Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: CMhI43W7zrV19sqtXibq9buyeQhW9jT6Qt5Xf1VTL20=
Subject key identifier: A3:D5:DA:42:2A:5E:99:7B:3D:EE:05:80:92:B0:DB:CA:74:29:35:19
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 0194BD8599525187941908043B17D42CAF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: zube6bW4nil2nzhu51ALGIdDk53f5yOTM9b9Gf2V+Ow=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:99:52:51:87:94:19:08:04:3b:17:d4:2c:af:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=a3d5da422a5e997b3dee058092b0dbca74293519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:3d:e4:5c:4f:22:b2:73:d2:4d:d4:92:e8:
ea:3d:a9:2c:0f:6f:23:6b:97:0b:f6:b5:81:c0:8f:
ba:d9:e2:aa:0e:81:a1:40:09:8f:fb:0c:dd:63:f9:
50:62:2d:46:a7:80:5a:7e:9b:7b:a7:67:e7:58:e1:
44:1e:4b:a3:0c:ae:c6:45:5e:33:78:e4:b9:15:01:
30:4c:85:9b:fb:e9:f3:69:1f:a7:d6:79:2b:70:11:
08:6a:a8:ee:7e:b8:90:aa:7f:a0:87:a9:f2:17:0b:
9f:a4:67:09:2e:c0:43:69:5b:59:fe:e3:cc:0f:b0:
7d:50:a7:3d:ac:4c:cc:bf:d2:a7:91:54:c2:0e:28:
bf:7a:dc:f8:9f:80:5b:04:2b:2f:8c:f6:a0:ef:91:
8c:06:ff:05:20:10:73:d0:d1:88:76:06:01:fd:90:
3d:e3:cf:56:66:55:91:6f:68:b6:36:2c:ae:da:c2:
61:8f:96:97:29:01:bd:49:5a:49:0f:ca:1e:b2:b4:
20:d7:da:aa:6f:5f:f9:c3:8f:aa:eb:3b:27:a1:88:
d2:4f:e3:9d:51:e9:fa:2e:bf:54:fb:b9:09:4c:71:
60:75:61:1b:82:00:5f:e8:2d:40:7b:17:a7:44:2c:
01:f3:5f:27:c3:c5:6f:46:00:1e:25:57:42:14:fe:
ce:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:DA:42:2A:5E:99:7B:3D:EE:05:80:92:B0:DB:CA:74:29:35:19
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:6c:a7:f2:73:91:9f:2d:48:71:e7:e3:03:03:0e:20:b6:
54:bc:a5:4c:bf:73:f8:85:39:27:0a:0e:32:41:81:b9:f1:48:
64:1b:a7:23:22:16:a9:89:32:6b:68:ca:cb:47:70:95:31:b1:
27:a9:41:67:42:d2:44:14:37:6a:d3:c8:c7:51:db:11:93:ba:
3e:02:82:03:67:db:63:40:48:b3:36:8d:36:70:94:cf:dd:3e:
66:c8:b4:ad:c5:d2:b6:9f:5f:d1:42:f1:b7:c8:de:f9:c3:7c:
c8:bb:85:ef:5d:26:22:cc:0d:5d:2b:c4:04:45:1c:ae:fe:25:
b6:b0:c8:55:d1:72:09:db:64:ce:7a:19:50:b2:0e:e6:65:ed:
83:b6:ca:8c:59:9a:5d:0a:ad:2c:b3:e4:8a:d1:b9:d6:60:3b:
77:5c:12:88:43:c1:2a:c9:cd:5c:2d:2b:e6:be:0b:02:18:be:
7a:13:ad:97:05:5c:99:fe:f0:8c:f2:d1:68:a7:b5:47:f6:ed:
11:36:17:e9:0f:b4:6f:6d:ae:dd:17:16:d7:3c:8f:3b:8f:7b:
cb:5c:cb:63:54:48:0d:33:86:ad:98:19:ce:5d:f2:8c:e6:2c:
2e:93:c4:7a:48:5e:6e:49:72:70:fd:73:d5:2c:9d:ff:80:61:
b9:bd:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:08 2025 by rpki-client