Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File: G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier: MCsQTBHkcsAyVx19lyc0ArirgRnQ6jJlSA5NbyiRIq0=
Subject key identifier: 0E:FA:D6:14:33:3B:12:92:CC:8A:9F:1A:98:C4:CF:2A:B6:42:80:9C
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 0194BD179CA1977A471905C4D5D89FA219FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: COrzaJtr3zDnwUJDH2HWkPATTjeN/wbJx7T3ggeVBaU=)
3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9c:a1:97:7a:47:19:05:c4:d5:d8:9f:a2:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=0efad614333b1292cc8a9f1a98c4cf2ab642809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:b3:57:83:2f:15:bd:c2:bf:8d:05:39:b1:
e9:34:da:19:86:d9:83:8e:06:b1:30:3d:a3:de:16:
1a:5b:32:12:4e:2a:ee:7f:d0:a9:2c:c8:73:90:32:
f7:de:3a:b3:55:e0:cd:e6:28:ff:e6:98:f7:e9:04:
9a:ed:44:28:cc:93:a9:08:4a:5c:4b:21:2c:88:55:
1c:84:b4:c4:e1:f0:a2:95:e9:36:aa:b8:56:05:02:
04:2e:d9:c9:fe:02:a3:07:83:87:13:d5:60:21:47:
09:52:dd:50:6c:f3:29:10:05:9f:8c:6d:2c:fd:0b:
1c:32:8f:53:95:34:ee:ce:61:56:f5:d5:be:0a:a3:
7c:11:66:d7:59:01:d5:80:2b:78:83:f1:57:ff:c0:
21:14:6d:a8:41:08:4e:20:b2:a2:e8:b8:24:d3:4d:
d5:6c:ee:e1:75:3c:da:ba:d5:85:f7:21:e3:0a:2f:
9f:f5:cd:0a:f6:8e:2a:75:40:cd:2e:62:14:0a:f6:
f6:6a:ff:2b:fb:fe:55:6d:2f:b1:e3:a9:c6:83:b3:
bb:fc:81:6a:84:aa:ef:29:ec:7a:0e:fc:56:46:64:
48:79:f9:b9:db:8f:e3:94:f8:5d:d9:8e:45:b0:6a:
0a:d5:47:ec:2a:32:d5:cf:2a:2c:1c:b2:ae:0b:09:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:D6:14:33:3B:12:92:CC:8A:9F:1A:98:C4:CF:2A:B6:42:80:9C
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:cc:75:fd:53:13:a0:21:75:30:85:8f:03:c5:b6:7e:26:
55:8a:e9:45:e0:bd:5b:8f:80:bd:b3:da:01:2d:eb:2f:e2:b1:
d9:e3:33:30:c0:3f:c8:da:65:3c:82:fb:29:f5:5a:89:44:10:
30:51:87:00:73:11:05:a6:bd:5b:6a:a3:42:fc:3a:2a:7c:95:
f0:1a:94:5f:ff:a1:69:ab:b8:1e:dc:8f:c3:09:95:82:8f:d1:
39:c4:f3:78:fa:cb:44:fc:da:dd:bc:60:1d:ab:c5:df:e6:50:
ff:b9:c8:90:a9:5c:6b:5c:2d:46:43:87:15:21:cc:2c:79:64:
51:6c:d7:83:e1:ca:c4:93:59:2c:dd:4d:92:35:41:80:ee:ff:
ff:69:cc:97:f6:d3:84:e9:f9:77:cd:57:e9:7d:2c:78:9e:79:
74:30:3a:79:59:6a:ff:98:e6:4a:bc:55:76:84:e4:d9:6d:32:
b2:7b:4d:4c:e8:7c:d8:22:67:0e:d9:4c:ca:07:a8:94:fb:29:
cf:d5:63:ee:e1:49:da:44:1c:3c:18:4c:e2:7a:a0:c5:e5:ba:
22:fc:46:70:5e:8e:dc:a0:c0:55:aa:27:90:a9:ce:56:4c:c6:
ef:17:d6:ed:d9:cb:b9:61:5b:8d:bc:97:6e:cb:a9:10:e3:c9:
00:94:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:34 2025 by rpki-client