Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier: 8vLug1BhrylPyL9YbRWewyHoJH777pS/YM0x+5R+BRk=
Subject key identifier: 0A:66:86:DA:44:E3:AB:6E:59:85:6C:CD:40:05:FA:7A:1F:4C:2C:C7
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 0194BC04DCD7CD138E26A5AF6FB162B06E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number: 07C9
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: CK5OwOiGaEqVwo-YKnguP745KMY.roa (hash: A/BEklrCD+whYVqSqE4ctRcYYnzQ35ctbU126Ujt5AA=)
2: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: LPIdPEfxz446RNBGNxoD3+/LzuszIItPDF+RSW8SZO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:d7:cd:13:8e:26:a5:af:6f:b1:62:b0:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=0a6686da44e3ab6e59856ccd4005fa7a1f4c2cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:15:7e:09:14:ae:93:07:83:d1:f7:72:46:
42:be:38:50:6c:b1:d4:73:7d:0c:d2:6c:b1:cd:80:
e8:90:86:5f:46:e6:08:ee:79:42:ad:38:2e:fb:db:
36:b0:9d:7f:21:11:d6:1a:06:10:f3:89:62:94:69:
7c:27:d8:1d:81:29:11:4a:f6:58:56:d8:29:8e:ab:
5c:e4:e2:a2:4e:d6:b1:69:2e:29:56:c2:df:c1:2f:
bc:a5:c1:95:a8:3a:0c:2c:50:0a:47:47:c6:5f:b4:
56:b3:6c:c8:f1:8b:4e:e2:30:3b:77:c9:88:56:6e:
80:b5:4a:4b:ce:88:82:16:33:81:7e:63:d5:fc:9e:
67:69:39:b8:66:b3:79:95:17:0c:82:1b:ea:32:1c:
18:95:1b:c8:1a:65:b1:cf:4d:a4:44:3f:4e:91:5d:
2c:3b:3c:7a:21:e3:e2:0d:09:07:ce:7d:5c:81:dd:
05:43:b6:b4:f0:14:7f:f8:8c:2e:2e:82:62:41:6c:
ff:5b:82:b0:fa:a5:9b:49:2f:ed:8c:3e:b0:2b:ef:
c3:06:78:da:80:81:79:7f:94:c5:13:e2:7c:18:8a:
67:46:b9:c0:7d:38:d3:8e:d5:8e:10:91:20:04:0b:
c4:59:f2:cd:27:17:37:f4:b4:7f:73:a8:e9:74:43:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:86:DA:44:E3:AB:6E:59:85:6C:CD:40:05:FA:7A:1F:4C:2C:C7
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:50:9d:7d:68:a6:0b:8e:e8:1b:70:26:b8:f7:29:c2:75:f0:
8b:e1:a9:b8:11:b5:d6:dc:98:49:bb:a7:05:2e:8a:3a:9f:64:
53:84:39:23:45:bd:a0:b6:13:0e:d1:ed:ab:e3:d9:12:28:f1:
2b:d3:80:84:28:5d:cb:83:0d:df:f6:f4:da:a8:49:83:9b:d1:
f9:8a:4a:cd:ed:85:94:39:76:7a:21:a9:7a:5c:40:7b:73:28:
37:66:3b:07:67:3a:e6:36:3d:99:d7:ec:30:18:7e:9e:02:ed:
12:24:43:78:ec:68:f4:42:ef:be:b1:a5:2d:a9:de:82:65:f3:
a2:de:12:97:30:f9:b8:2b:2a:23:6a:34:eb:2e:90:e4:61:60:
75:d9:16:1e:a4:1b:fa:c7:56:92:bf:0c:46:03:8b:d9:39:84:
80:62:05:a4:6f:81:60:2a:df:7b:59:c9:19:cc:1e:b5:84:bd:
3c:02:6c:7c:70:02:5f:44:d9:0f:44:0b:7a:49:b3:11:30:95:
57:71:78:25:6b:6a:43:fb:f1:2c:72:59:a7:9d:90:34:f2:5f:
10:bd:9f:71:7e:70:4f:06:6f:ca:23:cc:44:ad:d8:b8:7f:c3:
bd:37:42:81:24:c7:46:6a:de:3a:62:45:65:22:1a:a8:f6:24:
29:98:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:29 2025 by rpki-client