Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier: lXR6lX9ql+61ovFB16roYqUm4BOJpkM918ndVxUaWzw=
Subject key identifier: 9D:86:0F:4A:F7:CE:78:CC:E3:F1:61:7B:87:30:C1:CC:BA:46:D0:98
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial: 0195E15A1D50E9480639952DC5CCC069CF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number: 02E8
Signing time: Sat 29 Mar 2025 10:02:14 +0000
Manifest this update: Sat 29 Mar 2025 10:02:14 +0000
Manifest next update: Sun 30 Mar 2025 10:02:14 +0000
Files and hashes: 1: Jqa8UqmD4FhpJUfr0zYi4KJxzTo.roa (hash: qLaNyZ74JIYgUM1Rv4ziO50UugqnCbFJK8PfvDf91To=)
2: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: G0nHkYD3QDQtQCQDUB1anFgGvX9ihd3if4ZlcGYqYhI=)
3: uHwLCNaqw6reh3PVszS52rCZ-BI.roa (hash: vspOmj+Pb8zK0rzuCoe71w3v46APy4r5nJ3Ab+uPU+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:1d:50:e9:48:06:39:95:2d:c5:cc:c0:69:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Validity
Not Before: Mar 29 10:02:14 2025 GMT
Not After : Mar 30 10:02:14 2025 GMT
Subject: CN=9d860f4af7ce78cce3f1617b8730c1ccba46d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:ff:2b:4a:1a:54:05:8a:58:33:af:a5:38:
1e:b1:03:a2:3c:85:45:ce:f1:d6:bc:be:82:29:bf:
bb:74:95:df:a8:fe:75:64:4d:7e:2a:e2:a5:a8:ba:
db:d1:31:41:9b:be:84:4d:54:4c:9a:87:39:a7:d8:
d9:91:cf:81:e0:24:70:a7:67:17:f1:a0:3d:55:bf:
a4:e3:c4:de:fd:57:95:7b:06:3f:e8:dd:e1:42:0e:
f6:c5:59:24:54:f9:b6:10:e9:4c:ae:ac:cc:80:78:
b8:12:1c:fe:8d:a0:c1:6b:67:a1:c0:82:00:40:b7:
8b:41:10:37:09:ee:7b:c0:c1:f0:41:e3:f0:c2:28:
f9:2a:78:c1:58:91:32:4a:41:5e:54:03:a1:ff:d9:
32:59:e0:81:f0:a3:c6:a4:8b:b6:91:64:59:2e:c9:
51:78:a1:4b:16:46:09:fa:be:ec:dc:d4:8d:3d:2d:
72:63:8a:63:c9:6d:f4:65:4c:14:7a:f3:56:6e:52:
a0:a7:fa:c3:5d:13:6b:c3:9f:30:dc:be:fd:c3:9c:
53:be:3d:8c:62:8d:db:ab:36:c8:e6:a2:fc:88:51:
2d:d2:a2:c3:ab:83:db:50:cc:60:95:fe:8b:81:de:
52:46:8b:10:2a:1f:e2:69:10:e8:be:3c:df:e9:8e:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:86:0F:4A:F7:CE:78:CC:E3:F1:61:7B:87:30:C1:CC:BA:46:D0:98
X509v3 Authority Key Identifier:
keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4f:14:ac:f6:02:da:62:a3:65:04:27:5d:e0:6d:32:d4:16:
2f:10:5d:5a:ae:ef:24:76:af:9b:31:11:65:0b:61:c9:bf:6c:
c5:7e:79:2e:b4:7e:27:4f:fa:3f:91:fb:58:f1:82:db:67:07:
fa:31:14:b4:d3:8a:b6:90:ce:f5:b1:9b:33:27:e8:55:b1:c2:
e8:9c:6f:03:10:5b:6c:25:61:f4:8b:e4:c5:ba:b7:5a:60:43:
92:cf:38:7e:62:99:c5:08:35:34:ac:71:e6:53:ab:f5:7a:18:
a2:1b:0a:39:48:e5:af:e3:30:85:9e:3f:69:d6:e4:4c:ae:d2:
82:06:6d:fe:4b:59:72:88:68:03:cc:86:7e:a5:cb:65:1d:67:
41:7a:bb:0b:27:2f:13:2a:62:36:37:16:a8:be:4b:f8:16:19:
66:a2:28:db:2a:72:db:3a:4c:16:21:c1:0b:a7:a6:68:87:19:
3b:5a:61:77:76:e6:61:07:b0:8e:0b:d4:50:a7:f5:8f:49:1e:
35:d8:04:71:7a:1f:ce:5f:f1:ec:8b:97:78:54:f5:a3:a0:4f:
a6:01:bb:6b:62:80:44:ca:83:e5:a9:f1:eb:e6:c7:f4:c0:b1:
3e:48:74:f3:c9:0b:08:a2:3b:bf:ae:f9:f7:a6:86:a4:83:97:
cb:eb:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:17 2025 by rpki-client