Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: bDcmJTVnOkZsHBhb4OIeooocCEYTIqUOqspJoLue3Jo=
Subject key identifier: 14:09:06:58:7A:0B:9F:54:99:76:3E:9C:89:E5:3D:A0:0C:5B:8C:E5
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0194BCE098933230996B6946AD130E069EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: 5QD8Ebg3GUtoh0O9Rs15hbmrart1KW5utdrqQtohCbA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:93:32:30:99:6b:69:46:ad:13:0e:06:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=140906587a0b9f5499763e9c89e53da00c5b8ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:08:06:d7:59:01:c9:ac:58:a9:94:87:b6:
db:8b:ff:a3:92:09:69:aa:04:7d:a0:2a:28:76:1c:
64:0a:e0:4b:3e:30:f4:6a:9c:ee:ad:7d:6c:a8:91:
f0:67:96:26:fe:24:b7:c7:05:b4:a8:48:78:01:0a:
3b:3d:ff:34:3e:e5:cf:53:09:91:3a:91:8a:e2:a8:
c6:40:cd:bc:76:e0:aa:44:c5:c2:b6:07:a0:46:fd:
17:c5:49:08:56:7f:6c:df:19:f9:3a:14:9f:9a:82:
fe:a8:a7:de:74:e5:56:3c:04:1a:2f:bb:98:1f:f8:
0f:c5:fa:90:05:0a:68:b0:82:94:90:87:43:49:69:
6a:a0:e7:9b:b7:8a:c2:27:c2:63:9c:5d:92:ef:22:
07:7d:41:53:bb:bb:bd:21:bb:a5:eb:62:fe:e9:41:
b4:fa:5e:4a:60:ec:8c:12:f3:e1:3c:1c:fa:c9:a6:
f7:1b:94:2c:14:1a:40:d4:e4:31:ee:b3:d2:dd:79:
85:7b:a4:20:6b:c6:03:02:a9:af:c2:6a:2d:56:d3:
a6:f4:9b:ae:52:3d:64:38:a1:06:90:4d:3f:4d:70:
cb:63:32:03:38:3c:7c:26:3d:3a:d9:3c:21:ca:a6:
09:56:32:35:24:82:b5:7f:c6:37:61:7e:37:7c:c0:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:09:06:58:7A:0B:9F:54:99:76:3E:9C:89:E5:3D:A0:0C:5B:8C:E5
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:47:24:ae:46:84:cb:ea:fd:e7:3e:7d:bf:9d:c1:60:d8:a4:
e6:5b:8a:9f:25:18:eb:af:a6:e0:ef:18:3b:4c:33:b8:b2:00:
63:90:5f:9a:85:c8:f7:97:71:63:17:35:22:0d:c8:f6:22:54:
8c:18:58:9d:57:d4:36:9d:e3:b2:e5:46:66:13:e9:16:ea:d8:
8f:80:3a:bb:25:0a:c5:16:bf:15:dc:a5:2f:c7:2d:ec:d7:cb:
bc:ec:fe:45:4d:ac:a5:81:a4:27:1c:9c:3f:72:46:73:f1:73:
1f:cf:87:13:0e:69:41:a4:51:32:49:a5:ac:ce:7e:f8:4c:3b:
b6:48:a6:c1:a9:22:24:82:8f:04:a8:d7:77:de:af:79:e8:dc:
aa:2b:e7:9e:95:c3:c9:48:b0:61:e4:14:f4:46:16:29:e3:4e:
b7:6a:0f:20:5c:d7:97:cd:27:64:e2:bf:0b:39:54:a6:0b:ab:
7c:0d:da:4d:39:f7:4f:a9:6e:b3:02:e1:95:e3:31:ca:45:a2:
b4:2a:2c:0e:c3:43:c8:7e:6c:26:fc:2e:79:cc:37:19:d3:a8:
9a:a7:3c:c6:7c:74:46:e4:2f:d4:61:4d:63:95:98:c5:21:9e:
1d:64:ad:96:a9:90:ec:72:12:df:50:75:77:58:99:b9:d7:c5:
e2:1d:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:22 2025 by rpki-client