Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File: Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier: EDxSIU1O+xUGMzPnV3b2wxNrJWg5pB0y+W/kZMxdwYU=
Subject key identifier: E3:43:A5:8B:7C:7F:A7:E1:00:0F:20:27:72:99:8B:19:8C:36:51:C2
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer: /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial: 0194BD858D546FBB1C1B03527748B1F5A6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: 8lpbzmidYJ+R4dfK/hDbqyPVgAZrcFLvfMlQBRzfh0U=)
2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:54:6f:bb:1c:1b:03:52:77:48:b1:f5:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=e343a58b7c7fa7e1000f202772998b198c3651c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:00:4d:0e:ee:17:65:30:55:2f:b3:b2:7c:
bc:97:63:99:c7:1c:9d:a7:40:07:3d:6f:e0:8b:42:
97:f1:5c:1b:2e:a4:70:6a:ee:f5:dd:c6:36:9e:d1:
2c:0f:a5:d3:e9:1b:9a:5e:ee:49:d0:e1:1d:17:9d:
9a:e7:66:29:59:08:a8:a6:ac:09:24:6e:7d:f5:94:
b0:cf:ad:39:99:43:b0:fa:5f:67:bf:94:7f:96:e7:
da:13:e6:b7:03:fa:09:96:4c:85:44:e3:cb:0f:06:
5c:37:f1:56:58:4d:7e:ba:a1:6e:cf:ae:c8:e1:d2:
e3:55:ee:50:14:1f:d2:d9:26:24:ae:f3:bf:17:21:
b5:02:63:55:3c:6b:4c:a2:46:2a:89:df:56:6c:04:
59:85:d2:d9:64:71:4a:eb:b9:48:98:ee:8d:06:e2:
1e:8e:22:05:7c:71:16:cf:24:cb:da:1b:5a:b7:0a:
97:71:5a:82:42:d8:12:b9:f1:c0:b4:4e:74:ec:21:
2d:ca:47:95:38:e2:7e:67:96:2a:d1:7d:20:23:75:
e5:6e:12:a6:14:44:81:7a:3d:2e:22:80:c7:34:51:
f5:12:9a:90:da:4b:cf:80:10:87:42:ca:bd:f2:5d:
a5:f7:12:5a:54:7c:06:a2:2a:a7:a3:00:b8:80:bc:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:A5:8B:7C:7F:A7:E1:00:0F:20:27:72:99:8B:19:8C:36:51:C2
X509v3 Authority Key Identifier:
keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:ea:41:e3:1d:97:fb:8a:87:a6:2e:e1:0e:6a:82:a4:41:
66:11:60:20:5f:bc:18:1b:19:50:81:10:00:d3:7a:93:e0:23:
46:28:fe:52:dc:cf:30:25:68:85:9f:9f:7a:18:87:77:c1:40:
11:db:a3:cd:d0:42:65:67:93:7f:61:97:87:33:7f:da:5c:d4:
df:56:ea:8b:06:5c:a5:db:43:75:22:f3:9c:dd:f5:8a:dd:40:
2d:47:c2:4d:13:9e:13:48:70:c0:3c:87:f0:f4:c7:97:f8:f9:
56:e9:e0:a8:8c:a3:87:dd:7b:25:7c:9d:0e:2a:08:06:e2:fd:
2a:9f:ff:c9:7f:7c:ff:a9:ae:c8:53:36:ea:28:57:7d:5e:a3:
d3:f6:0f:94:d5:47:ac:07:99:b2:42:a2:4b:93:30:06:05:48:
a1:77:dd:fe:4c:b8:82:44:27:34:73:e5:64:8c:3d:90:ca:3d:
41:c5:19:be:96:ce:1b:4c:b5:8a:5f:f9:3a:59:76:11:6e:37:
4b:22:a0:1a:c3:09:be:67:1e:eb:5b:e1:74:2f:c6:2b:9e:b7:
8b:88:54:c3:9b:3a:63:23:0c:aa:5c:1e:d5:54:88:c3:a3:f0:
e4:15:ca:26:94:d0:8e:88:fc:c6:cf:f0:d4:df:2c:de:89:87:
a1:91:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:58 2025 by rpki-client