Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: s1DpdGyIi23kaogHdbTBFksuZVs+nccUS41YY8XKkcE=
Subject key identifier: 8F:DC:63:18:73:DB:51:A7:BC:90:85:26:DC:CC:86:85:71:52:40:16
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 0194BCAA42395F7E7019099545A05B18F37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: 65hDnquAFrl2lMS/NgU+P8c88oI+1AFfc5vQ7QtuF1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:42:39:5f:7e:70:19:09:95:45:a0:5b:18:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=8fdc631873db51a7bc908526dccc868571524016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:71:5b:b8:30:c0:9d:f2:42:b1:43:53:e6:
e3:ae:b8:a4:ae:2e:b3:a8:15:56:45:f9:e2:f6:b3:
fb:a3:cd:91:65:13:f8:28:7d:86:3e:69:dc:fd:b7:
44:76:64:3c:11:1e:cc:8e:99:40:e4:48:ce:c5:80:
31:06:88:3c:19:9b:d4:40:90:66:a8:28:ba:39:95:
e4:f6:02:ae:d9:cd:2e:d4:79:60:f9:43:7d:df:d0:
3e:8a:3b:0a:7a:09:da:7b:e3:36:fe:a6:fb:4e:45:
13:b4:5d:96:28:0b:69:9f:fb:e3:1d:f6:f4:82:c5:
bc:a1:c3:b3:58:c0:12:2a:bb:3a:d1:6a:88:a6:f0:
c0:4f:af:dd:12:d3:f2:74:17:b9:87:f3:a5:0e:82:
d0:f5:d5:77:c8:b1:9a:52:61:90:a2:58:b8:3b:b1:
18:45:bf:f5:2f:32:96:b8:c6:9c:c1:fe:c2:6d:0d:
1e:38:57:2e:bc:ed:3d:47:7d:5a:52:12:34:57:5c:
30:68:60:95:4d:ee:3c:58:2c:70:75:37:ee:02:9f:
3f:df:ef:df:76:2a:a0:9d:cb:af:ad:06:0f:e8:47:
85:cc:e4:9b:de:d8:5f:6b:77:5d:d4:93:5e:f5:6e:
f0:98:60:79:99:5e:13:59:cf:dd:d1:b9:a6:fc:fa:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:63:18:73:DB:51:A7:BC:90:85:26:DC:CC:86:85:71:52:40:16
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:85:d2:90:af:7a:36:d7:b9:7c:a9:0e:00:58:e7:9b:6e:d2:
ad:42:ee:93:d4:6b:2d:fc:58:06:fe:a8:0b:4a:69:e9:d8:35:
aa:21:59:0b:a1:ea:5a:9f:39:df:d5:aa:85:bc:26:4d:dc:3a:
45:6f:8b:ad:3e:a4:42:d4:04:d9:05:73:1e:0b:91:e6:8b:f6:
c4:ab:72:eb:65:37:88:d9:7a:a5:59:a7:7b:02:a8:a0:fa:1a:
c4:66:2a:0e:1a:da:2c:f0:e3:6b:19:ef:db:e8:32:68:63:2a:
49:7d:e5:b2:09:25:ab:9c:66:26:c5:a7:be:fa:c5:c5:99:e1:
d7:45:bb:e3:c7:f0:17:75:4f:ee:c4:9b:8f:4f:dd:f9:a7:d3:
a9:c7:4f:47:00:fa:78:2b:21:37:81:71:b3:a4:74:25:89:d6:
39:04:74:9f:f8:70:cc:c4:1f:66:7e:38:16:60:37:d4:26:ef:
f8:85:c5:78:a2:8d:e0:4b:52:ba:1a:e7:7e:0f:65:ea:fc:3f:
95:64:30:ca:fc:20:46:62:da:93:0e:05:05:67:37:70:53:56:
56:c6:75:f7:8a:d6:21:d5:dc:a9:73:aa:d1:b7:2d:7d:35:c9:
54:e6:67:79:5f:d3:de:21:35:0f:99:ac:b5:19:35:b9:76:b1:
f7:2e:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:12 2025 by rpki-client