Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: 8klhBSz5wpVh4AuV7HZNpsJy2/U+xkOeGRhLF+upJi8=
Subject key identifier: 63:38:FD:C8:7F:F4:D2:3E:30:D6:47:0A:02:F2:30:A1:43:AF:2E:71
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 0194BD856557D29D7917FFF2FBCC81CA0E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:23 +0000
Manifest this update: Fri 31 Jan 2025 18:00:23 +0000
Manifest next update: Sat 01 Feb 2025 18:00:23 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: VXZXlPx2DyRME/mibYYtedi6w8rRDWLvuwTDhNJpF9k=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:65:57:d2:9d:79:17:ff:f2:fb:cc:81:ca:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jan 31 18:00:23 2025 GMT
Not After : Feb 1 18:00:23 2025 GMT
Subject: CN=6338fdc87ff4d23e30d6470a02f230a143af2e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:d9:c4:ce:3d:39:95:a4:56:ee:37:f2:6e:
1b:70:2f:a7:f4:cc:27:c5:36:a9:85:0d:91:c5:5c:
f8:5b:c1:ba:f5:7a:3c:7b:31:b1:36:0a:8b:dd:e9:
53:66:f1:99:aa:58:42:85:41:7d:c2:41:90:47:ac:
b3:dc:29:b9:d5:2a:40:f2:c1:45:1f:09:bf:67:6d:
3d:9c:23:e2:4e:d7:08:fc:59:a0:82:0c:64:02:4a:
2b:04:3d:1b:89:ce:14:35:da:37:37:eb:ab:ba:27:
d2:37:86:d3:fb:72:46:aa:6c:50:3a:58:89:b3:76:
9a:5b:b3:d5:fd:b3:56:95:dd:e9:14:b5:67:ef:4e:
46:31:9a:54:fb:4d:d0:35:a4:96:0b:22:30:46:01:
68:74:f8:52:51:db:61:6f:90:d6:89:5e:8f:bd:31:
3f:a2:a2:8c:86:2b:8c:c7:55:2f:55:82:74:6d:cd:
b3:6b:f9:8a:67:da:da:3d:89:47:54:e6:49:55:29:
a6:c2:13:32:7d:d1:d6:bf:a4:ee:25:89:4b:f5:a0:
40:b4:1c:ca:0d:4c:b0:4c:4f:15:3a:b3:f9:ad:69:
57:4c:bf:87:3a:7a:7b:6d:c7:30:89:d7:59:80:4d:
f8:41:c7:b9:44:e4:c7:43:f3:e7:d7:25:90:8a:31:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:FD:C8:7F:F4:D2:3E:30:D6:47:0A:02:F2:30:A1:43:AF:2E:71
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e4:ba:ac:70:cf:f9:c6:68:2c:bd:77:85:03:fe:cb:2d:49:
14:f3:75:3c:58:f0:46:27:25:13:f3:fd:80:8d:8f:d7:90:fa:
b8:bd:8c:83:f5:3f:59:ad:b6:4a:6f:6f:72:7d:6c:71:8e:d4:
36:78:78:c4:f7:20:c8:74:27:4a:96:8f:bb:9d:91:d0:1c:8d:
01:b3:6a:1b:ab:42:8b:b7:be:5a:dd:91:ed:89:98:6a:95:e3:
9f:60:d0:fe:0b:da:68:5d:05:e8:0a:a1:7b:f1:aa:10:ea:a5:
df:48:fe:08:ae:65:95:9d:d8:67:81:4a:d1:43:49:a7:6f:f7:
9a:93:51:b6:94:06:ca:ad:56:e2:82:dd:15:5f:29:45:5a:ac:
18:4d:e4:08:01:e4:e2:b7:fa:cb:e9:e6:4d:71:13:d8:26:60:
91:40:cb:4b:12:41:a0:38:2a:57:74:6a:db:a7:0a:1d:db:aa:
01:a4:30:55:74:55:13:17:8b:97:66:ec:d8:4c:53:5f:c6:69:
f0:4c:d7:00:81:de:c7:7b:15:7d:be:06:83:72:b2:63:1d:f7:
1c:e1:3c:13:7f:2c:b1:34:58:e1:5d:e7:74:c6:d9:07:d5:f6:
aa:f5:e3:0e:84:81:e2:34:6b:ce:86:c0:f6:8e:8f:b0:1c:6d:
99:b7:8d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:18 2025 by rpki-client