Manifest
$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
File: BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft (raw, json)
Hash identifier: 82YJhMh7gWdzJFKWqyJn+KwxMQnlxBvw44jLe784mb8=
Subject key identifier: C3:D1:56:F9:E8:87:72:B7:4B:83:72:D0:E8:97:FB:AA:A5:C5:C0:5D
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Certificate issuer: /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial: 1E616B73D512B2B15EEA3695FEEFCFFC2713FF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
Manifest number: A5
Signing time: Sun 11 May 2025 09:32:11 +0000
Manifest this update: Sun 11 May 2025 09:27:11 +0000
Manifest next update: Mon 12 May 2025 11:28:11 +0000
Files and hashes: 1: BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl (hash: mCT2ggme9EYjjlGfHStcRhwDBSPjhreg55x9s9kjbW8=)
2: AS200454.asa (hash: p4vll/UiUAZD/3UUjpvhDHVyK2MIUr1R01S00rNTg58=)
Validation: OK
Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:61:6b:73:d5:12:b2:b1:5e:ea:36:95:fe:ef:cf:fc:27:13:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Validity
Not Before: May 11 09:27:11 2025 GMT
Not After : May 12 11:28:11 2025 GMT
Subject: CN=C3D156F9E88772B74B8372D0E897FBAAA5C5C05D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:56:5c:1c:ec:5a:22:0d:02:a6:28:a5:b5:
0f:5a:c5:c8:32:88:5d:9e:3b:ea:97:fe:31:96:5f:
4e:46:ec:73:5b:92:d8:87:59:f5:e7:e3:2d:c5:50:
0f:6e:90:b1:20:99:fc:77:79:e5:b9:a4:b1:93:f8:
ed:8a:77:d2:47:c1:2d:96:88:ee:f2:65:b5:ee:7c:
9e:1c:27:0e:7e:05:db:52:bc:c2:b6:ea:f2:97:3c:
68:27:f0:d7:a2:e4:3b:4b:a0:77:18:ac:bd:47:ba:
f5:46:8d:8c:92:c3:6e:ca:36:ad:a0:49:a7:6a:b3:
49:2b:d9:cc:25:fb:58:4c:8e:b5:f1:79:8f:cd:a5:
0a:15:e2:d1:ee:0e:47:b0:03:c6:bd:d2:4d:f6:11:
93:32:0c:bc:2e:b3:3f:3f:0b:f1:e4:07:30:1c:4a:
27:4a:fc:b7:db:f2:1e:d8:a9:79:d4:83:e8:73:e3:
27:f7:88:53:61:b8:11:37:f7:e5:40:ab:a0:40:6b:
4d:b3:73:7c:b8:bb:19:45:f5:26:ea:d7:5b:9d:ab:
15:da:6e:21:39:70:30:4b:a6:6c:16:38:24:d4:3b:
dc:53:bd:06:dc:64:9e:20:07:91:84:b7:b2:c0:28:
a8:db:4e:8f:2a:f7:c4:31:18:fc:8a:3d:a2:da:b0:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:56:F9:E8:87:72:B7:4B:83:72:D0:E8:97:FB:AA:A5:C5:C0:5D
X509v3 Authority Key Identifier:
keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:de:d0:45:45:55:78:a2:b0:b4:c2:e7:63:4d:2b:00:a5:
f8:7a:14:af:82:31:55:4e:ac:88:b1:35:b1:95:10:8b:43:64:
70:42:1f:a1:a3:c3:59:f9:2c:52:07:5e:a1:d7:16:b2:23:25:
09:d7:ac:85:c5:5a:38:43:f4:29:92:3b:02:56:29:4d:20:99:
e9:00:90:ac:3b:6d:1d:bc:04:7e:e1:39:ce:e4:d5:8c:63:00:
80:a5:85:4e:34:2d:fe:61:59:b5:1a:40:4d:0e:3f:ab:83:0d:
03:4c:08:64:1e:d7:75:58:3c:1f:2f:ee:e8:18:59:93:05:8a:
3a:65:78:5c:71:0e:4c:b5:72:24:da:7d:87:92:e4:ae:30:b3:
a4:b9:74:ef:1d:07:09:7c:1e:dd:28:3d:a3:54:c7:fe:26:0f:
b3:c2:25:ff:cd:23:4e:ca:8c:1c:99:a2:f1:19:56:7d:7a:e0:
fc:7c:d5:a5:3b:88:5e:74:85:46:21:44:58:ed:53:c1:5c:27:
d2:f5:79:9c:2e:7c:bb:f4:41:cd:bb:9e:59:66:37:6c:2f:52:
ab:68:45:ad:11:a9:34:86:f9:e6:ca:62:9e:d0:7d:65:dd:c6:
20:d4:ef:06:2b:7e:ec:7c:4f:ba:e5:b4:ea:98:cf:a2:10:6f:
31:dd:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:16:17 2025 by rpki-client