Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: iioFGE/mBzvaBsXVGMwJV7SSMblTiANQKRFeYWy4g8Y=
Subject key identifier: 98:BC:30:B1:71:A5:9F:13:C5:DB:9B:EE:FF:85:48:CB:4A:7D:67:56
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0194BC3C572DB294D232FB0B42FE55AF368C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 0250
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: N9AbGyrdX8VE90+K0I/80mrT+VVyFitBO5TpkZPj97E=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:57:2d:b2:94:d2:32:fb:0b:42:fe:55:af:36:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=98bc30b171a59f13c5db9beeff8548cb4a7d6756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:e9:ee:e9:30:45:97:8a:15:b0:eb:64:c5:
bc:b9:66:d3:87:4a:a2:53:61:de:1e:d4:3e:62:e1:
70:8c:a0:0b:ac:b5:dc:0c:4e:29:1d:15:64:c1:ba:
9f:6a:1e:b1:c5:bf:69:bc:8a:6a:d1:45:b0:75:2a:
ed:91:6b:b6:20:5b:2e:ef:68:70:1b:1f:8d:78:89:
03:5f:cd:d5:85:95:2d:22:d8:c9:b2:69:9c:67:2f:
00:e4:32:d2:61:f9:a6:ae:8a:d4:19:9d:24:fe:5e:
fc:ec:21:4c:24:e1:45:cc:3e:a0:b2:ad:e1:79:0f:
f4:42:96:de:33:1c:f2:6b:63:bf:22:4a:8c:38:19:
46:25:bf:c4:3a:37:25:c0:91:e6:fc:4b:40:10:d1:
0c:3a:5f:65:6d:90:41:3b:be:ad:a0:92:f6:5f:f5:
db:3a:7a:26:c5:58:1c:be:de:03:c3:f0:c9:d8:50:
0a:74:70:0d:e7:1a:53:88:6e:86:ec:26:2c:d5:6c:
2a:73:0a:32:b1:49:da:81:eb:13:99:46:06:77:92:
24:e8:42:08:b5:ff:15:75:f7:5f:7c:48:90:e9:00:
9a:2f:81:b3:10:93:fb:d5:bd:e9:7c:61:29:f6:30:
8b:39:ed:26:5a:d6:ac:1c:af:05:a0:e7:27:29:bd:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:30:B1:71:A5:9F:13:C5:DB:9B:EE:FF:85:48:CB:4A:7D:67:56
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:8a:f0:a9:0e:1a:b4:a9:6b:39:e8:25:02:97:0d:bd:ff:
0a:7e:0f:74:1b:53:5a:29:af:9c:60:89:12:32:48:35:82:23:
ac:71:b7:27:b4:06:82:94:76:bb:78:77:00:51:b0:1d:a3:9c:
23:47:b8:4d:53:86:a6:a2:b9:7d:6f:ae:f6:dd:7b:d8:b8:2d:
4f:a2:60:b2:69:3f:42:86:2e:14:c3:e7:90:39:9b:4f:a8:72:
7c:ee:5b:9f:9e:82:41:e8:28:e0:1b:a0:66:b4:59:29:5c:3e:
83:48:7e:e9:c6:88:ab:02:f8:75:a0:d4:7f:82:00:c1:4c:df:
3f:57:c2:d9:43:fb:55:2d:51:16:47:bf:89:e2:b1:22:78:61:
8e:15:bd:e8:3c:77:e5:d1:ac:d2:6e:2c:e4:ac:30:f0:d1:86:
62:45:89:4a:38:65:25:f0:cf:75:90:e4:29:d6:3b:12:dd:88:
50:79:77:8f:28:9c:01:2e:9d:ad:fe:b0:2a:f2:e5:4a:c4:4c:
c1:ce:ba:9d:60:00:3f:0f:76:8e:5a:a8:08:e7:ee:f6:d7:ac:
04:82:18:45:af:fe:95:cc:61:2c:5f:f8:cb:90:99:a9:35:e3:
f4:08:3d:59:8e:c7:8f:a3:57:5f:ed:52:49:7c:1c:cc:ba:41:
90:2f:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:04 2025 by rpki-client