Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
File: brYQV7gmVB0hbNWVz4bGoG-yrhE.mft (raw, json)
Hash identifier: JWd5vLIL/VnHxiijL/FkUnTrJGupJcL+pYa2jLhoXYQ=
Subject key identifier: A1:94:22:6B:9E:14:A8:E4:85:EB:2B:73:D8:37:02:9B:88:3C:A2:C9
Authority key identifier: 6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
Certificate issuer: /CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Certificate serial: 0194BD4E7B09CCC63375690FC723DA0EC8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: brYQV7gmVB0hbNWVz4bGoG-yrhE.crl (hash: r5hy1kbqIA6T4v2rihCVD07gd3ligU+lEMQMfazqPLA=)
2: g-B5ZnHLRqZwnUDKx8sxkqLeq8E.roa (hash: 8/pCEAAfgXJlCEBGR3f8pKtVLnpOv7/3Vi60Zm9zN6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:09:cc:c6:33:75:69:0f:c7:23:da:0e:c8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb61057b826541d216cd595cf86c6a06fb2ae11
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=a194226b9e14a8e485eb2b73d837029b883ca2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:4c:11:c5:db:21:bc:0b:35:f1:3b:0a:77:
a3:9a:98:cf:ef:72:9b:12:d1:7d:55:41:fc:9a:e8:
f3:18:54:14:dd:e3:17:85:40:ac:ac:73:f9:26:c5:
37:71:fb:a1:5a:f2:f1:b2:db:3f:42:60:7b:91:2a:
2c:a8:f9:7c:dd:a3:ed:a9:5b:79:24:bb:f2:c3:4d:
83:07:32:0b:2e:09:1a:3b:55:b6:95:02:6d:14:fd:
bd:32:cc:40:19:8d:11:bc:d7:df:c7:1d:c5:2f:4d:
ca:63:f2:ea:3a:54:d3:ab:59:86:c6:d5:1a:d9:54:
a7:0d:4a:62:a7:51:9b:d9:3b:a9:ac:d6:c8:7f:3a:
ee:42:7b:fd:87:6d:34:e6:3c:04:5d:00:79:d1:a1:
f1:81:c0:42:c3:81:37:c6:0e:3a:bf:87:9e:1d:9b:
01:81:1a:0a:4a:f5:43:e2:51:cb:8a:25:e0:31:3d:
7b:bd:87:15:5c:d9:45:74:ca:7f:ec:43:b7:5c:7d:
2f:90:bb:91:ad:d6:6d:9c:27:07:7e:a0:45:71:08:
bf:c7:7f:6a:73:31:d2:37:4a:2f:f2:e4:df:a1:ca:
90:af:5f:7a:4d:6c:14:a3:15:a6:91:3d:45:e2:cf:
1c:54:a0:99:7b:8b:87:05:27:0b:59:87:bd:7f:28:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:22:6B:9E:14:A8:E4:85:EB:2B:73:D8:37:02:9B:88:3C:A2:C9
X509v3 Authority Key Identifier:
keyid:6E:B6:10:57:B8:26:54:1D:21:6C:D5:95:CF:86:C6:A0:6F:B2:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brYQV7gmVB0hbNWVz4bGoG-yrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/66ca64-6fce-4b84-8c15-cb868127a9b1/1/brYQV7gmVB0hbNWVz4bGoG-yrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:4e:6d:58:b8:6c:33:45:80:a7:04:c8:48:88:9d:35:70:
cf:83:7c:01:fc:47:80:c0:2d:1d:b7:70:f3:e4:79:5f:96:be:
9d:e3:63:a6:d8:27:10:f7:f0:d3:7d:a7:cd:bd:97:9d:5b:9b:
31:0e:7f:e5:da:5f:e3:4a:d8:ba:f5:e3:64:8c:a8:b5:e0:a0:
1d:97:f8:88:f0:8c:35:df:52:35:fa:cf:05:e9:28:4f:ae:e2:
39:b5:07:c5:19:dc:60:85:b4:3c:21:41:85:ec:13:d5:41:26:
22:20:0a:c7:33:ae:86:af:b7:94:5c:ec:c2:4b:86:4b:77:27:
f3:e3:4d:81:8c:4b:f5:f6:63:ac:48:2d:4b:c3:44:90:cc:71:
69:b8:81:02:81:e8:2b:0a:d3:a2:82:fa:31:27:cc:e7:2c:75:
3f:d6:2f:88:24:1b:9e:5f:ec:11:95:1a:53:67:a4:53:ce:4f:
60:d9:d0:0f:cb:68:13:de:52:df:4d:81:d7:2c:45:06:aa:58:
3a:4b:d7:3e:71:dc:39:6f:be:9c:9f:64:47:90:cc:ba:85:24:
9a:f5:3f:9d:3c:64:65:d2:31:6f:7c:b7:6c:d2:3c:43:a6:50:
7c:39:78:c4:cb:e1:dd:3f:ed:46:b6:d6:f5:48:ab:c7:27:f2:
f7:07:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:15 2025 by rpki-client