Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: k7iM6N9rS/8gi6UbwwSB0jSC99Bz3T4Zdnwq+/wd8V4=
Subject key identifier: 12:04:61:6C:2E:49:4E:BF:68:55:B4:B4:35:9F:92:B9:E2:CA:76:BD
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0194BBCE090E1123483B9790BA162BF26D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: VrviB5aTsbO6PIx70TAvIcZbbfm6ke26xtGJzmO5Jso=)
3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:0e:11:23:48:3b:97:90:ba:16:2b:f2:6d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=1204616c2e494ebf6855b4b4359f92b9e2ca76bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:40:81:32:a4:01:39:46:86:98:7f:e0:0d:
fb:e6:24:ce:b4:0a:54:02:87:2b:ef:bd:48:f3:57:
ac:5c:bb:29:03:de:42:63:c8:56:a4:d8:af:89:24:
41:f9:85:13:f4:ed:81:85:1b:58:98:8e:3d:73:ef:
ef:d4:05:bc:c0:92:d6:d8:57:81:ca:09:a6:14:09:
4e:d6:d3:7b:50:2a:26:73:26:2d:fa:c1:3a:50:06:
0b:f7:3d:8a:7b:b9:02:39:9f:76:00:fa:2d:0d:f5:
67:0b:2f:d1:ad:8b:5e:86:af:9f:6a:69:dc:4c:b2:
ce:18:51:2a:24:72:a5:1e:32:42:ca:36:35:09:cf:
ae:a5:45:1a:f0:82:63:5b:cc:b2:08:43:74:0a:bc:
62:c5:cc:06:16:98:bb:c2:6e:02:8b:0f:e5:51:29:
1b:8d:87:ce:35:8d:cd:40:91:55:f5:c1:c9:cd:c9:
f6:52:93:d5:db:40:7c:31:a0:aa:fc:c0:f9:ee:c9:
aa:72:85:2b:e6:87:45:fc:1c:4e:19:70:b1:48:ba:
90:1c:6d:0a:2c:5e:a7:3c:9a:f3:d8:21:88:13:33:
ef:95:b5:4e:5e:c2:f8:f1:66:a0:e6:f8:86:5f:87:
2e:1c:5e:40:ae:a6:2f:d8:46:92:1b:9d:48:00:aa:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:61:6C:2E:49:4E:BF:68:55:B4:B4:35:9F:92:B9:E2:CA:76:BD
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:04:17:f5:89:97:dd:59:7b:15:fa:f1:74:73:8c:88:ec:
c5:63:56:2a:82:75:fc:a1:9d:2a:88:04:39:70:02:47:84:51:
fe:a6:86:54:16:75:c2:00:c5:68:c8:01:07:a2:d5:77:50:be:
56:ff:88:1d:2e:57:29:6b:c5:00:da:16:11:3b:5f:29:c1:89:
1d:87:ae:8e:03:36:9d:f4:0c:49:83:99:5d:a7:62:08:c4:80:
95:b5:c2:dd:30:8c:86:f0:8c:94:e0:c2:b2:90:9e:1a:91:dc:
0c:07:22:dd:b3:e2:d2:4a:aa:43:c7:b2:48:dc:53:5b:d6:f9:
ee:f7:31:bb:13:6a:d5:13:62:78:8d:8d:44:84:85:1a:75:d6:
86:e1:ac:0f:6b:89:0a:c8:33:a1:c9:97:54:5e:a4:ae:35:8b:
1c:8e:2e:2e:e0:b9:9b:f3:af:e2:31:3a:3f:b5:35:41:12:27:
a1:68:a5:2b:6e:15:13:4a:76:55:e5:67:50:b2:9a:f6:09:a9:
b7:9c:7a:28:c4:17:b4:48:dd:a9:1a:f9:c7:62:14:d3:6b:06:
75:50:b8:6f:20:49:85:db:84:13:96:f2:c9:3c:ab:f6:20:ad:
19:2c:ff:ee:ae:04:4b:25:ed:18:a0:b0:92:58:52:93:3a:aa:
9b:f7:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:23 2025 by rpki-client