Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier: 2r46bhhn/1MkxCgnunhVGjcT4qiPi0KWkk9328W8yT0=
Subject key identifier: F7:8C:C1:44:E0:E7:8D:C7:59:06:05:5D:68:48:85:FB:24:C7:9D:1D
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial: 0194BCE0EB37BC9DCCA01F0FA888EDF523BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number: 0D5E
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: tZBrNsTfZyptjZDstzsXTDggDJWc082tVqYItLIgtuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:37:bc:9d:cc:a0:1f:0f:a8:88:ed:f5:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=f78cc144e0e78dc75906055d684885fb24c79d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:12:5e:8f:65:5e:08:2a:2e:ec:55:14:4e:
7e:e2:20:af:d8:87:64:cb:c8:62:1c:59:b8:14:04:
45:44:1f:f3:d3:f9:38:55:dd:08:b4:0a:7b:fa:74:
f7:9d:f4:47:1a:bf:14:cd:4a:4a:e9:51:cc:52:60:
0f:66:30:b1:79:dd:d8:b7:a8:23:73:02:20:dd:c3:
aa:77:d9:bc:eb:34:43:8f:32:51:67:cb:3f:5a:fa:
7f:7c:d6:17:78:67:08:fd:02:90:bf:be:3b:90:ef:
2b:20:6c:df:4d:b8:d0:f2:a7:49:4e:8f:a9:17:81:
64:39:de:b2:a6:be:c7:d8:2f:ad:e5:d0:19:19:c0:
a1:5d:4f:34:cd:43:d3:04:18:8f:73:73:83:39:28:
e5:73:93:30:04:48:e3:27:cd:24:ee:b3:54:f9:dc:
dd:9b:37:ec:07:89:4b:cf:e1:10:98:9f:23:d3:71:
32:67:7c:3f:0d:9e:59:1e:4d:c8:aa:58:fd:09:53:
23:56:70:43:ff:10:c7:13:49:28:fa:d7:77:22:fa:
ff:59:bd:7b:27:58:e8:c2:07:fb:f9:26:5b:68:3a:
d5:f7:d0:af:73:0b:24:33:30:e8:da:6e:2b:d4:7f:
47:03:de:e4:9f:d4:ca:dd:9b:ba:19:ea:79:52:1f:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:C1:44:E0:E7:8D:C7:59:06:05:5D:68:48:85:FB:24:C7:9D:1D
X509v3 Authority Key Identifier:
keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7d:c5:0e:76:78:2a:8c:aa:24:d9:8d:ff:a2:03:58:4a:b6:
c6:bc:fb:5e:98:e4:ad:ef:02:fe:34:b4:64:b8:58:5b:98:09:
96:0b:49:d2:de:41:39:12:ce:ef:e8:48:32:df:3e:f2:e3:2c:
f6:95:0c:2a:99:87:d3:07:d1:02:9f:52:7b:ee:68:3b:42:96:
9e:7f:c7:29:19:66:4f:13:e4:1e:4a:e9:ac:e1:5c:06:3f:a9:
9d:20:08:09:00:13:d5:e0:3f:f6:a6:17:f4:0c:b9:9e:68:8b:
c6:66:a5:14:9b:e6:75:06:8f:99:dd:f8:4e:8d:0b:ab:5e:7d:
6c:78:0c:7c:be:e9:53:7a:c9:2f:fd:19:6b:f8:61:fe:6d:3d:
86:c9:e9:51:80:ad:f0:5e:53:5d:8a:90:69:17:c7:e5:b2:c2:
77:d7:a6:51:c2:96:c3:94:37:59:5d:99:6f:8f:78:bf:4a:78:
58:27:92:5d:d5:3c:63:be:37:cd:ae:d9:75:76:7a:36:db:8a:
0f:7c:3c:7d:fb:26:b1:15:b4:d8:59:08:1a:31:78:cd:81:62:
25:33:00:0b:d8:59:70:e9:10:e0:20:f3:bf:b5:b5:ba:34:3b:
3c:c8:2b:c3:74:d5:f6:56:65:10:2f:c8:ef:20:e7:59:dd:d4:
50:a2:51:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Os3vJ3MoB8PqIjt9SO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm
YzRhNjgwHhcNMjUwMTMxMTUwMDQ0WhcNMjUwMjAxMTUwMDQ0WjAzMTEwLwYDVQQD
EyhmNzhjYzE0NGUwZTc4ZGM3NTkwNjA1NWQ2ODQ4ODVmYjI0Yzc5ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ASXo9lXggqLuxVFE5+4iCv2Idk
y8hiHFm4FARFRB/z0/k4Vd0ItAp7+nT3nfRHGr8UzUpK6VHMUmAPZjCxed3Yt6gj
cwIg3cOqd9m86zRDjzJRZ8s/Wvp/fNYXeGcI/QKQv747kO8rIGzfTbjQ8qdJTo+p
F4FkOd6ypr7H2C+t5dAZGcChXU80zUPTBBiPc3ODOSjlc5MwBEjjJ80k7rNU+dzd
mzfsB4lLz+EQmJ8j03EyZ3w/DZ5ZHk3Iqlj9CVMjVnBD/xDHE0ko+td3Ivr/Wb17
J1jowgf7+SZbaDrV99CvcwskMzDo2m4r1H9HA97kn9TK3Zu6Gep5Uh9aSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeMwUTg543HWQYFXWhIhfskx50dMB8GA1UdIwQY
MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct
ZDVhMGIwOThkZjM0LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0
LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn3FDnZ4
KoyqJNmN/6IDWEq2xrz7Xpjkre8C/jS0ZLhYW5gJlgtJ0t5BORLO7+hIMt8+8uMs
9pUMKpmH0wfRAp9Se+5oO0KWnn/HKRlmTxPkHkrprOFcBj+pnSAICQAT1eA/9qYX
9Ay5nmiLxmalFJvmdQaPmd34To0Lq159bHgMfL7pU3rJL/0Za/hh/m09hsnpUYCt
8F5TXYqQaRfH5bLCd9emUcKWw5Q3WV2Zb494v0p4WCeSXdU8Y743za7ZdXZ6NtuK
D3w8ffsmsRW02FkIGjF4zYFiJTMAC9hZcOkQ4CDzv7W1ujQ7PMgrw3TV9lZlEC/I
7yDnWd3UUKJRrQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:32 2025 by rpki-client