Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: d/HEFQP0Rl1Yul3WWIMIOP08GEEy+pXggBxpFif5dsI=
Subject key identifier: 2C:F9:EC:FF:55:6E:DC:06:6E:DC:E7:B5:51:95:15:AB:00:11:65:FC
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 0194BC052530BBB3EA92934EDA8DB41C3434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 9ZuULR-c9rvN4U_Qezt0ck4tz_4.roa (hash: NvC05zdhztqBgGL0x7IrDtfQb3ZiSTjs+SHJkAWRFb8=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: xp8hLC+tsa8QajrF2ibmFk665S8b4dqsbmi3+/uaATE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:30:bb:b3:ea:92:93:4e:da:8d:b4:1c:34:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=2cf9ecff556edc066edce7b5519515ab001165fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:16:4f:04:7f:62:fc:cc:35:3c:30:a1:19:
43:86:f9:5d:d4:68:37:39:0f:a5:a4:db:a0:9e:b0:
3d:4f:89:c1:39:9f:6d:5d:f0:aa:d8:95:fb:ab:84:
4d:3d:4e:1c:91:11:5a:bc:d5:d6:f5:90:92:c9:4e:
d0:2e:24:42:8d:c3:2c:ee:07:02:43:0a:77:2c:d7:
b8:cc:97:f9:26:2f:be:60:07:4c:97:50:53:eb:22:
ff:e2:0c:9f:0d:dd:e0:6b:79:60:1f:a7:f4:3d:b6:
c6:95:d4:ac:90:89:9a:70:30:9c:c9:bd:36:aa:96:
1c:03:35:a2:bf:73:c2:4b:65:6e:ee:12:10:08:6e:
d7:27:08:67:6a:06:90:87:30:88:d0:9a:df:fc:e6:
0e:58:2d:33:96:54:50:02:1f:70:dd:4b:2e:05:87:
22:30:00:56:ac:95:ce:bb:93:91:68:45:d5:f4:58:
0f:1e:58:b7:39:e0:2f:0e:25:47:64:3b:ec:c9:68:
d5:04:51:e3:4f:da:3e:19:87:cc:f4:9d:ff:2d:84:
a3:00:c2:41:74:6b:23:3e:88:e8:b6:c8:b2:80:2f:
d8:03:3e:ef:00:b6:b3:52:27:f2:08:ef:c5:de:51:
c6:36:2b:70:5c:85:99:a5:b4:1c:fe:84:24:9f:31:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:EC:FF:55:6E:DC:06:6E:DC:E7:B5:51:95:15:AB:00:11:65:FC
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d0:97:0b:87:1b:e1:9b:b3:c1:95:03:1b:96:c6:12:01:1f:
00:34:59:a9:ea:6b:a6:4f:f1:17:69:31:a2:d1:12:da:ca:09:
b6:69:cd:b9:56:d3:2e:f3:9f:21:3e:70:96:85:a4:e8:ee:22:
88:ba:75:5b:79:ad:e2:a4:1a:cc:4a:bb:c6:69:9b:f4:7a:73:
0b:03:64:06:57:a3:28:20:af:b8:ff:67:fa:2c:00:95:11:36:
f6:1c:14:d7:6d:ff:10:5e:7c:0d:bf:52:de:45:63:a1:b2:9d:
d3:06:ad:6e:1d:b9:e7:98:54:fa:79:20:33:54:7d:3c:2d:d7:
0a:fe:d5:25:67:76:82:a2:f1:d5:92:f4:9b:55:0e:03:fe:7a:
f7:6a:98:ca:75:c9:c7:3e:68:15:13:1a:e9:a4:86:20:e5:36:
a9:38:8c:bd:17:fe:7e:fe:ed:9a:fa:e3:f8:2c:7c:6f:58:9b:
81:6f:54:25:a1:c8:cd:51:e8:89:9b:e7:d3:ec:20:90:11:73:
ea:fb:26:e5:f1:34:9d:d4:94:3f:e5:b5:fe:1e:49:62:5a:26:
5c:c8:6d:c2:c8:49:d6:4b:a3:7f:0b:67:5e:56:d9:f0:a2:1c:
1c:9d:cf:55:2c:0c:1f:d2:fb:24:70:a3:87:f1:bf:46:bb:fd:
0e:49:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:46 2025 by rpki-client