Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: 4OD+fv9r5ePH54scl6SCQCgESuqDedTFmOG/4el50Ws=
Subject key identifier: 0A:B4:27:21:4E:83:D3:7D:94:44:45:51:BE:7D:21:F2:0F:3B:F8:AD
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 0194BC3C5EAC74B3B74AE02158B0FA766AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 0F5D
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: Db2mHELjbKafmmak8MMgrVJ9q6s.roa (hash: 0wtkW6LztiP4K0i9kH54ddtGh234DUMSdImFiKp9l5M=)
2: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: +BJQjP3o56ohyOFecARGyX/8z24zSkGCd4XrSA/GX6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:ac:74:b3:b7:4a:e0:21:58:b0:fa:76:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=0ab427214e83d37d94444551be7d21f20f3bf8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:cd:b9:1c:6c:52:ce:95:ea:af:11:1d:33:
12:77:f3:9a:98:aa:22:0d:22:b8:90:cc:de:d4:8c:
2f:a5:24:e2:0a:36:21:af:07:e3:d5:77:89:14:41:
bb:d6:fe:f1:8a:ca:0b:7c:4d:81:08:7a:eb:c1:25:
a1:91:40:47:c5:c4:3d:35:0d:ff:b2:c6:89:3e:7a:
fb:1c:ee:0b:7b:91:46:67:33:fd:ad:ee:f7:08:90:
9d:27:e7:52:19:65:55:bf:73:f5:e3:82:10:3e:34:
40:92:b5:c2:dd:aa:49:2f:57:06:19:dc:1f:e7:73:
a1:2a:b6:b4:a1:da:44:5a:79:89:02:b8:6c:d0:bd:
81:73:41:37:da:7b:76:8a:e2:3d:1c:a6:f6:c9:8d:
d3:b6:93:6a:28:cf:c0:a7:da:04:e2:e4:1e:9a:ea:
cf:92:04:85:65:ee:fa:65:b2:15:0b:20:f3:06:ae:
27:6f:8f:58:af:c3:18:f3:d5:a8:cd:77:65:51:5f:
3d:c5:3c:85:f8:4d:a5:1b:7e:01:48:5d:0f:72:cf:
57:3d:67:12:fe:e0:26:6d:ce:f5:85:9d:10:bf:ac:
e5:73:3f:50:32:e4:bf:a5:4e:32:7b:fb:bd:71:7f:
64:e9:95:e2:99:ee:51:80:91:e6:4b:f3:38:28:19:
bf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:27:21:4E:83:D3:7D:94:44:45:51:BE:7D:21:F2:0F:3B:F8:AD
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6a:8a:65:8d:14:9a:28:7a:c0:40:49:be:bc:b6:b5:12:97:
e1:ea:f8:f4:d8:b9:84:94:72:a8:61:da:4e:e1:b6:d2:fd:a9:
85:60:1f:fc:8b:54:56:d2:e7:16:3e:fd:ad:65:8b:a8:e0:42:
4f:af:45:80:ce:bd:1e:69:77:66:02:83:d2:48:ba:1e:b0:8e:
f4:fc:41:d3:45:67:b9:d6:c9:b4:2b:c2:95:f4:e3:10:41:d1:
df:31:d0:cb:07:be:ac:78:5c:ac:ed:e9:42:6f:c5:2c:db:8f:
b1:3a:a9:cb:94:73:a7:0c:da:8a:7c:b9:66:2d:13:48:11:6b:
ae:77:f5:9a:d0:8d:28:3c:b3:67:1d:e8:e3:cc:ec:ad:8e:ab:
37:18:57:a5:f1:98:1d:d6:63:25:ed:cb:36:c2:a1:5c:00:75:
2b:ac:d6:7f:ae:86:54:b7:74:4b:d3:ed:17:fd:c0:c7:e5:18:
d9:f4:5b:e3:b8:36:f8:f4:1d:85:26:ae:0b:e1:78:1f:1b:65:
55:1c:19:15:34:a1:eb:29:48:3a:4e:f6:34:03:c7:ff:94:1d:
29:a8:01:e0:7c:f8:99:18:21:f6:64:49:cd:46:2b:01:45:7c:
be:b0:ce:a5:34:c9:1b:81:8b:0b:3d:f1:a4:51:dc:86:5a:9b:
f2:27:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client