Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: 3pUF77pc9HIq4+H5HTgAVNHy8VCigRplMzuRSP9MMI0=
Subject key identifier: F8:34:C0:A2:55:8A:7B:FE:B0:DF:9E:27:B3:9E:1F:33:67:A9:FD:9C
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 0194BD85AB3D64D6139B86302BCCA66BC042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 0F43
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: W3rPvUkflCFuxF0ug4dEXW6S2Kc.roa (hash: 3G2s7uZotQeaUTGQLu0pJAmRVfSsV9ARqhmMaAPkMDY=)
2: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: Fk+r7XIP53duJH7NSvrb0/2DshuqdhFE65p2SORBS64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:3d:64:d6:13:9b:86:30:2b:cc:a6:6b:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=f834c0a2558a7bfeb0df9e27b39e1f3367a9fd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:ee:6d:90:55:07:e7:b2:65:f6:59:96:40:
30:90:3e:2b:d8:76:73:16:ec:3b:ba:7c:1e:3c:24:
b3:39:47:22:85:f4:96:0c:40:0e:8e:0b:e8:95:2a:
c1:12:64:91:fa:5c:3a:02:e2:37:2c:fe:19:43:ac:
de:19:f3:7b:7a:c0:0e:43:49:0a:13:2a:3a:c7:fe:
cc:99:5a:34:f5:48:24:2f:37:f1:0b:a1:6f:3d:d2:
80:17:d2:5e:28:8b:7b:1f:3b:b3:ff:e4:b1:c8:f4:
e2:a2:82:f5:5b:be:e6:8a:40:f6:2c:31:97:34:29:
c3:73:c5:79:4c:b5:93:a6:03:3b:dc:d4:b1:8a:23:
75:3a:4b:b3:98:f3:ef:90:24:d1:da:b9:40:ff:6e:
2b:8d:81:0e:75:7d:a7:2f:73:52:a9:70:07:7e:79:
8d:3c:f4:03:44:09:49:3b:9b:56:79:00:58:f6:b9:
ba:45:91:63:43:b5:f0:98:8a:b3:e4:2c:fa:1e:a5:
bf:1f:3f:11:83:7a:64:46:9f:e0:99:e2:17:ac:c6:
55:42:bb:f6:5b:17:a3:ba:92:a1:67:36:b3:a3:9e:
6e:ae:1d:17:d6:b5:c3:17:c2:60:a4:ba:48:0e:7d:
26:b4:9c:96:bb:ca:e2:f0:95:98:c4:3f:fe:da:f0:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:34:C0:A2:55:8A:7B:FE:B0:DF:9E:27:B3:9E:1F:33:67:A9:FD:9C
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:db:de:38:27:27:84:43:3c:dc:ec:52:26:1d:96:69:a4:d0:
10:9b:67:73:20:f1:aa:26:15:d9:9c:43:44:96:bc:19:80:8e:
8c:06:be:fa:e4:64:34:e3:7d:fc:c3:12:96:87:37:04:96:36:
b2:92:79:3e:12:d4:01:58:5c:46:d9:d9:e6:47:c9:f2:36:38:
a5:e4:bd:ac:06:5e:04:2f:9d:a3:89:df:44:f4:58:85:08:d8:
43:f6:59:60:55:31:7d:9a:e4:8a:bf:0b:a0:97:cc:3e:21:94:
c1:61:3f:2b:f3:9c:dd:88:c6:ae:4d:f1:4d:0c:c1:31:b2:d0:
c8:99:36:e0:52:9a:4d:70:68:b1:67:6b:23:bf:22:99:82:54:
2b:5f:3c:b3:af:a5:47:b1:f0:5a:d8:2b:df:da:e1:4b:14:1b:
e3:05:17:62:bd:6a:ac:d9:b9:99:eb:43:e6:87:b0:b0:d0:ea:
21:f7:25:bc:f6:0b:7b:33:26:83:df:71:fb:b9:49:99:d4:20:
f0:f3:e0:57:e8:14:58:42:76:0c:75:a7:23:84:d4:a8:9b:2b:
8a:a8:fe:b8:4d:20:49:90:b7:4a:ea:5d:25:45:2c:85:98:43:
1c:18:83:9b:b0:35:41:af:39:a1:50:80:8d:14:e5:20:e0:33:
8f:05:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:00 2025 by rpki-client