Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
File: Brft72GFhyPErevj7lqJ9wBY1f4.mft (raw, json)
Hash identifier: A+3ZYOoGU5LDfKzWYxq5ZEludG8/wmkp3NKEkrYne4g=
Subject key identifier: E8:9A:F3:8C:AA:3B:42:F4:45:3F:49:D5:E9:D2:A7:F2:0C:5A:D3:ED
Authority key identifier: 06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
Certificate issuer: /CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Certificate serial: 0194BCAA32A8190BE306CF216B4FFC0FAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: Brft72GFhyPErevj7lqJ9wBY1f4.crl (hash: wI/X+AI1zLV2nh/kMxs9sCw3C+PHt/ubzmvBPTQEclE=)
2: MsJyOsbVpQF0bmOk4lDmCk2Ixaw.roa (hash: B4zGetD0jpIcmHis4I04KfqeBFq8sxNosMNWhmkkmLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:32:a8:19:0b:e3:06:cf:21:6b:4f:fc:0f:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b7edef61858723c4adebe3ee5a89f70058d5fe
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=e89af38caa3b42f4453f49d5e9d2a7f20c5ad3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:d8:62:56:8a:96:8a:3f:15:f2:50:2b:d7:
65:58:ba:41:e6:06:fa:7e:61:9c:e9:99:e3:3b:5d:
a5:e2:79:a2:63:0d:04:5a:49:90:50:ad:6b:bc:ac:
c9:42:53:74:39:59:27:d9:11:66:d0:c8:b9:16:51:
72:f5:aa:9f:ae:5f:43:22:bc:2c:b7:13:89:48:d8:
88:b2:bc:e8:df:10:ca:a1:c6:46:dd:56:3d:f2:e5:
d4:e5:f5:76:dd:90:c4:ce:ec:33:6c:11:31:c5:cd:
20:b9:00:99:99:f1:42:1e:51:35:d7:cd:0b:d4:67:
0a:e8:df:2e:c8:cd:83:53:e4:05:41:da:69:87:03:
17:0b:e0:b4:3a:79:64:3f:61:12:bc:d6:d5:be:45:
cd:c9:93:b4:d3:d5:4f:6e:47:ce:77:72:a2:d9:a4:
a5:43:1c:cf:99:99:a4:64:43:e3:b9:6e:55:46:0c:
62:c5:ac:00:05:e8:df:cf:8c:ec:ec:19:72:6d:da:
69:fd:77:55:23:13:a4:a7:0e:1a:bc:2d:00:da:c4:
f7:59:76:6f:b8:92:69:3c:bc:be:c1:9c:97:05:5f:
36:7c:93:f4:e5:4f:40:4d:a4:6d:58:42:d9:53:f2:
3e:c2:f3:67:37:20:98:11:3e:7b:d9:bb:38:12:89:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:F3:8C:AA:3B:42:F4:45:3F:49:D5:E9:D2:A7:F2:0C:5A:D3:ED
X509v3 Authority Key Identifier:
keyid:06:B7:ED:EF:61:85:87:23:C4:AD:EB:E3:EE:5A:89:F7:00:58:D5:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Brft72GFhyPErevj7lqJ9wBY1f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/010ca1-5b30-4baf-831e-89551e8cce12/1/Brft72GFhyPErevj7lqJ9wBY1f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d1:33:4d:f9:4e:54:59:d1:53:37:7f:34:bc:80:a8:dd:76:
35:2a:e7:20:98:50:94:d3:05:5c:ed:a2:d4:1f:d2:d8:11:08:
7a:92:cc:74:13:96:c1:eb:30:70:6c:1a:1a:9b:56:f4:a6:1d:
ab:b3:b8:f7:a5:f8:28:b0:8a:4f:ac:fd:15:e8:4c:18:b5:80:
41:f4:01:3a:a6:e4:89:43:c8:93:46:55:e1:0b:e9:e2:ab:c6:
c9:42:86:27:90:2b:9b:d0:b9:4c:44:0a:e6:31:5f:6d:9c:5b:
ff:8e:72:2e:06:49:fa:51:2f:c9:36:18:2a:43:df:9a:b2:92:
de:7d:30:df:25:6c:b2:8a:12:ff:a3:b7:d4:87:f1:f5:e6:8a:
68:c0:21:ec:8e:07:0f:60:f8:34:9c:82:9c:15:75:04:b7:61:
b7:54:c8:fc:5a:9f:ef:6e:0c:10:67:70:96:87:9b:4b:4b:c4:
c1:e7:15:eb:8a:c9:f5:58:14:64:ff:74:25:97:ac:9c:16:44:
d8:e3:b5:68:85:61:17:4b:ae:52:bc:d2:68:bc:8d:93:e0:d7:
73:d7:a2:cd:5d:61:ef:50:95:2f:ce:18:ef:3f:c0:ee:6a:9a:
57:50:11:0d:0f:b1:14:04:47:39:ee:89:54:d5:6d:ff:00:fd:
a3:ee:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:55 2025 by rpki-client