Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
File: G3573I4VumsubQlVJHa7G1WxWcM.mft (raw, json)
Hash identifier: 3wMCcJB0RcvNv5Hwy9O6NO9KDEndJ/DBPdQ7gzUc+vE=
Subject key identifier: 02:BA:35:65:4F:EE:80:EE:FF:10:DA:48:80:62:DE:B6:F0:DD:38:49
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Certificate issuer: /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial: 0194BC3BF40C1043BA2A109604F783603D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: G3573I4VumsubQlVJHa7G1WxWcM.crl (hash: B50wPiP/FKUEeqLkQP4eAxpV50dCyHw3dkOY7RK1CbE=)
2: hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (hash: CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:0c:10:43:ba:2a:10:96:04:f7:83:60:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=02ba35654fee80eeff10da488062deb6f0dd3849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:42:31:59:f7:5b:a4:11:1e:ff:59:14:f6:
9a:fa:21:15:26:51:7d:32:59:8c:dd:80:9a:8a:7c:
12:63:ee:62:6e:84:66:a3:85:4a:b0:1a:7a:5e:51:
98:d3:10:05:53:68:49:98:8f:30:dd:98:eb:d4:41:
37:87:51:df:56:ba:19:64:19:35:c1:43:0d:0c:4c:
ea:b0:65:69:0e:e2:9e:cf:36:96:e6:ef:95:86:1c:
47:ae:29:7c:a4:a9:66:51:f9:76:c2:a3:f1:5b:5f:
af:dd:c1:a3:5e:1e:44:fb:a9:ec:75:e5:c9:89:71:
ed:4f:df:2e:8d:2c:cc:00:51:2d:75:85:c7:f9:9f:
7a:0b:21:03:31:3a:98:ed:82:3b:1f:b9:54:b3:e5:
b1:33:fe:94:bc:85:77:86:ad:20:17:ef:20:44:c5:
2c:79:f6:5a:56:95:d8:8b:7f:9f:fa:c0:e7:50:aa:
2c:e7:d1:33:0e:3f:0f:c2:c9:e3:5d:5e:88:dd:f1:
71:79:0f:dd:e2:c9:3c:5f:9e:20:47:a4:55:b7:46:
9c:7b:9b:af:32:94:34:4d:80:41:ae:c5:60:29:b7:
39:52:c9:eb:64:34:2a:21:1b:fe:32:76:bc:b7:5c:
03:53:c9:03:78:63:83:c6:ea:88:24:e5:d8:49:74:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:35:65:4F:EE:80:EE:FF:10:DA:48:80:62:DE:B6:F0:DD:38:49
X509v3 Authority Key Identifier:
keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d3:22:33:64:4d:93:a8:d1:24:ac:24:14:2a:c6:b2:6d:43:
45:19:c9:99:ce:e8:d0:6e:bf:3c:25:83:f2:4f:35:9f:dc:63:
4f:94:1b:3b:44:c4:d0:f5:eb:b1:92:df:53:dc:7d:27:e3:02:
ce:73:2d:96:6e:61:b8:67:dd:75:e9:17:08:eb:81:1f:8b:49:
6d:91:65:f6:42:da:eb:da:ad:66:22:ec:ea:75:92:07:e8:a4:
fd:48:e1:4d:1d:e1:3f:6e:fe:68:3b:b7:27:c7:d0:82:46:ab:
cf:6c:02:db:72:e5:a5:b2:39:79:d8:64:3e:50:c8:f6:d0:44:
a8:5e:45:cc:e4:c4:94:06:c2:6d:19:57:4f:c4:03:90:54:2f:
7c:4a:d3:f7:51:6d:9d:00:56:91:aa:36:78:0a:df:1b:e5:79:
7f:42:95:e6:52:16:4e:f5:02:b4:8c:4a:3b:c8:d5:38:50:c3:
cf:f9:19:fe:87:1a:a8:8f:13:53:03:9c:03:a4:b0:f4:8e:7f:
3c:9f:94:0d:09:95:87:e4:6e:7c:3f:d0:ab:79:ef:a1:d5:97:
d8:53:0a:c1:74:e3:86:39:a6:ff:f8:eb:5e:c9:eb:cd:51:12:
5b:ea:d2:22:cd:32:84:cb:fd:d6:b3:40:a2:d9:48:1e:6f:47:
8f:8c:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:39 2025 by rpki-client