Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: rggoJnJ1FlcUGgDYHc2ONsZ8PnbUK5Ey1yP2vZIibx0=
Subject key identifier: 84:FC:C6:B8:06:E5:11:71:41:BA:89:6B:28:CB:C1:AF:7E:1F:60:10
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 0194BC052306B636F705054FB7B89A581444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 062C
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: 9KLVG6zrnVdIUIBGHcrGKsJsfzZCzg1gP/Kj8uhhGqI=)
2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:06:b6:36:f7:05:05:4f:b7:b8:9a:58:14:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=84fcc6b806e5117141ba896b28cbc1af7e1f6010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:9e:0b:1a:bf:af:8c:c2:30:75:00:c0:7d:
51:be:9a:71:35:4b:9d:24:d7:ca:06:89:4d:90:f3:
13:81:49:81:a2:fe:c2:38:56:8c:8e:db:17:e8:9e:
d2:b1:ad:09:e0:a5:75:bf:14:63:6b:cc:89:19:9c:
42:76:69:56:2b:87:19:16:56:3d:98:a0:19:33:1f:
31:06:4c:8a:3c:8e:e5:1f:19:14:c9:c6:f0:35:94:
14:46:d1:be:fc:07:25:89:85:93:5e:96:04:6c:67:
97:a4:fe:38:5b:2e:ad:f5:4d:2a:92:6d:f8:ab:6d:
50:64:d0:91:b7:36:d3:20:d0:e3:75:d5:28:65:b7:
41:89:31:96:ff:eb:ce:43:d4:de:8f:a5:e1:42:e0:
73:e7:c2:e9:14:7f:52:41:f9:56:eb:e1:8c:f4:04:
96:a3:01:34:5d:2b:1c:fc:6e:1d:52:29:58:21:ff:
cd:82:e7:18:55:7b:6d:16:f1:46:ac:cf:e6:f1:58:
98:86:ee:5e:55:c1:62:da:4e:98:ce:44:b4:04:ee:
bc:0f:e6:a6:d1:00:cf:39:66:00:d5:87:f4:a5:e1:
d1:02:b2:ec:ec:e8:0c:5e:7a:2f:54:3b:e8:6e:11:
ff:cd:d7:48:26:a0:2d:28:2b:92:cd:c0:37:4f:33:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FC:C6:B8:06:E5:11:71:41:BA:89:6B:28:CB:C1:AF:7E:1F:60:10
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:65:e4:a9:40:e9:80:d7:57:91:7c:ff:ab:31:65:4c:84:01:
98:84:06:e9:dd:c6:10:5f:93:e6:fe:d4:b1:cf:30:58:a7:8a:
7f:43:4b:c7:a6:ca:89:9e:56:2b:9f:6b:68:95:36:d6:fe:0b:
eb:24:f9:3b:ad:d8:b2:16:79:70:ad:e4:23:f1:32:c4:9d:0f:
5b:86:f1:20:c9:be:24:ab:e2:01:5a:73:82:dc:57:ae:8b:0a:
1e:29:9e:f5:61:a4:04:42:e0:30:e5:7d:48:be:c1:3b:47:8c:
0e:0c:ef:4c:e6:1c:87:4f:51:3b:83:cb:25:13:97:e4:3f:a7:
1a:93:5d:33:5a:f5:df:e9:de:fa:61:a5:48:6c:3a:e3:f6:71:
f4:c2:46:8e:90:e8:6f:26:cd:ff:06:39:36:a4:23:ce:99:9b:
e5:05:32:d6:f1:64:78:06:42:70:8d:8a:d7:36:ec:a2:3d:14:
65:68:bf:cb:de:49:98:ec:f0:49:cb:66:39:0b:8a:13:0a:39:
1f:65:86:d0:70:a9:e5:3b:35:c3:fe:9e:b1:a7:00:42:20:d1:
7c:4d:4d:f2:8b:7c:cb:b5:7f:34:3b:fd:8f:0b:ba:77:95:74:
f9:ea:49:79:73:70:a5:0b:c7:39:bc:48:41:f5:b9:e2:36:55:
f4:8b:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:38:58 2025 by rpki-client