Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
File: guaSFNb9VedQULqBG_fBJDkQn-4.mft (raw, json)
Hash identifier: +6uu/jvktgYPr4iMio+/WbS3kxJN+zOrnUuV1kv7A0s=
Subject key identifier: 47:1A:7C:3D:9F:E5:A3:FC:0F:27:F9:43:A6:B8:E6:56:45:51:64:BA
Authority key identifier: 82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
Certificate issuer: /CN=82e69214d6fd55e75050ba811bf7c12439109fee
Certificate serial: 0194BCE0BF2D9A1151E6AF8D5ADA6B1D15ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
Manifest number: 0B12
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: Yf8xLh6ONOE-LcHsXkQWHpv_Qbs.roa (hash: w0wC5FwQryxr68NY97Vqd4lkkn8kQ9lhz7BZtY1f10I=)
2: guaSFNb9VedQULqBG_fBJDkQn-4.crl (hash: 2Nav80nWirdfzyJFGXqBfl2/LKr8P2cKNGtk/cH33kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bf:2d:9a:11:51:e6:af:8d:5a:da:6b:1d:15:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e69214d6fd55e75050ba811bf7c12439109fee
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=471a7c3d9fe5a3fc0f27f943a6b8e656455164ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:72:60:12:04:27:81:36:85:7f:5a:c7:63:
31:11:32:6e:32:ee:ff:69:ff:1b:d3:47:79:2a:92:
39:c6:01:97:86:8d:59:76:2b:09:47:e2:3b:e4:31:
67:50:71:0c:03:51:68:ee:f6:d2:8e:de:d1:4f:90:
f2:44:2e:04:0b:8d:94:5b:77:8d:60:f7:d7:3c:9f:
23:0e:1d:de:12:5c:06:86:ce:4c:21:cd:90:07:6b:
a0:f7:ba:ba:4f:ac:f6:67:cd:01:a2:3f:aa:b2:31:
51:66:f3:c3:6d:25:2b:d7:df:57:30:0f:c5:84:90:
b4:b9:6a:40:e3:b3:9d:2f:a7:e1:7c:f2:57:42:0a:
da:c6:ff:06:8c:88:f3:09:99:1f:6c:b9:af:71:fe:
97:e3:6d:78:98:51:cc:51:1a:26:46:fc:f0:03:d7:
2c:19:21:d8:dc:e7:94:82:1d:4a:32:c8:e8:2f:6e:
7d:4e:68:43:de:22:4c:46:f9:2c:aa:e6:e8:e1:39:
94:99:40:6c:3f:56:cc:8b:e5:81:4a:44:e2:d7:25:
6b:f7:39:a9:67:4a:ce:d3:aa:10:52:35:b7:d7:fe:
a8:40:55:97:f8:c0:4c:a0:d7:35:79:a5:0e:ee:e0:
7e:48:f7:d3:fd:44:bb:a0:de:da:b8:9c:40:20:6a:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:7C:3D:9F:E5:A3:FC:0F:27:F9:43:A6:B8:E6:56:45:51:64:BA
X509v3 Authority Key Identifier:
keyid:82:E6:92:14:D6:FD:55:E7:50:50:BA:81:1B:F7:C1:24:39:10:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guaSFNb9VedQULqBG_fBJDkQn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/173fc5-343b-4976-b2a1-96bc6baa563b/1/guaSFNb9VedQULqBG_fBJDkQn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:39:7f:99:5c:da:46:1c:b8:62:c5:89:3f:71:ab:42:40:d2:
8f:49:91:fc:6b:b3:bc:23:5d:1b:2b:a7:6f:8e:4b:3a:e1:3c:
73:e6:12:5f:31:6e:1f:9d:a2:c5:1f:7a:ec:0b:2e:01:46:95:
c8:b4:d7:cc:10:e8:29:ea:94:f1:86:56:93:ae:77:ec:06:f1:
f4:41:44:4d:bb:2f:f1:ad:8c:05:35:d2:b4:7e:57:57:dd:2b:
7d:a6:45:b0:0e:aa:e9:c6:e0:bf:ba:ce:48:71:6a:a4:fc:f9:
43:b7:8c:07:ef:49:0d:10:c8:12:f9:8c:1c:c3:0a:4e:dc:53:
b2:32:19:67:1e:cd:49:26:98:fa:64:bd:ca:af:fd:af:f3:1d:
df:95:70:03:41:2c:4f:cd:4f:8d:eb:61:e2:c5:ed:87:7f:b8:
68:79:99:f6:34:f8:db:da:e0:df:a9:56:04:29:bb:40:02:4f:
85:2d:ca:d7:1f:2f:fe:b8:8c:81:95:4c:21:8a:fe:7d:d2:45:
a8:10:05:85:f0:7f:a9:32:7e:c6:35:10:d9:0b:b1:af:61:27:
0c:62:57:7a:47:31:74:03:b5:f7:05:0c:e5:4e:ee:59:cc:37:
97:b3:1b:a1:6c:ab:c6:96:ae:69:e2:97:a8:e7:df:73:fa:e9:
25:1f:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:33 2025 by rpki-client