Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: b/XDucNRwrCS5Ziu8ZizkTSgkc7Z9pw9uH5i63O7qH8=
Subject key identifier: 15:2A:9C:78:ED:D8:E6:93:B4:3A:3C:CD:67:89:16:E5:0E:72:BC:5E
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0194BCA9C547F5793CD727288A7BF41B3340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: feAsZ0StI4+epPdHQ3hAEVkJjWpGD0Llb7UqSYY1heI=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:47:f5:79:3c:d7:27:28:8a:7b:f4:1b:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=152a9c78edd8e693b43a3ccd678916e50e72bc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:70:15:82:29:91:7f:b3:1e:ca:e7:fd:26:
04:2b:31:45:d1:e1:65:36:49:54:d8:70:62:ca:d9:
c8:38:5e:f0:23:bf:47:65:d3:95:39:38:37:d7:93:
8c:cb:8c:ed:ea:24:91:37:8a:95:6e:d9:5f:34:bd:
e1:a6:85:52:5d:44:38:de:71:d2:c8:32:25:5f:fd:
92:6f:73:7f:08:3b:2f:d8:f2:2d:8b:19:2b:01:91:
24:58:48:7a:e1:3d:6a:b8:83:e2:85:b0:00:03:c2:
8d:79:a0:60:d4:c4:9e:42:36:a6:b8:75:83:6d:2b:
09:ad:32:5e:1d:2a:f3:73:f5:04:5e:c6:54:d1:a8:
5a:23:ae:9d:55:2a:9e:9f:cb:34:96:ed:10:18:55:
3b:81:c9:15:37:fc:16:05:fe:80:8a:18:35:33:43:
c8:f8:4c:9a:f1:e8:86:a1:ab:85:b2:dd:2b:90:e7:
9c:2f:f9:38:84:c1:7e:88:8b:48:f9:f6:27:14:9c:
c4:09:3f:13:ba:8d:be:5f:3c:7c:e4:c2:2a:1c:5e:
a2:f6:13:b5:33:13:ef:74:20:87:fb:a8:c8:25:99:
48:21:25:8c:43:4d:a1:cb:c1:7b:f1:1f:6f:57:06:
33:e3:ac:35:b3:7f:63:dd:ae:da:ec:e2:c5:9a:a7:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:9C:78:ED:D8:E6:93:B4:3A:3C:CD:67:89:16:E5:0E:72:BC:5E
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:21:31:36:3e:01:d7:6d:6d:ae:2d:87:11:b8:bd:e2:04:
e3:30:f9:9d:c6:70:a5:41:d7:ff:9a:8f:a8:19:19:0b:a8:b4:
37:83:60:10:05:94:b0:5b:74:31:72:9e:fc:3c:de:4b:a3:86:
f7:af:f1:93:0e:35:6c:e5:18:06:4c:cc:4a:5b:71:7b:73:43:
c7:f3:b1:23:85:31:56:f9:9d:f8:37:5e:48:16:87:1b:5a:28:
59:8e:3a:7d:f8:ab:2f:01:c4:04:7f:12:3a:08:8b:43:6f:94:
7b:61:a5:61:38:63:83:1c:48:b6:86:e9:ea:24:93:bf:ce:9a:
18:2f:a2:4e:92:34:7e:5f:34:0f:99:d1:be:2b:cd:e3:79:0e:
d5:97:49:90:de:76:7a:bc:db:67:28:38:5e:06:e3:2d:20:1a:
df:83:31:4a:dc:62:65:a1:5e:e2:6b:95:b9:76:87:33:14:85:
ae:13:e0:6d:01:e6:9b:b9:98:01:4b:a7:54:3d:12:7b:93:0d:
29:d3:b0:de:0c:19:5a:ec:66:42:a8:2b:e1:96:20:a5:00:e6:
f0:d9:60:b5:a4:93:7b:ea:f0:9d:7d:56:c3:2c:bc:9b:0d:68:
05:bb:21:1e:18:24:53:89:e2:e7:61:60:af:98:b8:ea:dc:f5:
53:98:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:58 2025 by rpki-client