Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: 15EWfMvgzPOMN36Iz2uM5oIv55KVBIuf+G9la0YIvEs=
Subject key identifier: 21:EA:D4:72:38:C5:4F:37:A0:B0:7B:EF:5A:18:31:64:96:07:9D:A3
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 0194BC72C906343EC29D74F3E2046D96BE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: 9WrMTaVAJ5blcaqYLsG1UYG45jr0S74m14rwi1eaiTg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:06:34:3e:c2:9d:74:f3:e2:04:6d:96:be:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=21ead47238c54f37a0b07bef5a18316496079da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:00:56:de:95:cf:97:25:f6:6e:8f:08:3b:
94:b2:39:0a:ab:6a:73:18:74:c9:13:ca:03:24:d2:
49:eb:56:c0:88:8f:61:af:cc:b4:3e:13:bd:d4:a4:
f2:ec:34:8e:6d:29:91:9d:61:f1:90:be:f7:02:75:
c0:e2:58:37:1b:8c:3f:0b:3c:47:7f:99:37:d9:5f:
53:34:87:ea:b2:d0:4b:6f:de:c7:30:e9:22:b3:51:
6c:5b:7d:d6:3c:a3:74:a2:04:db:10:28:23:66:75:
a4:2b:b9:57:67:b1:03:fc:4e:27:c0:1b:b8:7a:ef:
10:0a:44:51:24:7c:73:db:32:2e:20:f1:2f:d9:3f:
31:1a:b2:0b:52:3d:21:2d:a2:bc:51:f0:86:f4:c4:
7f:34:0e:2a:cb:19:b6:d5:2f:e6:85:ff:4f:93:5e:
c7:06:0a:b3:9d:ee:cf:77:96:f3:d8:ce:63:84:ad:
2b:27:46:6b:4e:79:82:42:83:a1:23:78:1c:d8:cb:
6f:01:3d:c6:07:e4:23:75:31:ea:47:05:37:b7:84:
75:b6:1e:7b:8a:9d:f4:d2:3b:50:54:9b:68:d4:f9:
7a:8c:7f:17:10:a7:f8:6f:c9:03:78:f3:bb:a6:78:
93:a1:08:35:44:51:c5:81:a6:14:f9:6c:05:37:91:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:D4:72:38:C5:4F:37:A0:B0:7B:EF:5A:18:31:64:96:07:9D:A3
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:95:45:c6:45:97:04:7b:7f:68:63:6c:b6:43:a3:87:96:e5:
91:f0:7a:84:16:80:9f:28:26:94:74:ef:96:e5:ae:b9:53:30:
84:fc:1b:c6:df:7b:e9:2f:22:17:1c:66:5a:12:39:c4:6f:f1:
c1:a5:7d:93:d9:03:7f:82:a4:b5:41:ee:0c:51:c1:20:56:7e:
52:5f:60:ea:0b:32:1b:7b:57:bb:00:a0:66:54:a7:e7:24:98:
b2:02:97:4a:a1:24:7c:67:de:9c:7e:a6:e2:85:86:62:ef:5b:
59:3a:2d:66:70:1f:8c:f1:8b:5e:7b:59:91:a0:17:a3:28:d6:
85:e1:7a:56:ef:0c:fa:90:f8:e0:06:69:fc:64:ac:e8:53:bd:
ba:b2:db:ac:61:d7:a5:f4:50:cf:cf:68:2b:18:53:0c:18:17:
2c:cf:4c:5d:41:29:02:5d:93:ab:ef:11:18:06:cd:b4:c4:2f:
99:88:b1:b0:56:4a:27:ce:49:68:12:d3:62:8d:b4:ac:53:c3:
c3:37:aa:9d:f1:4f:13:27:bb:25:f4:70:92:b2:a1:9c:81:d8:
22:45:84:d9:86:73:5f:36:c8:db:7a:1e:03:1d:34:51:cc:57:
5c:3f:50:20:28:ad:b3:25:52:d3:92:87:36:4d:8c:43:f1:96:
1f:92:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:09 2025 by rpki-client