Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File: G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier: s1QrjZGz3Z6KBLonvmejau79xXUy9wTWZZWVH9rKq7c=
Subject key identifier: 83:9C:B5:59:F0:B6:03:AE:E5:F8:91:8F:E1:01:2B:9D:7C:D2:1A:7D
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 0194BC7302A3BDA840C3F5371A25360DFDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number: 10CF
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: O3DewHCG1/vlmcLdJ6wIAO6vE56TxKvmeGyEON4Lk0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:a3:bd:a8:40:c3:f5:37:1a:25:36:0d:fd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=839cb559f0b603aee5f8918fe1012b9d7cd21a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:63:57:a9:83:d4:74:d5:9f:1d:4a:a1:87:
9b:48:2f:3d:6f:2f:76:59:09:3c:f7:d2:b8:00:6c:
3d:92:00:ea:96:ed:1c:92:4e:10:d1:a3:1b:bc:cd:
dd:f1:80:ca:3a:c4:fd:56:83:9f:3d:dd:60:73:55:
51:70:e9:93:7e:48:1b:5d:ea:84:85:57:ab:5e:5f:
89:3e:d1:c2:d9:c5:9e:c2:e2:2c:22:c2:7c:03:00:
42:14:98:4b:36:81:b4:66:1f:08:7c:dc:d6:d0:62:
5d:cb:4d:24:e4:8e:96:db:6e:63:e9:e8:5a:a2:92:
49:1d:dc:00:6d:a1:29:ce:32:78:2a:cb:7f:36:d7:
b5:4f:70:0a:c9:b9:99:70:fe:3d:77:aa:93:06:6a:
4b:7b:09:83:be:7e:0d:56:be:63:b3:e9:ec:ac:1f:
c0:65:a4:e5:17:79:86:b4:f5:b9:27:39:5a:01:1e:
54:0e:2f:0c:24:b2:2c:f2:b6:8e:9d:d9:cf:04:37:
ab:cd:9d:3d:68:61:b2:2d:2c:73:c7:dd:77:e9:b4:
f1:e1:68:1c:67:89:a8:cc:c3:e5:4b:ba:f1:14:3e:
d8:05:b9:cd:ec:17:ae:4a:c5:c5:26:f4:ce:84:da:
91:a3:34:10:77:50:68:ca:36:18:48:fb:4e:b8:61:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:B5:59:F0:B6:03:AE:E5:F8:91:8F:E1:01:2B:9D:7C:D2:1A:7D
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:9a:3f:68:83:19:86:88:45:30:a2:d3:9c:63:31:81:e9:
65:53:20:18:c2:34:02:ae:6a:e9:f0:bd:55:ef:19:e0:6e:f9:
75:ec:85:52:f6:71:65:e0:0a:62:89:1a:03:5c:51:f7:7c:89:
d2:54:54:03:0f:e3:b6:79:a7:37:55:29:18:a0:0d:14:81:a7:
dd:1a:0a:74:70:68:63:18:81:19:a6:b9:41:a6:18:28:1d:0f:
98:f6:17:ba:42:28:d6:65:80:e2:17:78:31:71:25:49:ef:96:
f4:38:79:53:f6:2e:4f:74:31:b4:d6:01:da:32:3b:b8:38:a6:
85:7c:da:06:24:e4:9f:0a:0e:12:f3:da:d3:bc:b5:50:b2:39:
b8:5f:ce:b3:85:8f:2d:a5:f2:6b:65:ab:b4:dd:ab:ea:a0:2d:
60:fa:e0:57:71:f2:c7:7e:9c:4c:c4:f5:a8:7a:98:68:dd:e6:
10:cc:11:18:b2:27:50:91:dc:91:c5:83:10:a5:71:ae:d0:45:
90:4f:19:4e:34:bc:c5:da:91:84:4b:76:9f:84:1a:d0:da:f5:
72:26:b8:78:ff:d4:4b:fa:ce:72:12:6c:7a:47:9e:e7:10:f0:
36:41:39:be:25:76:85:8a:b9:d8:1f:10:17:0e:64:68:42:d5:
b0:c7:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:27 2025 by rpki-client