Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File: g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier: pNp/bimlM4dUs0REehoG1ABoJgCi+8Gk4Mot9t0Qg/8=
Subject key identifier: 7F:FF:68:CC:C3:8E:9B:14:88:99:BB:2E:46:49:E6:91:7E:27:9D:AB
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial: 0194BD4E7F8BBAA0A3806975BA25EA796CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number: 1231
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: auKmv3rsrRJR3tEre0QBs9UJnpeVtzM8vU5ThUfYLdo=)
2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7f:8b:ba:a0:a3:80:69:75:ba:25:ea:79:6c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=7fff68ccc38e9b148899bb2e4649e6917e279dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:55:14:4b:09:6e:6d:70:05:6d:73:a5:24:
49:ea:7e:69:6d:5a:bc:a5:62:04:54:08:5f:5f:08:
85:d4:31:2b:00:fc:22:84:26:ba:34:4c:31:9f:a8:
b5:53:64:4b:0c:c6:b2:1f:47:72:ae:41:02:82:e6:
e1:07:e2:11:21:ee:25:52:67:d8:34:54:ea:18:4a:
a4:f5:0a:0b:47:a2:54:82:05:a4:61:af:14:77:76:
1e:cc:88:77:bb:15:11:ca:d0:62:06:91:1a:50:99:
56:fa:0b:26:53:07:15:28:a6:83:8a:ca:b5:a8:ca:
cd:1e:81:8a:b3:bd:7f:38:33:d2:a3:5c:41:85:b8:
a7:bf:09:f1:86:b3:3a:0a:17:3c:b8:5f:38:19:61:
bf:3d:b6:f9:5d:f3:f3:39:ce:f5:8d:a2:76:fe:b7:
73:eb:a1:b4:81:d0:6a:d8:6f:ca:df:ba:35:1d:ba:
0a:47:9f:44:29:73:40:53:42:ba:c5:cb:5c:a7:37:
94:8d:41:fd:64:a2:31:b7:8d:85:d9:3f:5e:d1:95:
dd:63:64:ec:97:8d:a5:fb:d9:81:96:7e:4c:fb:fd:
69:15:13:2e:19:72:d7:ec:69:b8:60:ac:ca:51:08:
7c:be:61:2a:5a:77:64:86:f0:a2:fd:5a:44:db:1c:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:68:CC:C3:8E:9B:14:88:99:BB:2E:46:49:E6:91:7E:27:9D:AB
X509v3 Authority Key Identifier:
keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9c:2e:36:8a:8c:8b:38:8c:96:c8:ec:03:45:f2:a0:e9:cb:
22:d4:de:20:f1:40:d8:fa:f9:3b:9d:98:da:f6:25:58:81:7d:
bb:6f:e3:7c:91:0a:4d:29:99:20:8f:a7:84:ea:49:38:3a:4f:
5f:d6:d4:0b:eb:b9:48:ab:69:28:11:c2:47:85:94:26:af:12:
8d:cd:d9:d8:6f:a0:44:e5:1d:bd:1a:e7:0e:88:b6:04:7b:0a:
0e:16:16:df:74:1c:6b:8e:9b:40:f7:67:20:f6:5a:d9:4a:7b:
1a:b5:2b:49:a4:43:b8:df:75:a4:d0:34:4d:51:f2:c3:5f:c7:
fa:31:86:93:85:38:27:84:8b:e3:51:ac:65:c8:3b:a0:c2:62:
18:36:42:69:03:15:09:79:38:ed:13:99:0e:ac:17:b2:37:ad:
48:8f:09:c6:5c:8b:30:5c:3b:e5:d5:08:d4:be:1e:32:6a:cd:
63:6d:3f:64:0f:f0:58:bf:24:04:9f:ce:21:e3:24:8f:8d:81:
17:9b:f8:f5:18:b1:89:2c:5b:00:fb:18:f3:13:d2:0e:77:6b:
a5:1b:3f:58:93:94:07:2e:41:a5:d2:37:87:ec:96:5d:3a:ea:
04:34:e4:17:f1:61:37:91:57:94:fe:fa:83:15:74:77:d5:65:
8d:67:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:30 2025 by rpki-client