Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
File: g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft (raw, json)
Hash identifier: KHzQUfG5szAEJ+9gSUHuXyd3HVXo+vGxW9MrrtnXNP4=
Subject key identifier: 48:BC:9C:1E:C4:CA:5A:51:D2:C4:53:B8:AB:56:45:9E:5A:EB:1D:42
Authority key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Certificate issuer: /CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Certificate serial: 0194BD8547F519938214189F8CFE5FB2AA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
Manifest number: 0772
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 6vflPkcFNotBIGSfCCvvH-BEh_M.roa (hash: OMEPjBynXI9hQwtnHqAfKkpISBObb0jJod/mhOotVEo=)
2: g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl (hash: ezTxv8uUXwIguvgDSaMDyOvRjgimqwmpVNv9xDgd5+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:f5:19:93:82:14:18:9f:8c:fe:5f:b2:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=48bc9c1ec4ca5a51d2c453b8ab56459e5aeb1d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f8:3d:a5:c1:5a:d7:c5:0f:31:8c:fd:e8:57:
e4:86:53:fb:a7:6d:18:c0:9a:1b:a9:bb:82:b7:77:
33:c8:e5:ae:1b:d4:39:f6:b8:db:f4:d9:6c:c4:cf:
2c:9a:7c:c9:1a:1d:de:2d:cd:b2:6d:07:ac:54:54:
4f:ef:18:e2:5a:c0:92:4b:2e:2d:99:d7:49:74:d3:
3b:d4:aa:42:ec:3c:f9:44:dc:bb:57:5c:f8:c2:aa:
4c:94:fa:f4:75:27:a1:4e:3f:72:25:60:58:b6:f7:
42:29:65:20:25:ed:09:d1:b3:fa:e6:81:82:6e:f7:
da:45:73:9a:ea:29:c8:4b:d1:54:b9:9d:03:21:48:
3f:33:66:2e:13:d9:29:b4:8c:e6:76:20:c2:15:56:
56:c8:14:cd:41:d1:8a:e6:41:f3:e5:93:59:dd:9a:
bd:d0:c4:99:ff:01:81:d2:0a:c4:20:72:38:f1:df:
54:d7:4b:9a:32:1f:b7:0b:c5:c7:d7:e5:e3:97:73:
62:e9:53:6b:48:04:9b:e7:15:72:f9:f9:5c:fa:74:
ac:6f:33:d2:4a:61:9a:2e:1b:49:48:e9:d4:0d:8c:
bc:b7:a5:01:78:75:02:65:bc:62:50:c4:81:40:86:
45:32:05:06:93:60:bb:5f:55:1e:db:da:08:a2:4c:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:9C:1E:C4:CA:5A:51:D2:C4:53:B8:AB:56:45:9E:5A:EB:1D:42
X509v3 Authority Key Identifier:
keyid:83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:63:de:4c:c9:34:aa:1c:67:88:7b:d6:87:0f:be:10:c5:10:
32:a0:60:7a:f1:fb:7d:04:f9:0b:48:73:94:80:50:5c:8d:8c:
f9:76:70:96:6a:dc:11:f6:b5:ec:7b:2c:6b:98:a2:04:b8:0c:
8c:0d:e0:96:4f:15:ab:55:20:4b:b1:4f:c9:a8:76:e3:c0:2f:
87:44:f8:8d:e8:a7:29:69:3a:3c:e2:69:3f:5a:e8:a8:c4:90:
dd:d5:fd:0a:25:37:81:d9:68:46:c0:97:77:6c:6d:6f:8b:78:
e6:e7:e9:e5:82:03:8d:36:56:cc:80:25:d5:d6:28:da:82:5c:
1e:62:82:12:3e:80:6f:6c:1c:1b:23:f4:f0:ad:6a:76:09:b5:
67:f6:72:fa:a1:15:1c:34:d0:58:6c:a7:ee:80:52:6a:11:c3:
8f:be:a4:56:01:d0:84:34:22:52:69:b4:44:a0:ef:74:f7:0d:
43:62:ab:84:5d:30:8f:f4:eb:56:28:fb:3c:71:be:f1:13:4c:
5a:b5:b7:8c:fc:f5:59:f5:ee:46:65:55:ba:96:08:1b:22:c2:
3f:a8:76:3c:c5:6b:fe:c1:c8:55:51:5f:60:3c:d1:7d:8d:85:
82:73:d7:cb:b6:74:4e:a8:f9:29:8f:8e:59:c7:ab:e1:40:77:
d9:a0:a4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:22 2025 by rpki-client