Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
File: Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft (raw, json)
Hash identifier: yJ3RPMMNyh/xgbfyGiFBJr6talC2JBwxVexOEomu5k4=
Subject key identifier: 31:37:85:C8:F0:6F:4C:36:22:25:DC:AA:6B:3A:3C:20:72:C2:28:0B
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 0194BC3C357DDCF5C15ECEE5A684A0E2A940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
Manifest number: 12C4
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl (hash: eTiiIYidnv2Uvw5MVuIAQt4ZVw9CW7Py8Ib2knTC/bY=)
2: zMf8rLLySKjPSPZ8s-ZIz2q25OU.roa (hash: VJ+YYFZYZSo5PYkWSZhl4wZdJBhoCHORhk0CDA+bcUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:7d:dc:f5:c1:5e:ce:e5:a6:84:a0:e2:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=313785c8f06f4c362225dcaa6b3a3c2072c2280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:5f:da:95:9e:61:f5:14:e8:3a:3b:03:e1:
15:88:67:23:d7:04:f0:64:c2:d8:59:0b:6e:cd:82:
e5:da:d4:ab:fb:d0:02:bb:89:12:8e:d1:d2:7e:bb:
27:d5:ce:96:27:43:49:58:b2:bf:c8:ff:56:39:a1:
6f:37:27:1b:8d:06:a2:16:d0:22:6b:0c:bb:79:5e:
95:49:45:37:bb:33:1d:08:64:b8:c6:96:6f:da:92:
91:b4:c1:6e:b1:8e:00:07:b9:ef:e2:e3:9e:81:ef:
5a:b6:ef:ab:8a:29:cb:7e:2c:f9:7e:79:2d:dc:b8:
55:82:56:ab:e4:34:83:6d:0b:ff:78:e4:37:ee:69:
97:6e:b0:c0:e5:8a:3b:7a:b8:71:97:26:b0:5b:e7:
ca:41:35:38:73:0a:33:61:96:0f:ea:50:55:97:89:
81:11:69:fe:bc:66:ab:0f:97:9d:d9:7a:4e:67:0c:
72:3c:3a:ad:21:f1:de:be:d6:25:7d:4b:25:59:2a:
4b:be:89:1d:fb:a9:79:17:96:9e:88:95:5b:18:c7:
a2:39:16:b8:82:6d:c9:c3:fa:5a:a4:5f:8c:cf:6b:
5d:99:c8:0c:16:db:31:ba:14:28:62:b4:e0:3f:a6:
ee:5e:26:7b:b5:0a:68:cf:1c:0f:eb:d0:cc:21:c7:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:85:C8:F0:6F:4C:36:22:25:DC:AA:6B:3A:3C:20:72:C2:28:0B
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:9a:96:a0:66:4e:06:e5:b1:18:98:67:da:27:d7:11:e8:
51:a7:d8:03:8f:3b:66:39:0c:12:09:a6:62:e4:56:fd:57:17:
bc:41:97:ad:bb:8f:9f:d0:5d:f6:0f:6b:0f:75:d9:b2:52:83:
9c:f6:67:3a:84:54:bd:eb:60:0a:11:6e:dc:c7:70:a1:8d:28:
45:ab:34:78:e9:b3:2c:58:8a:38:42:0f:3f:5f:23:70:71:91:
04:0c:26:8e:5c:a0:b9:7b:5b:70:89:0a:5c:04:c5:b3:c7:b3:
5b:c1:fa:0c:8f:c5:1a:0b:99:11:72:5a:b7:b2:75:a6:5d:f2:
07:7e:cf:2a:ef:26:72:02:e6:e6:a2:b4:19:65:25:97:b5:b3:
8d:5a:41:8a:b9:15:53:e8:de:a9:02:f6:86:e5:43:52:65:63:
7a:5a:93:03:a0:2a:94:93:b5:8e:9a:77:83:f5:26:f3:52:5b:
16:90:d4:87:1e:75:46:ed:bd:51:94:bd:d0:fd:4b:6a:d2:13:
6f:16:6a:c3:a9:80:87:13:26:be:83:c3:50:da:f5:6d:95:ad:
20:30:77:78:f4:85:5e:98:1b:23:77:06:2a:34:28:67:21:b5:
d2:fa:cc:64:54:a5:43:aa:03:f8:5f:34:65:93:77:1a:8e:1b:
42:cb:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:11 2025 by rpki-client