Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File: g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier: pdyq3+VZ4ZoqJzO+RV0p/Fl4RdmtfxSL7RhGQ4IJtGI=
Subject key identifier: 1F:81:E8:CA:84:74:13:1A:18:CB:21:B4:2C:A4:4A:31:F1:E3:39:29
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer: /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial: 0194BBCDD1FA2FBE8A34ED18B60C0B75665F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number: 0393
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: Oe/VFis/Lcs34F2Jov8kRFjjFkf3+eB1yu0qCv7T3vo=)
2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:fa:2f:be:8a:34:ed:18:b6:0c:0b:75:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=1f81e8ca8474131a18cb21b42ca44a31f1e33929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:ea:fe:28:78:ec:bc:4e:d3:be:96:4e:86:
04:8a:58:79:2a:78:75:0d:77:c5:40:c3:00:e4:a3:
c7:c6:74:63:01:1e:b7:c0:ad:28:0c:6a:48:f9:7e:
24:e0:af:68:5f:f7:f2:a8:7e:f0:4a:c7:54:53:fc:
8f:83:80:da:76:4d:c4:2b:e2:e9:91:83:2c:a0:8a:
36:23:12:a3:b5:14:a0:13:33:4c:41:c1:9e:e2:13:
82:01:9f:46:6c:9b:4e:bf:3c:60:9b:66:46:09:1d:
f2:1e:f0:f6:b0:25:68:94:a5:34:93:71:50:b1:64:
65:86:6c:e6:7a:bc:7a:31:e5:52:a1:ff:e0:17:3f:
ce:ec:a3:c2:a9:59:fa:e5:15:3f:dc:8f:e2:8a:be:
7d:28:5e:b5:cb:b0:8f:e5:d3:0b:70:0c:42:2d:69:
f0:4e:4a:89:a2:67:ec:43:81:0d:37:50:da:60:11:
90:8e:0b:86:7c:e6:d6:3f:3f:24:d6:eb:4d:22:77:
ec:b0:ab:84:66:be:f3:ea:1a:09:31:f2:f0:82:e8:
4e:c9:52:a0:64:37:c7:71:28:f9:c6:3a:99:cd:3a:
31:74:d3:de:e6:6b:83:8d:59:81:09:84:8b:97:d3:
f5:fb:87:20:f1:40:cb:61:af:7e:76:2c:5b:d5:8c:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:E8:CA:84:74:13:1A:18:CB:21:B4:2C:A4:4A:31:F1:E3:39:29
X509v3 Authority Key Identifier:
keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:7a:c4:25:fe:07:a8:73:15:f5:22:30:8f:fb:57:13:82:
c4:17:f5:79:8b:4e:2c:36:63:c0:e8:23:17:aa:34:26:e8:d2:
23:ea:bf:3f:2f:57:b0:ae:67:1f:a4:8a:c3:d2:94:6d:38:dd:
11:64:c5:fe:70:f2:53:85:5c:f1:48:5c:6e:5e:2c:4e:86:08:
43:ea:3c:39:aa:29:d0:7b:91:a7:d6:c5:7c:c4:82:cd:9f:6e:
6c:a1:33:29:7d:f9:76:83:65:27:de:4c:51:27:e6:5f:23:d4:
9f:59:32:09:e3:67:05:30:da:d1:10:9b:94:e4:a9:9e:e7:18:
2d:77:d2:47:fd:33:9a:c3:fa:9a:db:ea:d0:de:2d:d6:33:17:
d2:16:43:34:8c:41:5c:fa:00:23:59:48:a6:ba:5b:f9:0d:3a:
5a:6b:33:17:46:00:b6:f6:ce:0a:0c:25:d9:91:98:e0:9f:46:
e7:90:78:29:99:53:29:26:63:bd:db:a8:9b:f3:eb:ae:46:46:
c6:fb:de:0f:27:5d:b5:a5:ac:db:5f:2b:2e:ee:b7:74:06:f9:
43:8b:82:2a:5d:26:e6:d9:71:cc:61:de:f2:49:ef:20:1a:f1:
97:39:13:84:1c:d3:d3:1d:8a:8a:aa:85:20:7f:70:98:fe:09:
4d:d6:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:19 2025 by rpki-client