Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File: G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier: 0OCWoTdOzi+EdCIECM29yDhscTVsJYFCdaWYb5veGC0=
Subject key identifier: A7:29:98:B5:7E:F2:6D:D4:59:41:CE:CD:71:7A:82:20:39:0B:D9:F2
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer: /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial: 0194BBCE377BEE13DBC5927A1DB07010B8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number: 0BAE
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: hK71p8V2zGaowlG/xKFpPY9L1hJJjlwcFaCafNAO/Mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:37:7b:ee:13:db:c5:92:7a:1d:b0:70:10:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=a72998b57ef26dd45941cecd717a8220390bd9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:aa:fd:f4:c9:25:49:bb:ac:fe:b3:05:c2:
a8:97:cf:ab:49:58:60:dd:26:f3:0c:93:12:fa:e6:
bd:dd:8f:12:bf:e7:ad:d6:f7:d2:ca:9c:b0:08:aa:
3d:30:26:f8:18:d6:44:7f:8a:a1:13:61:77:1c:5f:
45:b2:c5:85:ec:a2:7b:9a:d5:ce:ed:63:f8:86:f9:
68:39:cd:2d:05:fc:0e:99:c7:41:9f:c4:1b:9b:67:
d9:c9:61:6f:61:5f:22:1e:57:5a:ad:cf:8e:01:0c:
8f:85:b9:06:26:f9:47:fa:1b:a5:80:aa:8d:98:17:
ba:fb:48:96:a0:0d:a0:ac:9f:f9:68:99:49:a2:41:
fb:bb:61:c5:6a:e6:49:4b:0c:c7:25:64:76:94:f8:
64:35:32:e7:44:46:0d:07:67:19:17:f2:68:6a:54:
76:37:96:e8:79:3f:6a:e2:6c:5f:1a:1b:93:59:70:
3c:ac:51:0c:67:62:bb:df:97:cd:dc:cc:44:7c:df:
13:a6:55:29:a2:35:a4:72:81:91:9b:69:a6:4e:22:
f1:1c:b1:de:f7:13:80:25:28:ef:72:47:02:5d:fe:
9d:c6:5a:83:e4:5b:a4:aa:36:34:90:2c:f4:b6:50:
83:b9:9d:c7:e1:96:87:73:60:22:a2:1a:df:f1:04:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:98:B5:7E:F2:6D:D4:59:41:CE:CD:71:7A:82:20:39:0B:D9:F2
X509v3 Authority Key Identifier:
keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:52:b8:75:df:8d:ad:1b:01:bf:07:32:04:2d:58:c2:e1:a6:
d5:8d:c8:c4:6a:cb:d0:d0:96:75:1c:a9:2d:1f:df:12:8b:15:
b1:1e:07:1b:3a:b0:6e:64:06:2c:16:9b:44:fb:1a:9e:1c:87:
89:93:40:74:dd:1f:2a:40:b7:8b:05:f0:c2:eb:d2:a1:bd:d8:
a9:6c:05:1a:5b:b8:d3:d1:d3:f9:55:b8:88:31:55:4a:ea:57:
8b:0a:16:05:3e:e2:ae:a1:31:d8:26:ea:eb:7b:1c:db:7a:c1:
99:62:13:ea:73:91:82:65:1a:f8:73:e7:50:55:d6:b4:be:fc:
c1:b7:5b:a4:3d:69:6b:4a:85:91:7a:6d:48:7c:0d:19:14:40:
3d:f7:83:d6:80:00:e3:12:3f:8d:40:aa:33:20:22:8a:16:2d:
98:ec:7b:d9:e9:1b:5b:59:fd:d2:f8:a1:9d:ef:ea:10:20:92:
17:88:94:24:22:10:1f:27:ea:d7:ba:a6:f8:bc:d8:88:7d:a9:
77:04:b5:86:6a:59:93:0c:39:da:ed:82:50:7e:b7:45:fc:8a:
e5:d6:e6:4d:fa:86:cf:dd:ab:c9:61:ee:f7:d1:3d:b9:c5:52:
05:35:ba:87:2f:a3:df:6f:42:3c:13:42:6f:57:74:e1:2d:f5:
ad:8f:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:21 2025 by rpki-client