Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: JIrnPueASP1WLjMj7xMuDpEqju7Xt1BFvs5uJF40wrA=
Subject key identifier: DE:54:D5:80:0E:D5:70:83:EF:76:4A:F0:18:B7:97:1B:52:5C:51:68
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 0194BC3C5DDC904AB3EB3FC37702C6B7B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 10AE
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: FpKpXAvwQ5eTmnpDjAybF20U0r8.roa (hash: rDfC3vqrlhOzRgHniKHIntRfI5mc/vDS+DS8eZGWJuQ=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: 9K9ghwmy8LaMTnuAvSIrMSpZWyJfzGFxgqkPsWFL4Bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:dc:90:4a:b3:eb:3f:c3:77:02:c6:b7:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=de54d5800ed57083ef764af018b7971b525c5168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:24:44:10:29:4c:c4:cf:51:1b:0e:d2:b2:
83:71:bb:99:49:25:1a:84:63:5d:91:31:3d:91:78:
3d:9f:f0:2a:f2:e1:d5:9b:2d:e5:53:3b:35:f2:5e:
e2:2a:2b:e6:31:9e:20:ff:74:3b:af:b1:1f:7e:a9:
f1:be:96:81:42:a2:20:53:2d:9d:67:e4:03:e8:9a:
51:de:79:92:8f:eb:f1:dd:ef:93:17:ac:c5:73:50:
91:e0:5f:bf:50:02:28:a6:05:45:b2:97:17:71:2f:
6d:46:4c:06:71:3a:8f:6c:a4:18:a6:1b:81:c3:97:
28:db:10:9d:87:39:5b:ce:a2:73:eb:31:3e:4b:4e:
e5:eb:6a:f6:b4:ae:1e:f8:2e:00:a9:38:cc:b7:9f:
f2:d3:8c:b6:eb:5b:e5:a2:c4:16:5a:b4:e9:36:b7:
e3:0e:c2:ba:10:5d:73:10:82:b4:47:d1:78:4e:fa:
f4:e4:b4:09:3a:c3:dc:fe:4b:36:f0:db:63:f7:8f:
f8:95:29:62:87:86:0c:ec:22:f0:7f:fb:ae:4f:ca:
4a:ce:30:b2:f6:0e:aa:e3:7e:5d:a6:d4:55:2b:dd:
64:a7:36:d2:69:b8:8d:50:ed:4f:f2:b8:7a:47:d0:
f0:4d:78:be:13:94:69:b8:1f:24:d5:66:d8:ba:bc:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:D5:80:0E:D5:70:83:EF:76:4A:F0:18:B7:97:1B:52:5C:51:68
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:e1:76:89:25:7e:56:36:8d:a6:35:58:14:93:07:e8:2d:
4c:86:35:2b:45:01:24:b5:29:ae:06:fb:e1:f0:cc:31:82:39:
ec:50:7e:3d:2e:59:1d:66:a4:50:e7:73:b2:15:79:9f:9f:5c:
c8:6f:1a:3d:e0:a5:d1:ee:ca:93:b3:85:48:01:4e:1f:8b:14:
4f:25:7e:b3:3c:09:6a:0f:75:41:de:a9:66:ff:a3:ee:af:90:
8a:b3:26:ae:bd:1c:96:8c:ec:93:99:cd:0c:05:f9:9a:c2:78:
77:2d:85:21:a2:89:37:70:b5:fa:f4:92:7c:98:85:f7:b9:68:
b1:dc:1e:84:4f:a0:b6:cf:1c:7d:2d:cf:3d:9b:7b:5d:bf:0a:
18:7e:79:4a:87:18:3b:dd:9b:72:77:90:eb:a2:4e:d1:f6:1e:
f4:9a:7d:bc:de:c4:c5:0d:c0:7c:40:db:ff:52:5c:01:7c:74:
c3:6a:1a:d6:ac:04:7e:0b:cc:f1:8f:41:b8:92:bb:cf:ec:ca:
9e:24:25:c0:80:d5:3b:50:56:af:5e:00:09:f6:4a:20:4e:b2:
21:3e:76:da:1c:2a:c7:1f:dd:1b:0a:6a:f8:ba:40:eb:89:77:
2d:3c:46:89:2b:93:75:24:55:72:ff:7c:ca:4b:0c:56:62:c0:
13:92:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:49 2025 by rpki-client