Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
File: BH711r0-NZQmnLpEKzqNOhTF33A.mft (raw, json)
Hash identifier: dlwclKA8eFNHJfOLCZTzscggd/wed6Vargpibine6SY=
Subject key identifier: 83:FB:CB:42:E9:53:9E:50:21:8D:04:A6:2E:05:51:20:16:18:0E:77
Authority key identifier: 04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
Certificate issuer: /CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Certificate serial: 0193D9DC7C80C1D37965B57A8190B62B4AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
Manifest number: 1303
Signing time: Wed 18 Dec 2024 13:02:05 +0000
Manifest this update: Wed 18 Dec 2024 13:02:05 +0000
Manifest next update: Thu 19 Dec 2024 13:02:05 +0000
Files and hashes: 1: BH711r0-NZQmnLpEKzqNOhTF33A.crl (hash: CJ7krUs5u47A/dytHA3cPlWeFE1zE9WS9h3yYkNsZ+Q=)
2: kKj0VKByUCq12myDYmzc4K7-L-Y.roa (hash: zK7IcUbZVuLwbXCzmTAMFe98QoYxSmpSTXDCsVL74PQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:dc:7c:80:c1:d3:79:65:b5:7a:81:90:b6:2b:4a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Validity
Not Before: Dec 18 13:02:05 2024 GMT
Not After : Dec 19 13:02:05 2024 GMT
Subject: CN=83fbcb42e9539e50218d04a62e05512016180e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:45:a9:3a:f4:9f:54:3e:8a:52:98:13:22:
69:1e:7a:60:20:a4:8a:2b:e4:d7:f1:67:c3:e2:6a:
37:21:64:0a:4d:40:2c:65:68:cc:10:40:1c:5f:cb:
03:9c:67:f6:e8:60:ff:57:d6:d3:d9:4b:a8:1b:74:
57:36:2c:f4:22:b8:64:67:af:dd:d3:2a:d6:78:33:
da:13:fa:3f:17:ff:e1:2d:6c:4b:ae:df:79:f9:87:
6a:5f:94:05:02:b6:55:77:58:5e:e0:a2:b5:c6:56:
49:d5:4f:13:66:dc:cf:4c:8b:2c:a9:81:27:fb:11:
83:c5:f4:0d:43:aa:c3:87:f4:f0:4d:24:0d:41:48:
f6:65:95:63:55:fb:2b:72:3e:a6:9f:fd:30:a4:53:
a8:58:76:e8:63:a1:38:3b:70:ea:04:c1:bd:5a:b7:
7f:c5:5f:87:10:80:30:ae:54:e2:64:05:b3:d4:e8:
ac:50:59:e3:12:51:02:53:b6:44:59:22:6f:99:94:
06:8a:5f:66:82:88:df:b9:9e:41:ae:18:81:eb:a7:
bf:cc:a1:c7:13:44:94:92:05:02:80:d5:6b:ac:87:
c6:a9:0a:6f:06:45:b3:76:6a:fc:a8:e2:d8:f3:b9:
d3:77:8b:76:79:9f:98:49:5e:a2:6e:14:96:41:9e:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:CB:42:E9:53:9E:50:21:8D:04:A6:2E:05:51:20:16:18:0E:77
X509v3 Authority Key Identifier:
keyid:04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:01:6c:e6:a7:78:46:23:85:50:e9:d5:c8:47:c5:95:0d:2a:
53:91:da:29:26:89:6c:ea:24:8a:03:3b:73:c5:8a:a6:57:25:
cc:69:25:48:32:7d:81:e8:69:9e:dd:d5:7d:19:5e:ee:06:8e:
56:b5:1d:6d:41:2c:23:26:ec:85:47:51:5c:ae:ac:16:a5:7a:
ee:f6:bf:be:e9:c7:ae:98:06:52:a5:f5:dc:87:59:dd:b5:a6:
82:79:a1:59:68:49:25:67:b1:73:5c:ed:31:27:e1:d3:ce:70:
41:54:64:2d:7f:6c:0b:45:15:8a:a4:50:bb:e0:64:4f:41:80:
b8:71:fa:6b:b9:d8:d1:1d:04:26:d3:a7:2d:76:6f:e5:fa:47:
7d:7c:85:2f:4f:96:18:4b:5f:fa:ec:e3:a7:e3:7c:f2:f9:14:
38:85:c1:c4:0d:54:77:cb:31:85:48:89:3b:21:ec:e5:1c:ab:
c0:4a:4e:fe:54:07:f4:55:ef:c3:3c:fc:72:9f:41:c4:49:33:
35:b5:a5:19:38:94:68:c8:01:2a:7e:0d:70:24:a7:48:a8:09:
38:96:80:7c:c6:0a:7a:94:ce:ba:5c:bc:6d:e8:40:73:45:f8:
81:12:b2:75:a9:11:02:c7:e1:f6:32:b6:80:6d:0e:77:f4:8d:
68:4b:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:39:24 2025 by rpki-client