Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File: g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier: QOZolKQCbDxeEtmnzW5olxpAR9WXKE9eijxDF3P7tkA=
Subject key identifier: B9:81:8C:DB:DF:A4:A1:60:D8:94:74:DF:2B:47:D1:32:D1:95:BA:5F
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer: /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial: 0194BBCE90398E1B90BC26D5970F50AD2F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number: 059C
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: En8-GoJ8b8wzWMOZSSvYdOC_d0Q.roa (hash: PL43OakReMXHfp4mMkhTD4X7qZfQiScwqWGHnEOSCsQ=)
2: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: GU+yQ1mGqt2K/qcsNHVv6dD7WwqKtBOtzbXH2OI0aXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:90:39:8e:1b:90:bc:26:d5:97:0f:50:ad:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=b9818cdbdfa4a160d89474df2b47d132d195ba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:23:e2:70:12:28:11:bc:51:e0:db:ca:8c:
e3:f8:95:25:fc:3a:f0:db:c1:6e:ed:a4:7c:fb:dc:
ce:90:8d:e4:fe:f7:7e:97:89:a2:ab:69:d8:a2:39:
c6:e3:ff:b3:5f:be:ff:6c:9a:90:8b:d8:a4:1f:dd:
6a:fb:e7:fe:2f:4b:68:4d:21:3a:ec:b7:9e:22:af:
f7:0e:10:9b:fe:7e:94:9f:b1:9c:5e:79:01:29:35:
87:48:01:f6:20:2f:e1:19:d0:7a:87:e8:93:f0:1e:
71:13:5e:09:5c:39:1f:e5:12:94:b3:65:c8:1e:06:
d5:a4:02:25:8b:89:c8:76:5a:93:84:2c:73:df:41:
a8:ca:e8:8d:55:71:43:b2:aa:63:a7:9f:41:87:61:
19:3f:4a:e9:59:a4:64:49:c4:c4:ba:fe:4c:0f:22:
ff:7e:53:00:7c:2b:ef:77:b5:8d:3e:bc:41:29:d1:
79:a5:cb:cc:69:9d:46:17:76:04:62:9a:f6:7e:c1:
d4:2c:ec:00:c4:30:07:5a:7c:d8:1e:db:23:71:12:
5f:ad:42:8d:e3:de:d2:f2:03:b0:a5:52:07:cb:0f:
ab:a5:c6:dc:20:ce:49:df:59:e2:2f:cf:a4:1a:32:
51:f1:49:b8:cc:9b:f3:9f:a8:b6:b3:1d:d9:ed:f7:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:8C:DB:DF:A4:A1:60:D8:94:74:DF:2B:47:D1:32:D1:95:BA:5F
X509v3 Authority Key Identifier:
keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:f5:05:40:25:9c:67:c4:93:11:51:b6:e8:c4:8c:26:c3:
80:22:46:2e:82:85:dc:b4:1a:2e:39:92:58:8e:f6:d3:e4:90:
06:73:d0:da:c7:75:77:a2:d5:e1:84:57:1b:fe:90:c2:25:14:
cd:e6:9c:38:d0:64:ed:23:99:29:78:d2:25:f1:f9:f4:b6:0c:
c9:98:c0:6e:2c:1f:b7:df:49:6b:45:6f:5f:80:4e:52:1c:4b:
8c:8d:1c:f9:ad:87:1b:6a:17:81:94:c5:6d:3b:89:86:8d:d0:
c5:bb:da:96:36:98:84:47:42:3b:01:e6:95:d3:0c:07:58:41:
31:92:95:f7:14:2c:da:3b:db:ac:d5:b3:a0:75:2d:4e:33:63:
99:12:dc:38:fc:2b:54:bc:d3:6e:42:05:d7:16:e0:da:9a:b9:
2c:f8:9b:40:df:e4:7c:e7:0a:e0:59:44:e9:ef:9e:d8:da:c8:
79:c5:4c:1b:9b:15:27:23:d5:1c:37:2c:14:c8:b8:df:27:b0:
23:8b:c5:a2:39:56:91:e9:c6:c2:43:36:21:fa:13:ab:6c:52:
ee:b8:0b:07:4d:6a:77:5b:dd:e5:86:25:df:f3:74:ed:e3:4f:
4b:35:7e:bd:09:15:e5:3c:2b:b5:64:c3:fc:1f:e0:17:ba:99:
84:c9:31:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client