
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: D/AYyeeZL25S7Gu5/Q13jyrpObUdKCgapIp61XPC/H0=
Subject key identifier: 42:92:FB:12:F1:88:E5:1D:28:4F:99:C1:38:45:24:77:09:9C:8D:08
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 0194BC049FE914B20E8DCD95AF9F433EB6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 03AD
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: zsJFM9kxBhbekaSftVpUJTzFXSoliwiLXXRC0zGI7h8=)
2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:e9:14:b2:0e:8d:cd:95:af:9f:43:3e:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=4292fb12f188e51d284f99c138452477099c8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:c7:69:16:b9:a7:83:4b:e5:a4:b9:9d:bb:
2d:46:96:6d:0e:b9:67:44:23:8a:e6:f2:12:0e:50:
1f:6c:cc:4b:fd:de:f4:f3:9b:c2:09:bd:59:3a:77:
c7:dd:24:b6:7b:34:b2:4e:78:b7:be:cc:c3:94:ac:
9f:5b:b9:7b:99:95:36:24:36:e2:58:11:ce:5b:72:
d5:38:d9:2e:db:7f:6b:a9:c1:cc:13:7f:4c:f7:47:
5b:87:1c:5e:99:eb:8c:4f:0f:fe:25:dd:26:cf:a5:
f7:dd:c1:4b:19:9a:8e:c0:7d:ec:31:9e:14:a6:55:
72:b2:19:e6:85:33:4d:bf:a5:9f:1f:d5:e8:08:1d:
b9:73:05:18:40:2f:ad:e6:a9:97:bf:38:ea:90:e7:
1e:60:7a:c4:11:01:a5:14:2d:23:1b:b9:77:3c:af:
28:49:1e:21:76:a8:95:d0:7e:85:a6:d2:de:33:f7:
b6:f5:99:8b:9a:5f:1f:93:ee:98:fa:e2:f3:76:b8:
e7:88:5e:7e:cf:06:83:fc:af:4b:05:50:16:86:b2:
84:0f:5e:c3:1e:0d:1c:95:9f:10:01:06:39:ef:06:
07:4f:e1:5d:dc:1c:c0:cd:70:03:12:26:24:6b:cc:
eb:9a:79:78:21:3f:20:c9:a0:cd:f3:52:c3:e5:51:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:FB:12:F1:88:E5:1D:28:4F:99:C1:38:45:24:77:09:9C:8D:08
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2a:11:f5:e8:06:f4:5d:8a:f5:98:51:0a:36:84:9d:3e:79:
bd:cf:5b:44:a3:d8:32:64:76:2d:ce:a5:5e:d9:fd:5f:e8:29:
82:ef:f1:85:8e:1c:51:51:99:d7:ca:c4:2e:61:6d:de:9e:bd:
3a:bb:7f:59:37:28:d7:01:e4:4e:d5:03:ff:ac:99:f4:7b:45:
7e:b2:a2:1f:81:cb:7b:57:d9:d7:55:e2:60:2e:8d:cb:a8:41:
13:fb:d6:95:2d:70:8f:8f:2b:13:bc:4f:9f:78:ef:18:f8:68:
93:1a:05:94:f4:3c:a3:f0:e0:9e:a9:7e:4c:7f:dd:4b:c1:f8:
90:29:1d:80:a5:90:8c:b6:aa:dc:29:40:23:30:d0:57:a1:dd:
e5:19:2f:70:84:62:a2:1d:33:dc:23:62:1b:69:21:64:f3:39:
bb:5a:ad:4a:46:b7:16:c8:7e:94:91:05:02:79:9f:fa:3f:cf:
b4:81:7a:ed:18:be:1c:d6:e0:33:a6:b5:38:b6:ff:a3:55:a4:
a8:4a:05:83:5c:ed:3b:05:e4:1b:e7:8d:12:9c:e2:9d:95:2b:
56:b5:a4:63:e5:bc:bb:f5:27:40:42:91:dd:76:27:cf:15:c6:
67:37:d4:fa:d1:97:ea:75:29:89:0d:c3:0b:fd:35:55:f5:61:
4c:4f:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:09 2025 by rpki-client