Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
File: g5qaG34R_ed-Th9X_xGGTO4h8WU.mft (raw, json)
Hash identifier: CWSwbAwN91MFb6OaA2pNGhMdtZ0Kp1PxiwDCjvb+h0U=
Subject key identifier: 17:F9:46:72:97:6B:D6:5D:BD:99:7B:AE:C9:F9:54:E4:8B:E9:04:3B
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 0194BC3C428D0B9ECA6A4F6B3BE6358F49AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: g5qaG34R_ed-Th9X_xGGTO4h8WU.crl (hash: OtPEhcHj0UdkmBFdQKjFb7XFI7fOVclzfdxIDClgJyE=)
2: jlzyWyeLnfRikEWPiYrI3y66rQk.roa (hash: BLn7EvSqDEddleMAMTyKR7P0lxZddZ6yhFZNcQkjaGI=)
3: pnar3nU7lsWpYfObm0kbhWvk0to.roa (hash: YBfwP3uxI+fMAH4sE5yvO7xnTJh4Fd6ScTYz4RruI/U=)
4: qPBo6gDIPikWDxJZ1MWrWtkyXCw.roa (hash: M7pO9RoZNiw6lPs2QQ5knIEQsHH5dfWOnMCMlqteTL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:8d:0b:9e:ca:6a:4f:6b:3b:e6:35:8f:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=17f94672976bd65dbd997baec9f954e48be9043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:f5:14:f8:a0:c9:a2:a8:b2:84:10:f3:04:
86:a0:07:c9:c8:7d:dd:86:bd:54:50:03:ec:40:40:
fd:8b:0f:77:08:cf:97:58:12:09:d5:78:48:a0:25:
b4:f0:c1:36:be:60:c1:0c:f5:b0:7d:a9:58:b5:f1:
ed:90:06:1d:88:b9:ad:fd:be:f1:26:12:a8:66:5e:
ad:24:e3:1a:d2:3d:de:90:17:2c:5d:41:95:fd:64:
6d:e0:64:19:1a:bb:39:dd:87:19:fe:5e:3a:57:49:
31:f9:32:24:42:8a:af:3e:86:34:35:36:84:69:78:
ad:71:2a:c6:75:67:5e:93:ec:a2:66:a9:55:5a:57:
6a:bd:d5:63:de:32:63:b4:ba:e9:11:6a:5d:b0:e1:
84:a2:00:78:17:71:c1:f6:c9:e0:7c:e2:23:d1:43:
95:94:24:d7:c0:b9:d7:81:6e:5b:c6:b6:06:e0:ce:
b7:9e:84:68:50:fe:bd:1c:42:8b:84:d6:03:42:b7:
53:cd:08:63:ac:fb:e3:61:c6:ec:13:ab:76:1a:bd:
c8:f8:f8:c6:04:b0:3b:92:2c:f6:ed:22:9e:f8:2a:
93:42:4d:c8:db:82:f9:33:72:2e:b8:60:55:66:cc:
e2:a5:38:78:af:77:49:b6:3c:c1:7c:fa:f2:9b:1c:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:46:72:97:6B:D6:5D:BD:99:7B:AE:C9:F9:54:E4:8B:E9:04:3B
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:b0:6f:0a:96:f1:6b:92:fc:d4:67:b1:e1:46:46:89:11:
d2:0f:d9:73:4d:62:32:e3:df:f2:31:2b:82:20:47:ec:46:46:
cb:95:96:40:f3:85:fd:11:f5:d7:a1:33:0c:e1:ba:34:b1:0d:
c7:17:33:58:95:4d:4d:0c:00:5f:e6:50:81:a8:61:7d:50:5a:
a1:6a:22:0c:cd:46:f1:36:b6:d3:3b:1d:b6:a2:09:a2:e7:47:
65:82:79:5f:b6:56:73:6b:93:30:e9:8e:79:f4:39:7f:14:dd:
19:9a:34:9b:0d:4a:38:2e:fc:c0:78:9a:85:6a:0d:c1:7a:21:
1f:d2:4a:db:74:41:e3:5b:c9:57:0c:77:74:47:b5:6a:a9:84:
7f:0a:97:11:19:76:33:25:c8:40:fa:96:16:96:3b:00:9e:3a:
0a:f4:bb:0d:0a:9a:ab:e0:ae:46:9d:ba:00:6e:16:7c:0c:8c:
02:b7:46:c1:b2:5b:f7:65:9e:80:48:6c:9b:70:6a:b8:21:fc:
70:43:52:8d:e2:74:ea:da:56:0b:59:93:ec:6a:77:7c:84:fd:
24:ee:2e:db:b5:98:28:39:7c:61:e0:21:92:63:63:fd:c9:e4:
d8:a9:e5:a7:ae:2e:e8:34:eb:cf:43:bb:5a:6b:0b:8f:93:6d:
96:33:48:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:18 2025 by rpki-client