Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
File: g1-7knspUGK30KcgR7a0qhsPmyk.mft (raw, json)
Hash identifier: PT61J/AzgRsm2gm9B/LcKleAVxtaANA9HPf2GbZ9Fjg=
Subject key identifier: 78:A7:91:3F:7D:A3:DF:5A:C6:67:61:11:8E:6B:3D:E5:9D:F8:5E:41
Authority key identifier: 83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
Certificate issuer: /CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Certificate serial: 0194BC3CA354811A2C1DC45B7381AE57DCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
Manifest number: 095B
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: Xz1rL6dK4mQZieGCdBgSZgZHbZ4.roa (hash: gmK1QKVfo/W+VuZX9S2XVVxCk24nsYt3d8ghU+Ddwrs=)
2: g1-7knspUGK30KcgR7a0qhsPmyk.crl (hash: p8Ccigz6QK8M8Pwqn4kwG8ooEcM29mswkQjLvENvbes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a3:54:81:1a:2c:1d:c4:5b:73:81:ae:57:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835fbb927b295062b7d0a72047b6b4aa1b0f9b29
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=78a7913f7da3df5ac66761118e6b3de59df85e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:4b:68:69:6a:6e:61:53:bc:c9:39:3a:42:
1a:0d:dc:e1:00:6c:dc:6f:6c:d7:4e:16:72:7c:8b:
fa:24:e0:c0:17:1f:af:d2:e5:42:50:da:05:19:1b:
aa:88:41:46:ac:3a:19:2f:bb:37:08:8e:00:34:44:
f2:94:1a:96:7e:83:28:6c:1e:64:3f:a8:10:8c:0c:
ba:88:f7:f7:22:8d:ff:ca:41:c2:7e:e1:b7:30:5d:
2c:fb:1a:4d:47:31:5f:e4:f6:68:b6:65:31:51:32:
1b:0c:c1:b6:41:75:48:6c:8f:2a:1b:0d:0b:ef:49:
e5:ab:fa:2a:15:f6:b9:ee:65:df:13:30:d7:2b:82:
49:2a:78:05:50:ac:58:d5:ad:3a:57:5f:77:5b:ff:
75:be:68:f3:a5:b8:3b:16:ac:5f:7b:b7:fc:18:ba:
b0:3c:79:1c:2b:c1:b5:45:10:fc:1a:e9:d3:f9:85:
5e:18:0f:8b:31:2d:a8:56:cf:fc:0f:e4:51:d1:41:
26:c1:98:32:6a:c2:d2:5d:22:d9:bf:13:9a:a5:b6:
bf:a7:d0:ef:db:e3:cc:d1:0f:7d:9b:2f:8c:6c:9c:
14:a0:b3:cd:e7:48:c6:1d:74:dd:a3:bc:1f:45:00:
c1:e4:f2:fe:57:a2:ff:56:fb:9b:07:c5:64:1f:df:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:91:3F:7D:A3:DF:5A:C6:67:61:11:8E:6B:3D:E5:9D:F8:5E:41
X509v3 Authority Key Identifier:
keyid:83:5F:BB:92:7B:29:50:62:B7:D0:A7:20:47:B6:B4:AA:1B:0F:9B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1-7knspUGK30KcgR7a0qhsPmyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c64bf4-c605-461a-bb74-b18f8f7d90e8/1/g1-7knspUGK30KcgR7a0qhsPmyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:5e:56:60:50:c3:ff:fc:7d:ca:a5:a5:fa:c0:54:56:d9:
c4:5a:c2:b5:d2:d1:a6:cf:58:2f:4d:57:21:b9:2c:f0:5e:ae:
f9:0d:11:b5:6c:c2:65:5d:a4:a0:57:18:4d:19:cf:18:a8:11:
dc:7a:8d:80:9f:b5:0e:2b:0d:5e:68:ef:04:03:26:b3:40:bb:
d1:76:ee:b8:81:07:a6:06:7d:ba:d4:d9:b9:68:60:dd:f5:87:
77:e3:bd:82:df:52:3b:bc:c9:77:00:0d:69:15:aa:83:f4:de:
a4:24:4f:d4:e9:c0:1f:0d:53:0a:de:ea:85:d1:1d:ee:b3:51:
d7:a4:b1:52:5b:db:08:ee:13:58:f6:7b:a6:e7:75:c8:2b:2e:
30:bd:6f:4a:4b:33:32:86:ac:c9:aa:34:46:4e:3a:70:6f:b6:
80:0d:93:fc:d1:2f:3a:59:b5:36:88:43:62:8e:8b:6c:17:b2:
d7:59:0f:d9:4a:51:5d:65:55:40:36:6e:b0:6f:41:39:3c:52:
62:01:bf:52:88:0f:fd:90:9c:2f:4c:70:ef:7d:f6:24:2e:3c:
34:4e:46:40:9b:d1:52:a9:6a:a6:8d:6e:68:6d:fb:f2:df:43:
5a:f7:68:e6:33:39:ae:aa:49:45:86:dc:f5:28:f6:d0:b9:3c:
72:8e:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:32 2025 by rpki-client