Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: cTFZG8JHA5gmpdG25LlrMe+L0i+9LUaxu8ZlGeSuKfM=
Subject key identifier: 1B:7D:74:D5:A3:74:13:B3:21:6A:9B:C1:DF:A7:AD:09:E1:D0:0B:3C
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0194BBCE4CA8B2DDC8655FF9F8A7FBC19D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: tJfKKCqJJYDe6nIPVK6I54UznBbsUGnYIlOsybEPlCo=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:a8:b2:dd:c8:65:5f:f9:f8:a7:fb:c1:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=1b7d74d5a37413b3216a9bc1dfa7ad09e1d00b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4a:ea:47:8a:12:15:ec:2a:1d:14:81:c6:41:
37:63:55:9d:9e:c8:c6:4e:92:14:83:59:d8:cf:12:
d4:8b:39:0e:d2:21:8b:56:18:0b:7c:05:e6:dd:b7:
bc:c7:11:1e:9a:4c:71:4e:fe:d4:42:42:59:cb:8e:
cf:76:f3:c4:45:14:1d:4f:47:3f:5b:9f:73:f6:6c:
77:af:ee:84:45:a1:6d:c7:bc:66:8d:5f:f4:f5:9e:
80:0e:25:47:8b:bf:16:4c:b2:04:56:92:8a:f5:9b:
3d:e1:79:e9:83:f2:ec:34:0f:de:b2:ab:76:e4:3a:
c4:f4:41:33:79:52:a2:35:a3:f1:c8:43:d3:ed:53:
6a:ae:fc:b4:ac:52:da:76:0b:5c:31:35:60:79:fd:
0a:bf:0c:c3:73:0b:69:d9:a2:83:62:7d:71:0d:d9:
11:d8:77:13:be:b6:96:2c:30:d6:77:21:b3:a8:04:
96:80:aa:5a:33:03:04:6a:ba:28:b4:85:5a:76:34:
99:31:84:14:32:29:43:12:62:c7:04:be:ce:41:38:
aa:2d:3a:9d:f4:37:55:08:79:62:c5:1d:7d:80:ef:
4f:53:84:fb:24:eb:86:17:8c:31:81:c7:96:48:9b:
54:8c:e3:3e:f3:45:26:83:70:e1:f4:33:4f:ce:0e:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:74:D5:A3:74:13:B3:21:6A:9B:C1:DF:A7:AD:09:E1:D0:0B:3C
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f6:72:93:ce:32:ec:ad:d2:52:2d:20:13:e1:a5:0e:31:18:
32:56:46:a9:60:ce:ea:38:94:20:c3:43:2f:2d:46:70:7a:18:
4e:09:e6:be:27:9f:62:eb:72:76:9c:8d:12:68:12:ae:57:c6:
40:45:80:1b:35:4c:42:89:45:32:7f:50:7c:d7:f1:e7:7b:b2:
f3:63:e3:34:b9:01:0d:9f:42:82:10:d8:db:cd:5f:88:f7:ee:
28:d6:10:24:44:53:ec:69:db:b8:8e:ab:19:cf:2b:32:a8:21:
77:e1:78:bf:a7:85:55:77:e1:c1:f5:c7:36:36:de:7a:7c:46:
9d:05:c3:e3:d8:06:f1:e7:bd:1d:2c:a7:d7:b8:00:dc:d4:4e:
61:5f:41:25:a1:65:70:e5:eb:c5:c2:67:f7:3e:cd:3d:bf:f9:
67:f2:6e:ed:d3:7b:53:45:ec:88:60:f7:86:b9:de:07:1f:ed:
ad:d1:11:b9:1e:28:74:0c:2b:9f:c3:64:24:78:9d:c1:6c:a3:
5d:6d:26:72:c0:c9:04:17:6e:db:8b:9f:54:65:d1:8e:61:f4:
fb:6e:62:92:8b:c9:7f:a0:31:89:d2:b0:f9:99:13:14:cb:25:
bf:76:c3:26:3e:c2:b9:16:b9:ed:03:97:1c:18:f5:a1:d3:34:
e5:6c:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client