Manifest next update: Tue 12 Dec 2023 09:01:17 +0000
Files and hashes: 1: bHGp21PGQkgvl-fR_Aa-S4N9HFY.crl (hash: NtThBiwdDNzdYaKNOXa+YVpP7IVTI4f9pYfsZB0RB1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:1b:f8:76:bb:8d:c8:4a:1e:c8:1f:72:4e:52:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c71a9db53c642482f97e7d1fc06be4b837d1c56
Validity
Not Before: Dec 11 09:01:17 2023 GMT
Not After : Dec 12 09:01:17 2023 GMT
Subject: CN=56893912b020e8e44679706c1303512ac949f660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:3a:ee:b6:74:da:44:d3:b2:23:b1:55:ff:
f5:4c:11:9b:4d:87:10:13:37:fb:ba:91:f4:98:29:
5c:77:f0:52:86:00:41:6d:d7:38:7f:fe:3d:e3:9f:
1c:b8:0c:c0:84:4e:f9:8b:31:8d:82:85:c7:c5:13:
4c:64:2a:1d:77:bb:dd:5a:d7:3f:fe:5e:7f:41:1f:
9a:f4:6e:af:3f:2a:63:46:39:40:2a:7d:e4:7c:47:
93:91:f1:13:c5:57:81:70:94:ad:4e:21:5f:a3:89:
6b:31:b2:12:d4:8a:03:6a:3b:fd:53:68:39:dc:fa:
bd:22:4b:77:f2:b4:77:33:d1:2a:8c:b0:39:91:db:
32:72:fe:8f:d1:2b:55:8b:84:e1:99:ee:0a:4f:9a:
97:e0:48:fd:90:d7:76:33:fd:27:fa:05:da:1e:e1:
e2:c9:97:90:8b:33:bc:37:46:f1:f7:b8:32:d5:b9:
c9:28:b9:70:16:64:49:f8:02:6f:25:7e:99:b4:85:
43:3b:67:cd:55:1f:31:d2:4e:b8:a5:1d:5f:2c:f2:
4e:fd:48:2e:ec:69:a7:33:96:57:fb:4b:ed:eb:80:
50:19:04:30:1e:6b:72:ce:d8:45:59:41:f9:8a:70:
17:f8:37:a4:73:33:2f:8d:d1:ea:65:fb:b4:c9:9f:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:39:12:B0:20:E8:E4:46:79:70:6C:13:03:51:2A:C9:49:F6:60
X509v3 Authority Key Identifier:
keyid:6C:71:A9:DB:53:C6:42:48:2F:97:E7:D1:FC:06:BE:4B:83:7D:1C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHGp21PGQkgvl-fR_Aa-S4N9HFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a2f6d8-e479-42b2-8e84-0ee68e166232/1/bHGp21PGQkgvl-fR_Aa-S4N9HFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a2f6d8-e479-42b2-8e84-0ee68e166232/1/bHGp21PGQkgvl-fR_Aa-S4N9HFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ef:c3:71:ae:18:21:11:f9:4d:b4:94:8c:be:7c:9f:a5:6e:
85:3c:72:1f:4a:f0:03:e4:43:c8:8b:ed:73:2f:de:ff:da:66:
4f:ca:80:d9:fe:d0:a6:88:4c:53:cc:3f:2c:54:3f:98:6f:8c:
a2:91:80:6e:03:75:ef:86:e4:8b:f6:b2:14:46:00:e2:73:33:
b6:91:49:56:2c:b5:d7:8f:1e:78:e1:9a:29:b4:12:ae:47:d6:
f2:9c:3d:cc:55:9b:7c:07:d1:75:b9:e0:e8:1a:cd:d7:77:b7:
60:19:73:12:26:6c:25:e5:08:0a:73:fe:1c:f7:c3:97:50:88:
ea:89:62:64:59:9c:aa:5e:3f:b7:ba:10:b2:77:9f:67:fa:e2:
71:0b:c7:e4:72:cd:06:56:58:b4:f0:ef:d6:3a:02:c6:ac:15:
52:51:7f:31:9f:0e:cf:e4:8b:f5:69:5d:0f:be:22:1b:63:0b:
9a:d3:6e:37:8c:d3:50:bc:54:05:4e:d8:d6:3e:1f:30:80:b9:
53:f5:bd:9f:bf:27:e1:e8:59:77:86:d3:01:7e:7e:70:29:eb:
c1:7f:33:f9:08:2f:f7:82:5f:69:96:2d:9c:2d:1c:8c:32:59:
0d:11:71:2c:45:56:72:ad:6b:b0:dd:7e:94:2c:74:61:6b:c6:
a1:47:7c:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxYG/h2u43ISh7IH3JOUssXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzFhOWRiNTNjNjQyNDgyZjk3ZTdkMWZjMDZiZTRiODM3
ZDFjNTYwHhcNMjMxMjExMDkwMTE3WhcNMjMxMjEyMDkwMTE3WjAzMTEwLwYDVQQD
Eyg1Njg5MzkxMmIwMjBlOGU0NDY3OTcwNmMxMzAzNTEyYWM5NDlmNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+c67rZ02kTTsiOxVf/1TBGbTYcQ
Ezf7upH0mClcd/BShgBBbdc4f/49458cuAzAhE75izGNgoXHxRNMZCodd7vdWtc/
/l5/QR+a9G6vPypjRjlAKn3kfEeTkfETxVeBcJStTiFfo4lrMbIS1IoDajv9U2g5
3Pq9Ikt38rR3M9EqjLA5kdsycv6P0StVi4Thme4KT5qX4Ej9kNd2M/0n+gXaHuHi
yZeQizO8N0bx97gy1bnJKLlwFmRJ+AJvJX6ZtIVDO2fNVR8x0k64pR1fLPJO/Ugu
7GmnM5ZX+0vt64BQGQQwHmtyzthFWUH5inAX+DekczMvjdHqZfu0yZ/vdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaJORKwIOjkRnlwbBMDUSrJSfZgMB8GA1UdIwQY
MBaAFGxxqdtTxkJIL5fn0fwGvkuDfRxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhHcDIxUEdRa2d2bC1mUl9BYS1TNE45SEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hMmY2ZDgtZTQ3OS00MmIyLThlODQt
MGVlNjhlMTY2MjMyLzEvYkhHcDIxUEdRa2d2bC1mUl9BYS1TNE45SEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hMmY2ZDgtZTQ3OS00MmIyLThlODQtMGVlNjhlMTY2MjMy
LzEvYkhHcDIxUEdRa2d2bC1mUl9BYS1TNE45SEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAau/Dca4Y
IRH5TbSUjL58n6VuhTxyH0rwA+RDyIvtcy/e/9pmT8qA2f7QpohMU8w/LFQ/mG+M
opGAbgN174bki/ayFEYA4nMztpFJViy1148eeOGaKbQSrkfW8pw9zFWbfAfRdbng
6BrN13e3YBlzEiZsJeUICnP+HPfDl1CI6oliZFmcql4/t7oQsnefZ/ricQvH5HLN
BlZYtPDv1joCxqwVUlF/MZ8Oz+SL9WldD74iG2MLmtNuN4zTULxUBU7Y1j4fMIC5
U/W9n78n4ehZd4bTAX5+cCnrwX8z+Qgv94JfaZYtnC0cjDJZDRFxLEVWcq1rsN1+
lCx0YWvGoUd8Hw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:56 2025 by rpki-client