Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File: r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier: nS+hULChAPsdY7xHCM1ng8ZBakR+zPOx61c+PKxpLYI=
Subject key identifier: A8:DB:C1:F1:B2:63:77:61:02:B6:4A:DC:64:2E:52:42:CB:67:DE:E3
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer: /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial: 0194BC04B8433FFD01C83BC7714101BDAAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: qZsU012FOT7iNKmn0Q6fmLHg-jY.roa (hash: t+/X1ob1d2V1rnzYvMBrQBRc/+JtrsZ+AHNltw325kg=)
2: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: Ve0SD2IOJPn63eJys/fTRW7Mca0GEZFQTk99OBUCfWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:43:3f:fd:01:c8:3b:c7:71:41:01:bd:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=a8dbc1f1b263776102b64adc642e5242cb67dee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:0e:5f:d1:3a:af:dd:18:5e:87:48:9a:7f:
b5:bf:19:db:e9:5a:f1:11:fc:3d:35:6b:61:b0:82:
93:35:ed:5c:71:7f:44:66:3b:ce:d2:68:b7:c9:db:
bb:53:ea:00:21:3e:67:d8:df:be:e6:64:6a:c7:96:
17:8b:f4:a5:7a:81:0b:4d:c7:e7:36:5f:ce:3f:ff:
8a:33:43:cc:63:0b:52:b8:c4:9a:86:2d:b6:d3:a6:
23:99:a2:90:96:ad:f1:ee:8c:53:1e:6c:c6:3e:32:
99:7d:b6:ce:db:42:51:be:ee:38:0b:e0:95:40:49:
9f:df:d2:2c:d0:25:34:bc:49:5b:44:2a:5e:e2:8e:
85:83:60:c9:fa:80:3e:7d:d8:43:f1:9e:63:1c:29:
67:b8:56:09:1e:ba:c2:b9:6d:1c:41:78:c2:0b:d4:
a2:de:4a:d2:cf:d3:dd:a3:57:79:b3:98:37:e3:f7:
7c:0a:32:59:a0:c5:f1:18:3e:2b:15:a3:8b:3d:bf:
52:9f:fa:40:10:05:68:78:e2:cd:4d:31:ff:d4:af:
b2:d2:5b:31:1e:c8:8d:e4:9f:ec:78:6e:7e:b8:d1:
24:5a:d3:2b:84:1c:a1:f0:b1:09:2f:15:e3:fe:98:
7b:58:15:62:74:76:53:a0:fa:4c:ef:1f:f5:1e:cb:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DB:C1:F1:B2:63:77:61:02:B6:4A:DC:64:2E:52:42:CB:67:DE:E3
X509v3 Authority Key Identifier:
keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:87:87:8a:b5:cd:cf:b2:c2:73:0c:db:6a:0b:24:45:d2:
02:05:75:c6:c6:1b:27:d3:6f:33:17:57:2b:64:fd:45:c8:ad:
14:a7:f0:e4:f1:e8:c6:f8:9e:f3:8d:bb:db:b0:83:2b:9b:a0:
a4:83:4f:66:25:55:e3:a0:15:93:48:64:f9:1b:0e:b0:87:83:
19:97:2b:bf:34:02:3d:46:b8:2f:09:be:4d:35:50:df:2f:48:
1b:f3:87:84:d7:16:c3:e2:ba:7e:25:bf:c4:90:c4:9b:7f:5f:
f8:bf:f0:ee:e8:f3:e6:30:dd:0e:01:ce:36:e7:b7:cf:98:aa:
18:5e:8d:60:85:4a:c8:46:19:cb:b1:e6:53:2c:e4:4a:54:bb:
c7:20:fc:70:15:4b:a8:d3:54:a9:de:56:f3:e1:0b:34:9f:4b:
ba:fd:9a:bf:28:42:cc:61:32:11:b2:51:86:45:fb:d3:be:f5:
91:60:19:7e:b2:38:08:96:65:13:18:b2:5d:4b:e3:a5:b7:ee:
5c:10:e0:6b:02:e3:ae:df:29:f8:26:55:40:ba:b9:c4:d6:bd:
18:52:a9:ff:f9:e1:97:40:67:f9:10:8e:86:60:e7:b0:b5:a9:
3b:29:a5:3c:58:ec:20:bd:b7:cf:76:fa:84:19:33:b4:d8:b8:
c4:41:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:04 2025 by rpki-client