Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: IT9aO5Hb4pUugJcFqbGue0cRLYFi6pw6lBGU7F842P8=
Subject key identifier: 8D:FE:DB:B1:55:D9:FD:AB:DB:83:AC:36:61:1B:D8:FB:EA:E4:E6:2F
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 0194BC04B564E07FF1173E03DD54B640D88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: PZcN979KI+PUC4fV8l88YxpIfBEfRbQO5k3/ImbriUU=)
2: Ih31sg8uCJb_KbpSa1L6Oxmc4Z8.roa (hash: 9mQ/h5Y96VB7w3Lx8Rm2UMKZ49LCZfxek1bOiFzpcfE=)
3: Y2jaKnMLOg7L7yt3a5FoJKVZD9M.roa (hash: E77+sc63md8h3e/NARC1FrCtInem3ClY6WQ72Z8aT70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b5:64:e0:7f:f1:17:3e:03:dd:54:b6:40:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=8dfedbb155d9fdabdb83ac36611bd8fbeae4e62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:8f:90:00:c7:88:8c:f9:73:5d:da:6c:0c:
ec:65:62:b5:de:1f:3d:7f:8e:e4:fb:40:b7:2e:61:
0d:23:97:35:aa:9f:bf:d1:29:15:e1:1b:87:a0:4c:
76:f1:53:c1:28:c8:ef:1a:57:2d:b4:b7:ef:51:0a:
cd:22:7e:2f:97:45:74:8f:f0:e6:1e:13:82:a5:5e:
83:25:43:a1:18:22:be:b8:e4:52:a6:97:a6:69:6c:
54:ce:09:96:e1:fb:d7:e4:0e:55:9c:7e:2d:cf:d0:
57:44:43:1e:81:f5:70:76:69:f7:30:c1:d8:b4:bd:
bf:1d:60:c9:5f:3a:53:cc:11:f7:e8:d4:40:7b:4b:
f3:a7:35:34:0e:bd:05:5e:73:99:2d:80:4f:b5:37:
50:0f:76:de:f9:a3:91:30:ee:73:95:06:ac:51:f5:
8e:14:87:98:ea:73:b4:b0:e3:36:33:37:2a:46:7d:
06:7b:92:50:f0:ab:e3:1d:9b:84:1e:fc:f3:3a:09:
e4:4f:06:6e:df:56:7d:26:36:bd:1b:54:8f:c3:03:
af:e4:bf:12:e3:62:60:37:b3:d5:24:96:51:cf:00:
0e:0f:db:14:08:ea:10:04:5b:72:fb:5f:1f:f5:31:
a6:87:33:a1:24:e4:cf:45:31:07:6a:85:2e:05:37:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:DB:B1:55:D9:FD:AB:DB:83:AC:36:61:1B:D8:FB:EA:E4:E6:2F
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:33:3c:58:68:05:79:bd:a2:28:35:01:35:63:55:59:e9:
2b:86:4f:b3:4c:c7:fe:f8:dd:b2:02:ce:4b:d3:45:d0:61:95:
20:7a:ae:fd:de:de:78:54:aa:87:64:a9:5b:dc:50:f0:45:3c:
fe:17:55:05:b6:bb:68:ba:ea:0f:87:cd:c4:7c:4b:41:33:f8:
ad:cb:e5:18:7d:d3:e1:58:4a:2c:02:8f:60:f9:56:d8:ed:0f:
e7:6b:28:1f:c9:d7:f1:fa:eb:9f:b3:d5:a9:11:c1:64:87:d5:
e8:ca:94:41:ee:b3:82:39:59:44:48:3c:37:2c:ee:0b:91:f8:
b9:ca:92:95:2b:fb:7f:3d:2d:31:6b:df:e0:ae:9c:c4:4a:05:
9c:d3:af:8e:60:33:f4:ae:ac:b9:8b:8c:9a:47:88:0b:2e:24:
89:0e:ba:17:7d:f9:e8:98:d2:b9:c2:20:b9:c3:64:48:aa:88:
3c:6e:f5:ff:ef:e1:c2:df:1a:55:15:50:50:b9:6d:46:e5:f1:
e8:c5:1b:cd:18:6a:10:51:90:15:9f:3d:2b:d6:ce:7c:ab:cf:
b7:0d:7a:03:02:c2:66:1b:4e:f9:65:2c:b4:78:1d:f8:20:96:
0f:15:fb:b6:e7:81:cd:6b:6b:71:a1:f3:37:78:53:be:a4:b2:
ca:b0:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client