
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier: aducrUNI0yDZufDFCPc8e1c1vBxiJ28mx7o9UuCXkrw=
Subject key identifier: D9:FD:A2:98:74:5D:AD:8D:94:D1:8B:A0:B3:A5:9A:D9:91:6B:4E:01
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial: 0194BD4E378165932534AFF7A015E9226F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number: 1304
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: VcN4hIGlkdW+LTsPiAWwM9OqM+TQgk1WHHOl0Sp7R7o=)
3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:81:65:93:25:34:af:f7:a0:15:e9:22:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=d9fda298745dad8d94d18ba0b3a59ad9916b4e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:95:be:16:c6:65:76:63:98:10:69:c2:16:
33:af:f1:67:de:05:d1:15:a7:bc:60:0a:f3:c8:32:
d2:45:bb:c1:91:8b:81:a8:46:3b:66:d4:75:71:3a:
c2:04:0c:76:65:16:06:95:4f:17:85:d6:a7:60:45:
7e:06:d4:a5:b6:02:ad:bb:1e:9d:b8:de:ad:8a:7f:
70:b4:55:d9:f5:21:4e:c7:5e:f4:86:ba:88:6b:60:
ea:72:12:2a:da:73:3a:d3:c4:5d:f2:68:03:e7:c7:
de:19:6e:e6:7a:b8:5b:fd:49:45:60:35:bc:3b:23:
b9:6d:a9:57:49:c4:bd:1f:14:b6:2f:88:42:6d:ee:
79:da:a5:c8:65:3d:ff:39:c9:f9:3d:97:70:dd:3d:
0e:35:92:7b:6d:4b:2f:22:2e:ab:bb:8f:ab:e8:63:
c6:11:ce:9b:41:77:80:12:64:4d:0b:b4:b1:66:a8:
53:af:5c:30:4e:6c:9f:21:f7:40:c6:40:ca:09:27:
25:22:94:29:0c:d1:97:39:fa:51:90:5a:86:b7:49:
1c:25:22:26:96:fe:5a:12:d1:a5:16:13:28:cb:e9:
d6:87:88:29:ae:06:9b:d9:b5:e7:51:9f:97:76:9c:
2d:49:f9:82:5c:a0:38:84:b9:7d:4a:b6:fa:a3:d9:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FD:A2:98:74:5D:AD:8D:94:D1:8B:A0:B3:A5:9A:D9:91:6B:4E:01
X509v3 Authority Key Identifier:
keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:90:36:b4:9e:cd:16:a0:6f:2b:40:72:6f:a8:91:be:c8:c0:
d4:63:84:e8:05:5f:2c:12:1d:8d:a8:8a:70:1c:02:5f:bc:c9:
2f:db:42:5a:33:1c:5b:e0:37:44:32:7d:f6:76:10:c2:4c:7d:
1d:b7:2a:53:da:d2:18:9a:40:8f:0d:39:95:af:c2:f7:86:77:
3e:99:42:7e:d4:52:1f:4e:ba:36:1d:3b:02:ce:bf:1f:f3:bd:
98:c1:09:f8:e4:12:47:e4:93:89:13:a7:05:5b:98:97:1e:1c:
0d:9c:c8:0d:5d:8a:62:ae:14:da:d2:c6:f0:c4:93:43:8f:8c:
32:5f:75:18:e6:fb:dc:b9:3d:62:24:c4:64:9f:9e:67:ef:eb:
71:1f:7b:67:60:24:d3:a2:15:ee:2b:da:7b:b7:82:62:9c:9b:
e6:42:7f:36:70:3c:17:9c:f6:d2:aa:6a:64:e3:10:dc:68:d9:
03:e3:a6:c2:67:0f:30:e1:93:df:4f:54:53:5a:bc:81:f3:e2:
a5:4d:37:90:c9:3a:30:ed:96:38:a8:78:0d:16:ed:80:81:3f:
9f:69:03:e9:a4:30:6d:a3:07:0a:ba:36:4f:3b:08:f4:61:ce:
54:38:6f:62:29:9b:ed:55:56:a8:b6:47:71:a9:34:30:6a:8d:
25:f1:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:30:09 2025 by rpki-client