Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: YC34fbjXm+u7I88q7Gaopw11qyivjUX1Eoc+KAlgMyM=
Subject key identifier: D6:FA:FF:69:9C:5E:43:A4:B7:55:8C:43:BA:E5:02:70:72:EF:23:07
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 0194BD4E9223F527840EF9441508BA5ED5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 09F6
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (hash: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=)
2: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: oxR1+6WsJPsKxErbr4loXgx6QOSPsoL7XyzY0oqtqOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:23:f5:27:84:0e:f9:44:15:08:ba:5e:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=d6faff699c5e43a4b7558c43bae5027072ef2307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:29:98:b6:9b:08:47:4e:29:ba:00:dc:a4:
85:29:64:f0:44:52:ac:5b:af:54:c2:a8:68:ee:d5:
4b:44:bb:d1:3f:9e:1f:1b:b8:73:ea:dc:6d:5e:24:
35:f7:6d:01:e5:f0:d4:ca:6f:44:05:f6:92:44:1f:
ef:18:69:4a:ab:cd:6f:ed:50:1c:c5:27:bf:71:5f:
e5:61:e5:05:80:b1:92:a8:42:c0:84:5e:b4:75:39:
f6:63:e5:d2:a9:71:e5:a6:5b:95:bc:23:77:4a:a9:
e2:81:23:93:d8:21:4c:18:5f:a5:de:95:c1:73:5d:
5e:f4:23:38:3b:f3:69:54:b1:c7:96:ab:52:6e:54:
a8:e7:d6:83:9f:95:35:6f:5f:c2:90:c8:1c:35:dd:
73:87:65:be:df:36:ab:9e:54:c9:42:d6:96:d7:d0:
17:23:51:8b:c7:e4:9c:16:8e:3d:64:7d:45:c7:f7:
31:39:6d:6d:71:52:0c:29:1c:88:7a:d3:0a:f0:d1:
10:9e:89:e3:71:5e:74:b4:2c:35:75:e0:72:a6:65:
4c:cf:da:fc:15:6e:62:9a:8e:a8:cc:81:c0:af:8b:
85:a1:a5:9f:ae:4f:aa:ac:19:9e:93:c7:f0:d5:03:
61:c9:16:73:cf:07:be:8e:c0:ee:41:6a:7d:d8:52:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:FF:69:9C:5E:43:A4:B7:55:8C:43:BA:E5:02:70:72:EF:23:07
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bc:d0:61:65:02:89:d0:c4:73:8b:30:96:04:2f:f9:4d:61:
8f:d8:1e:dc:4a:0e:38:24:d6:2e:ca:e8:53:00:72:f7:78:e3:
72:d0:3c:1a:f1:86:a2:89:8e:51:30:b6:8a:f2:16:f6:43:08:
a5:21:ea:03:e4:e2:e1:8f:e7:11:ac:3c:50:25:7a:59:89:52:
c9:8c:1d:14:af:61:85:bf:db:39:e6:1b:b0:e7:65:2b:b6:ec:
78:d0:d2:12:e8:df:a3:9c:68:ad:e5:80:01:35:ac:1f:0b:a4:
e3:b0:2e:f3:3d:b6:25:6c:61:4e:e3:fd:66:2b:e9:e2:04:fd:
64:60:67:60:e5:bc:f3:c1:9e:0d:df:c8:74:11:69:d2:94:c4:
0d:ff:c5:f4:2c:88:ee:db:8e:45:b1:a6:d4:54:58:ff:dd:20:
85:01:2b:b8:96:09:65:d2:63:7f:3d:84:be:4a:e3:8d:62:8a:
95:a7:75:77:d2:27:97:76:14:55:fd:08:cc:ab:ce:e2:c1:f6:
17:8f:bd:64:67:21:65:47:84:63:70:dc:3c:7d:ec:38:84:b3:
85:d1:8f:44:46:a8:53:75:0b:33:74:9b:02:89:75:40:1f:d0:
90:03:73:c5:12:82:00:e8:1a:ba:d5:c7:42:14:1f:aa:cc:34:
1c:6e:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client