Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: 6vlE899NtGpELRhn5DjfwWjcGaiOX+DfqEO5veFc7b0=
Subject key identifier: 16:56:60:CB:61:BD:75:E8:05:B7:6A:A5:BB:54:76:C8:5F:D3:7D:38
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0194BC0517556B8864E62BB2D3C199EC33A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: L07o_vv656M9OEJjc4BFj7rpTc8.roa (hash: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: r2yu0v8pdugkFxqbp/CrCtCuLpe4dV+RiRMxxrxghoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:55:6b:88:64:e6:2b:b2:d3:c1:99:ec:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=165660cb61bd75e805b76aa5bb5476c85fd37d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:19:00:72:cb:1d:09:2f:03:80:c6:a4:55:
f2:69:48:26:6a:78:4f:89:2a:1b:97:c3:04:cc:85:
17:fd:6a:1a:32:93:96:75:3b:0e:81:01:55:c9:49:
7f:11:f0:2d:0b:68:69:34:f5:c5:e2:f8:b4:72:81:
dd:70:14:62:b1:11:59:38:16:f0:01:13:a5:1b:6a:
61:d1:00:5e:6e:9f:47:7b:40:89:ba:48:9c:0e:43:
e2:aa:56:5b:1e:57:6c:02:68:e9:45:23:4d:85:c1:
82:f6:94:46:85:82:1b:c8:a6:10:8e:8b:8f:6f:74:
a9:0f:36:f8:98:4e:48:ee:73:39:2a:e9:f5:43:1b:
4d:0d:ab:c4:68:35:92:e6:61:d3:ba:15:a6:b1:b4:
c5:4c:c6:10:fd:d2:d5:9a:41:11:4e:c0:f8:8f:d4:
da:2d:57:73:be:fa:b9:e9:97:1e:92:53:e8:b8:d8:
8a:fb:f2:b0:f8:a7:86:04:62:0d:3c:62:b9:f7:c2:
95:da:c7:db:b0:ff:65:01:a2:2c:5a:6b:51:01:93:
54:03:c1:48:f2:65:0e:6c:bb:e5:b2:cf:f0:71:14:
ec:7c:e9:d0:17:d3:c3:00:21:03:bd:6e:d4:15:5d:
1f:da:b0:31:dd:22:5f:92:6f:14:04:68:3c:7e:09:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:56:60:CB:61:BD:75:E8:05:B7:6A:A5:BB:54:76:C8:5F:D3:7D:38
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dc:e3:36:cf:47:7c:21:ac:6b:3c:ca:62:16:75:9e:51:9e:
0f:2d:44:97:4d:34:f1:95:cd:50:e8:44:63:59:dc:fb:ac:17:
4a:4a:fc:f3:63:ab:ac:ae:32:78:d9:19:97:6d:c3:47:9e:cf:
ce:10:c0:32:8a:92:02:7f:df:d8:db:4e:2b:28:c3:e5:16:5a:
a0:0c:a2:43:b6:2d:9d:35:25:53:fc:be:8a:0e:f1:c1:4a:f8:
90:07:92:c6:89:cb:1b:32:b5:32:74:df:fb:7d:32:90:ed:91:
a4:c7:4e:93:5a:2c:64:ab:dc:9a:e7:e3:1d:f5:ef:3c:3a:9d:
ad:dc:4d:82:2e:a5:54:e0:19:e9:92:a6:27:74:3e:6f:9e:e9:
ea:67:c9:1f:e0:c9:6f:5d:b2:35:7b:cb:a9:0d:c6:89:58:8e:
12:2a:12:58:3b:14:2c:3c:d1:49:ef:c2:3f:50:ec:b2:34:13:
a7:58:ea:82:69:f5:17:79:ad:ce:5b:5d:9a:14:cf:f9:90:12:
cf:c1:1e:4e:5d:68:c0:ad:69:f5:5c:3b:b3:ef:1c:5a:42:e2:
35:fd:f6:66:21:52:ef:fd:8b:f6:57:64:f3:cf:ac:d4:f8:c0:
22:92:06:5a:e5:80:94:ac:87:4a:93:bf:9b:66:00:bb:7b:9a:
e9:09:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client