Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier: 93yfpld3i6h7db47LItqu2S9yHJi+BzYnIIcqUoDfQc=
Subject key identifier: A9:2E:38:C9:0D:F5:17:B6:8E:40:E1:41:02:0E:BF:FB:56:6B:E0:92
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial: 0194BD4E4FB71611C699CB04F5FEC6581A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: fERlpNUNcEz6N4YuXL19BtHuUIZFvPnmPmyVu6DGvCM=)
2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:b7:16:11:c6:99:cb:04:f5:fe:c6:58:1a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=a92e38c90df517b68e40e141020ebffb566be092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:84:c2:e1:21:d3:8a:5c:cb:f4:51:ed:00:
03:b7:d5:09:ab:be:8f:92:09:2c:4a:0c:83:a8:a9:
25:ca:dd:3d:ab:76:a2:db:79:4c:37:ff:41:5e:1a:
3e:30:0f:8b:4e:ab:41:14:cc:f3:0d:29:e0:70:ab:
c6:08:c8:5a:53:47:2d:78:a7:80:f8:72:bf:36:31:
78:70:29:ab:5b:21:ad:65:df:2e:cd:e0:4c:c7:ae:
f0:c9:f7:f3:bd:d4:dd:58:c2:48:10:6a:e7:cc:82:
47:93:42:71:3b:6c:af:7b:87:a6:8f:79:1b:17:c8:
f4:22:3c:ba:eb:8d:57:00:36:5a:87:5c:0f:61:8f:
88:e4:e3:c1:33:a0:8c:00:97:08:59:e8:4f:b2:a3:
f5:f5:10:0f:ab:e1:96:3f:31:57:eb:07:fc:d6:8b:
b2:a3:24:9b:54:48:6d:86:02:0b:38:50:ba:4b:b2:
12:dd:7d:08:f3:e2:8d:0b:5a:38:47:d4:09:6c:f8:
7b:6d:70:80:a5:51:2d:a9:b8:de:ef:93:ee:5d:cd:
1a:cd:3e:e3:95:04:d2:32:69:f2:60:a4:38:ce:e9:
86:29:9e:79:f0:67:5f:1d:86:6b:43:39:fe:1f:db:
98:a1:b6:b2:b7:91:60:8b:8b:2a:ce:3b:ea:15:c4:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:38:C9:0D:F5:17:B6:8E:40:E1:41:02:0E:BF:FB:56:6B:E0:92
X509v3 Authority Key Identifier:
keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:66:4c:e7:7e:7f:ba:d0:31:6b:fa:52:e2:3b:76:6b:af:05:
fa:38:2c:6c:23:5d:6c:46:5c:57:b5:53:6b:94:33:0b:05:da:
44:6c:f0:c0:f4:a1:f6:34:17:06:65:dd:66:04:31:70:e9:96:
90:4e:cb:98:7b:fd:85:94:03:42:a0:d9:eb:b0:30:e7:e8:43:
5f:b6:c3:15:8b:2d:c4:79:91:af:e4:24:38:59:ec:55:8d:70:
a0:c1:47:9d:4e:8e:d6:15:55:4d:7f:d8:be:29:95:77:ca:83:
0e:20:58:cb:ce:53:2c:0b:7f:96:c3:f1:0a:1d:31:2a:51:e8:
b2:19:80:e6:5b:ed:d3:50:b2:27:ae:52:d8:cc:b2:4e:20:94:
75:bb:26:7d:03:6b:9b:47:04:31:d8:07:50:84:2f:4c:60:51:
b9:a1:9a:9e:67:01:b2:14:77:e9:a7:9c:33:c0:bf:52:6d:11:
98:b4:02:3e:1e:17:41:e3:02:27:ff:c6:f0:fa:db:8c:56:f4:
f0:49:01:df:a5:4b:6f:67:9e:d9:d7:f4:c4:4a:c1:34:70:be:
83:87:91:5f:19:f6:6e:bc:f0:46:0f:fa:fb:bf:07:91:1a:7e:
fe:88:3b:c2:5a:f0:ca:be:1d:d1:69:71:96:90:63:0b:9b:cb:
fe:12:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:33 2025 by rpki-client