Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: CfMVn69qWzhM8e+599WObtNV9NAx5a0kJUhExd7+4E8=
Subject key identifier: 29:39:F4:6C:01:5F:2D:79:C2:B9:09:90:56:26:82:F5:96:25:B7:4C
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 0194BC732A7197296C4F0B241219A7BA6696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0D90
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: J8fmCT8vtbRoJcMy+S48VHzdLjdxULpA1HYF38U0+Fw=)
2: q_rL_wFzPAM2YYi3BD5DV-movBM.roa (hash: /Sn84qQYAJwMH4nFNeAxdZuxTOPDKe5EpdIqdCovILg=)
3: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (hash: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2a:71:97:29:6c:4f:0b:24:12:19:a7:ba:66:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=2939f46c015f2d79c2b90990562682f59625b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:1f:8c:15:53:4b:f5:b6:23:3d:75:88:42:
51:58:87:0c:9f:ad:ed:25:b7:49:e7:74:42:48:b3:
7f:e5:36:ab:86:71:c4:fc:11:7e:af:71:80:6d:d0:
87:e4:9f:74:f6:34:a2:59:2d:b2:89:42:60:26:d0:
c1:e1:80:57:95:d3:db:6d:4f:01:40:66:98:b4:8a:
c0:a2:17:e1:d1:0f:8c:44:58:2e:02:18:62:11:ef:
48:80:8a:56:bc:e8:c5:0c:35:52:e5:75:a4:08:77:
81:83:5d:39:b1:1e:5a:08:65:9b:73:51:74:c4:2c:
07:f0:f7:55:46:71:fb:67:6a:a1:78:f2:92:3b:10:
5e:24:5a:33:69:64:bc:96:99:95:57:65:07:7a:3e:
4d:92:56:d8:a9:96:ca:1d:09:f5:fb:f3:fc:28:46:
d8:e0:8b:ca:7b:d4:8c:99:d8:6b:52:10:de:52:37:
5f:7c:c3:4e:c3:94:af:64:23:b2:24:2e:38:59:7e:
d8:1d:69:69:09:d6:4a:78:47:47:a5:b9:40:f8:12:
08:77:37:aa:65:72:9b:0e:dc:9b:d1:bf:69:7f:09:
e8:6f:8d:82:38:8d:cb:55:ac:0c:1d:49:9c:e0:2c:
e4:41:a8:fb:06:c6:08:47:12:0a:ec:dd:a8:cf:b4:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:F4:6C:01:5F:2D:79:C2:B9:09:90:56:26:82:F5:96:25:B7:4C
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:48:5e:67:81:a2:86:16:95:ff:24:0f:2f:71:fc:ee:f1:
e9:1a:a4:d9:c4:f4:1f:39:a4:0a:38:30:64:a4:58:31:69:5c:
8e:a5:1c:d8:42:0a:a5:2b:03:94:20:19:ad:df:0d:37:c6:28:
3d:e7:03:25:fb:a8:05:c8:53:a4:20:1d:6c:a7:45:49:30:9c:
b3:66:bc:e9:c9:95:f4:aa:d3:5e:83:02:03:52:65:08:88:4c:
67:44:06:33:0a:2f:c8:16:1f:f9:a6:c1:1d:36:50:65:33:54:
03:be:00:b9:fb:fc:39:9c:af:68:68:1b:1e:b9:dd:93:1d:b6:
64:ec:ca:34:8d:10:6c:a8:70:1c:a8:a4:8d:12:b2:f1:3f:00:
65:a8:29:07:3e:1f:60:a8:b2:6e:4c:4f:bb:9b:d4:51:5f:90:
87:42:7c:65:10:50:08:b3:bc:ae:81:c6:00:7f:ab:09:2e:ff:
3d:9b:45:80:9d:da:13:90:fe:e2:14:9d:6d:a4:3d:c7:9c:34:
a6:81:69:1e:f8:90:d4:d8:41:ba:d1:62:01:f9:db:48:b9:3a:
cd:c8:95:38:98:31:7d:60:b6:fd:71:e8:f8:12:88:44:7b:75:
f5:06:52:f3:d8:63:50:96:ba:3a:56:81:ab:85:11:e0:da:26:
29:8d:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client