Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: hvKysoG0Ty6imIIG4+QA02Jm9FBxLthjkJCSj6WvsC4=
Subject key identifier: 06:DA:0D:17:03:07:73:5D:B9:BB:C0:87:5D:35:70:71:E5:76:81:60
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 0194BD17669F5937E0032D338915B8CC8FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 043B
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: c8jr9RK1jYIIU9J_37XkvdpDKPQ.roa (hash: FypzDCTYnJOnd+60Jv/bTV7/TP6pt9nWegIKGFpscqo=)
2: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: JhjiyDAJiedFLN2kVL6Y2sApDdzC0oksZEtQZpg0Lrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:9f:59:37:e0:03:2d:33:89:15:b8:cc:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=06da0d170307735db9bbc0875d357071e5768160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ad:ca:e6:c1:f8:64:a3:80:59:a7:58:c5:bb:
df:00:d8:9f:53:8e:7b:eb:2f:5a:bc:a1:b7:9f:c1:
07:6d:53:84:67:03:cd:c8:ee:46:99:34:f4:34:10:
1e:95:09:59:c1:67:72:cf:68:d1:16:76:3f:2e:c2:
80:d4:19:e6:20:2d:46:16:0a:05:a3:32:d4:af:fa:
63:c0:29:14:00:91:e3:11:d4:44:b9:03:20:66:c2:
e1:44:e8:1b:df:39:92:0c:e5:bd:25:00:e6:83:1d:
f8:a2:09:02:11:87:fc:31:cd:f1:1e:0d:f7:b9:d4:
3a:79:3b:27:c3:eb:00:32:0f:1d:f1:d9:70:b6:28:
18:89:f6:8a:07:a7:16:bc:1c:83:71:da:36:76:ea:
4f:3e:a7:0a:1e:fd:16:82:88:ad:e8:93:a1:1a:db:
b4:df:f5:f5:90:d9:1e:42:f8:69:fa:27:38:f8:fe:
3f:7f:62:b7:52:02:c8:90:fd:fc:6f:61:b8:3e:46:
e5:72:23:77:06:e4:d0:4a:2b:ad:c5:43:87:d0:27:
ff:c8:c6:9f:2f:e9:a0:26:a5:e1:cc:c3:23:fa:a8:
ef:d6:ed:3f:b9:97:a0:e1:95:c0:af:21:49:24:52:
8f:f0:18:fc:c6:5c:4c:fe:b2:5c:b9:4b:48:fa:8f:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:0D:17:03:07:73:5D:B9:BB:C0:87:5D:35:70:71:E5:76:81:60
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:27:d3:9e:f4:e4:1b:d7:bb:1d:cd:37:51:7a:c2:dc:2c:ac:
e0:90:06:78:f6:7f:5d:46:3a:f5:73:d0:8d:bf:49:58:f8:25:
21:e0:66:10:57:a0:5c:cc:e3:71:37:e7:64:df:48:9a:24:d3:
87:9e:97:9b:cc:96:5b:32:11:fc:1a:df:9a:3a:25:97:15:a4:
a6:5e:bc:de:e6:e0:26:bb:9c:91:af:73:83:03:6f:5d:26:10:
6c:56:ff:ea:c2:ed:5e:88:ca:66:06:bf:56:21:b5:39:49:7e:
32:22:dc:bf:44:47:75:04:38:9c:fa:89:76:17:90:ea:88:08:
5b:39:69:23:51:c0:ad:47:e7:99:ee:fe:cf:73:96:7c:e4:b6:
36:1c:73:c9:c7:4c:7f:7f:c0:af:c1:69:21:41:9f:e3:a8:3e:
86:d6:2e:5d:9d:88:21:14:aa:4c:52:55:1e:ec:ab:eb:6f:12:
84:1b:1a:72:84:14:18:44:9f:6f:30:16:3a:44:99:df:97:2c:
12:e5:38:a5:70:5b:63:41:9a:0e:15:a3:73:db:1f:1e:70:9a:
c7:de:63:ae:f1:f2:64:c2:f4:5e:2e:b1:00:e8:4f:a9:82:45:
47:09:d6:8e:13:e0:ca:ea:43:a0:37:5b:46:33:4e:47:40:20:
63:85:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:15 2025 by rpki-client