Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
File: xBRUZfBpanDV8D7h1d7K_UHcY4U.mft (raw, json)
Hash identifier: QOkbOWD9zKiCJnqSDxpOc+D03Rdww+eMn+qcaquMKh4=
Subject key identifier: 69:F6:BD:8D:97:72:9E:4D:4E:81:B6:08:47:1C:6A:DA:1E:60:BF:AF
Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Certificate serial: 0194BD4EC36E8C79E349B7C888864250E492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: oovi2OmG_5VdF1BT8Wlu5iiczL4.roa (hash: ULm+SV4rhE1jkvbhaN1N+xEz8jSZPDpTsULqKLOAFoY=)
2: xBRUZfBpanDV8D7h1d7K_UHcY4U.crl (hash: QkCflAGUyGR3HIZdIT/a+4yXC8JEUihomAtW2juccPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c3:6e:8c:79:e3:49:b7:c8:88:86:42:50:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=69f6bd8d97729e4d4e81b608471c6ada1e60bfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:cc:56:45:dd:47:39:62:7b:6b:16:1e:21:
c8:e9:c1:3b:92:d1:e0:e8:eb:89:c1:1f:72:95:fd:
d1:53:2f:25:7c:a3:4b:76:56:2b:52:ba:d8:de:8c:
39:3d:49:58:16:27:ca:71:e0:ff:a1:ae:8d:87:f2:
52:fb:41:e9:cf:d8:ff:be:ff:04:5f:41:93:d2:4c:
5b:d4:d7:b3:04:19:ce:02:ea:d2:40:38:c9:da:7c:
44:88:77:11:84:7e:7f:49:ae:9a:90:66:29:2a:40:
b8:13:84:2d:e5:55:ab:a2:70:19:d4:50:79:19:41:
77:d9:d0:b7:f8:9d:87:27:c0:00:88:0f:3a:bd:b8:
7f:88:75:4f:79:19:b5:9c:62:12:95:fc:f5:7c:3b:
e5:bf:28:89:48:0c:7b:5c:79:c2:60:94:7a:c7:69:
ca:f4:d4:d2:31:c6:11:73:b3:91:fb:13:3c:bc:13:
6d:29:00:e9:b5:16:5c:07:6c:0a:ee:78:93:aa:bb:
34:f0:e3:3a:56:41:67:00:b9:98:05:16:cb:93:46:
f2:cf:32:d1:e0:15:38:16:aa:80:28:81:be:1f:ba:
c0:a8:89:d0:19:1c:cd:ed:5d:2f:68:e8:b2:6f:a7:
75:35:9a:96:5a:68:27:b5:bd:d5:e3:25:05:2b:75:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:BD:8D:97:72:9E:4D:4E:81:B6:08:47:1C:6A:DA:1E:60:BF:AF
X509v3 Authority Key Identifier:
keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ec:29:87:05:90:14:7b:22:ad:fa:73:54:22:98:bd:a8:51:
14:08:41:46:ba:b7:c9:b8:1c:25:91:45:e6:4e:61:ca:ee:81:
03:65:5c:4a:ec:b7:44:3a:18:75:36:b9:b4:67:17:e3:f9:49:
e1:16:6a:76:d9:6f:23:70:3b:ff:b4:c7:12:e6:b2:10:63:29:
86:eb:e5:86:5a:cb:07:74:8f:6e:fd:60:6a:07:61:64:b6:ad:
1d:67:39:aa:71:b6:9d:ad:9e:f9:d2:79:f6:51:e6:3b:b2:20:
66:3d:6d:8a:3d:e2:52:19:b6:ca:b9:f3:89:b6:a5:8f:a3:e3:
be:f8:97:80:68:48:79:6e:02:8a:84:c3:d5:c0:d8:c3:42:e6:
90:1e:b9:49:5b:a2:d4:e9:5c:25:c7:9a:7e:80:69:99:ac:a5:
2a:b5:f6:8b:5e:21:85:91:77:00:01:dd:92:10:c1:c7:d6:2e:
df:a1:cd:35:5d:5a:eb:fe:1b:9d:a5:e8:46:29:06:4a:d9:7d:
d0:8c:de:b2:54:cf:b5:4d:20:2e:0d:e2:31:82:6a:bd:64:5b:
5b:5a:9d:33:f5:33:41:6e:79:75:af:e7:03:59:3f:25:f4:93:
98:36:0f:4c:79:10:07:bc:22:ad:cb:fa:18:4c:30:f4:bc:1b:
f2:77:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:11 2025 by rpki-client