Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: il3oAPOa383gHucM3e7XSxfBRXc2ZZ/S3QDfuY+W2+c=
Subject key identifier: A1:65:38:D8:A9:C5:4F:45:A6:48:E0:9A:60:89:A5:F3:B7:7C:0D:DE
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 0194BC050658FC73693EF70CB72E6719A7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: WponuMlWZtiFOUgzphoJZxWN_iw.roa (hash: UIQh/CuyVqeX7HcjhL38mDSrWztLseE4bJUkUTwxbUc=)
2: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: tLg3OG1hnC6dSzg4XpWMGkIg+KlLvGsRVAhjISfovYE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:58:fc:73:69:3e:f7:0c:b7:2e:67:19:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=a16538d8a9c54f45a648e09a6089a5f3b77c0dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:cc:e2:f7:81:d6:91:02:38:0f:53:42:4f:
98:bb:d2:8f:d3:77:77:03:26:ef:41:ea:97:fb:03:
fb:09:53:d9:50:12:84:21:19:93:c5:2d:89:b3:72:
ca:ba:45:c0:4f:c0:ef:ec:b9:0c:9b:f5:b4:1b:f5:
82:a3:30:75:3b:08:b5:b9:c6:19:0a:7c:05:81:a3:
e3:ee:cf:b3:72:fd:fc:50:7d:53:06:77:58:97:f6:
d5:44:6a:38:fe:93:56:8b:f0:db:8d:03:7e:ff:96:
95:15:bc:a8:36:3a:ed:ba:ea:3e:b0:0b:95:18:b5:
aa:89:d6:ca:6d:37:88:ba:e6:ef:f8:35:99:81:a5:
1b:6d:98:6d:00:c3:0b:db:14:5d:3e:0d:7c:0f:bf:
7c:45:b7:d7:ca:85:3d:1c:63:92:55:30:22:38:e4:
2d:bd:c2:18:bf:21:ff:18:cc:e5:7f:3b:84:c0:ba:
d7:95:1d:5f:34:aa:7c:8b:8f:eb:ae:13:2d:54:83:
08:bd:28:7d:74:4b:6d:55:f9:42:10:db:04:02:40:
c7:b1:f6:37:d0:6c:b3:f9:33:ba:35:ec:c0:00:7f:
99:fe:ee:1d:fe:45:de:6b:31:ac:8a:21:85:18:85:
3d:7c:77:96:42:c4:68:0b:27:c9:93:d7:28:24:12:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:65:38:D8:A9:C5:4F:45:A6:48:E0:9A:60:89:A5:F3:B7:7C:0D:DE
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:47:94:4b:24:62:98:c3:f9:c2:a4:ed:7e:cf:00:8c:5d:
6b:0f:88:1e:c9:67:ed:46:33:d6:57:41:9b:d9:fa:9c:c8:69:
00:72:2b:ba:7e:22:b1:44:6d:92:9f:03:e6:06:78:cf:93:5a:
f5:76:c6:02:74:81:43:9b:6d:a8:cb:0d:2b:fd:49:42:2d:f6:
67:9e:ea:7e:f0:27:ed:d2:43:63:e0:44:63:65:ec:7f:b2:35:
8f:6f:38:d5:19:60:cd:65:85:fd:13:88:90:26:78:48:bd:86:
5f:35:91:5d:71:cd:0c:49:26:a2:1a:31:58:00:47:6d:3f:90:
08:9d:63:43:9d:ec:36:3e:e8:04:37:65:28:7a:39:4f:30:92:
e3:7d:ac:01:62:02:d3:ba:65:a2:b7:35:25:a6:90:8c:35:7b:
67:16:31:31:9c:59:ac:da:c5:37:34:03:95:e9:06:5c:c9:9c:
c5:cc:c7:30:65:c5:b3:6e:24:49:7e:5e:4b:01:8e:3f:51:1e:
ad:7b:fa:4e:6b:ce:11:fe:d2:42:3c:96:56:d3:e9:8c:28:99:
93:7f:e0:f7:11:24:05:9e:f1:46:69:7b:5c:b2:b1:a6:b0:09:
3b:bd:24:28:a2:e2:6f:66:2a:fa:06:41:b4:10:d6:4c:7f:fe:
61:8a:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:52 2025 by rpki-client