Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: WlkRF2vA4tGKieK0E02/6qFmRJgyPEIGo1xgmyf0ktk=
Subject key identifier: 2A:89:25:67:7F:56:7E:7B:CC:F6:AF:D7:B3:D9:28:36:10:D1:6D:3A
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 0194BC0515B1215EE57D9113F5235CCE9242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 0FCF
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (hash: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=)
2: cYL1PLXBlxYVDNJh8eskDp73wJI.roa (hash: sc3bndIqRaS/g3PvEGkay4IT17gUF6IlbM+GmNxxekk=)
3: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: 1FcRuSNRfhfVUwBA69nZwOp9HWe3Ldmgfs1z2X+V3CA=)
4: jkh_FFhFNHENA3gIbYhebQVvuBM.roa (hash: cA2VhsNT4DoSkMtREZkBzaZ4CHPg5DwGT95fVOvu/Ok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:b1:21:5e:e5:7d:91:13:f5:23:5c:ce:92:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=2a8925677f567e7bccf6afd7b3d9283610d16d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:e2:d9:5f:86:26:a9:a9:38:21:f8:16:0c:
e6:78:6a:4d:af:af:d0:98:e7:1c:89:77:b0:7d:07:
ea:c2:1a:e4:b0:12:9c:a6:05:3c:8f:1c:74:e7:83:
9e:c1:af:cd:95:13:98:6e:aa:a3:00:2e:61:5d:33:
74:bd:90:79:f7:0b:39:01:2a:a8:2a:e3:26:f2:d6:
55:ee:ca:99:ec:a9:bd:65:15:80:ec:12:eb:38:99:
b3:5d:69:32:48:b1:d0:d0:2c:e7:31:4a:d9:ad:2f:
22:b4:85:44:19:02:5a:f4:0d:6c:ea:7a:e4:a6:cf:
e8:f6:c4:4d:50:0b:b7:a7:f0:a6:b1:20:9c:2b:9f:
1b:ea:56:c3:de:0a:8b:79:24:12:07:85:66:d8:d1:
19:04:d6:c6:8e:91:58:f0:74:1d:9a:6f:01:7f:12:
5e:57:99:35:4d:ef:e3:35:03:9b:23:43:f4:e1:34:
2f:e5:85:03:0a:2b:81:a4:e6:df:78:dc:8b:63:8d:
d5:a5:a4:01:1e:fd:2c:97:61:f8:65:57:e2:fb:b2:
af:f7:d8:73:9f:80:07:4e:11:c6:8a:ff:cf:72:ab:
ae:6a:7f:98:01:7f:c5:39:3b:54:07:98:77:69:be:
7c:1f:38:72:2a:a1:bf:b5:ec:95:ab:72:8f:37:3a:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:89:25:67:7F:56:7E:7B:CC:F6:AF:D7:B3:D9:28:36:10:D1:6D:3A
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:af:fa:e0:74:c8:ed:e5:d0:dc:ba:70:b9:08:c1:83:46:6d:
3e:84:b6:0d:9b:c3:ad:98:13:0d:18:95:68:7b:6a:8c:70:54:
db:41:0f:61:41:9b:bc:17:81:23:2b:34:56:22:6d:32:b7:ef:
04:1e:0a:8d:a0:1d:55:29:86:b9:8f:f8:32:5e:d3:5e:a8:ed:
8d:fd:55:12:c8:b7:69:27:12:0a:f9:81:4e:0e:38:ac:53:b6:
2b:d5:03:c3:c1:d9:b8:83:4d:ee:0d:99:9b:52:38:e9:96:3f:
a1:6e:c0:1e:92:14:eb:28:7c:cf:52:8d:0f:69:1b:e1:36:e1:
08:62:d3:13:45:05:33:82:2b:42:e1:cc:12:3e:ca:f9:9f:78:
63:1b:54:a3:8c:cf:b2:84:10:c2:b2:59:bf:26:cf:03:e0:a0:
e5:18:16:87:99:b2:1d:cc:1b:71:19:36:fb:4f:bb:45:cd:6b:
61:c8:3e:83:e3:8e:74:18:dd:e5:4d:e6:c7:9f:e3:50:d1:cd:
40:f3:e5:2d:77:b4:19:5b:20:1a:c2:8c:fb:ae:92:df:fa:4e:
81:f8:7e:98:ca:d3:33:73:c6:40:1d:e2:03:22:0d:7a:9e:09:
9f:35:db:ae:23:68:bc:84:f7:db:6f:5b:23:97:e4:2d:48:6e:
04:bb:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:11 2025 by rpki-client