Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File: g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier: eLFDost5GS79AsNNyZWqhYvF4RDf5asn0s75ULJ8Qw8=
Subject key identifier: 76:2A:4C:BD:FD:9B:F7:C7:F9:6B:37:96:28:C9:A6:60:90:89:7F:CF
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer: /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial: 0194BC05062B91276FDE85AF9BB6E739AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: mR5KB2/tfRLk0joRWAjSo+rzjdezANOhbdWxO33T3r0=)
2: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (hash: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:2b:91:27:6f:de:85:af:9b:b6:e7:39:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=762a4cbdfd9bf7c7f96b379628c9a66090897fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:a1:55:21:79:e9:b3:95:99:7c:4a:1b:5f:
bb:78:6b:e6:97:6e:ab:21:61:f7:20:19:62:4f:c5:
ba:48:9e:16:91:be:a7:f7:54:bb:95:d1:34:c7:c5:
ba:1c:57:88:91:fc:30:33:d7:33:fc:0d:93:60:e7:
7e:11:42:a1:40:cf:cd:49:a7:27:56:20:4d:62:a3:
77:7a:17:df:55:bf:46:50:65:46:85:ea:92:3d:84:
09:ad:1d:f8:a0:60:f1:70:d5:26:a5:3d:96:e0:98:
31:1f:d7:1c:da:f5:5f:5d:24:b2:f2:80:9c:71:3b:
dc:3a:70:66:c7:e7:fc:90:b2:73:62:ea:bb:bb:73:
f5:ff:5f:d0:dd:5b:99:17:82:65:b9:fa:88:30:e4:
4f:ff:e3:ef:12:94:91:31:4c:24:62:c8:1e:7c:22:
e7:96:40:89:b8:71:15:95:64:5a:41:b9:0a:ae:a2:
32:3d:6a:cb:0e:a9:91:1e:74:88:a2:a8:cc:b0:7c:
98:18:58:70:ef:a7:03:b9:2f:a9:3f:c3:db:d5:21:
28:d1:d4:a5:2a:b3:be:85:0a:06:5e:79:d5:f8:f7:
5b:b7:9c:9c:4b:01:67:14:c2:50:96:7a:fe:cb:b4:
b5:30:12:8c:da:ff:4c:80:d2:9d:bc:e9:9c:f3:b7:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:4C:BD:FD:9B:F7:C7:F9:6B:37:96:28:C9:A6:60:90:89:7F:CF
X509v3 Authority Key Identifier:
keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:46:d2:8f:b0:0f:96:c7:37:b9:ca:16:85:4d:af:3e:e8:4f:
23:8e:c9:bf:0f:87:d8:d0:a3:47:75:83:8d:76:42:44:1e:6f:
39:79:73:87:81:68:37:91:6d:d4:fa:9a:bd:63:06:10:a0:55:
ab:92:ff:2c:df:8d:f5:0b:90:7d:89:ec:80:13:f5:8b:39:90:
e1:4f:6d:ea:45:bb:d8:73:f2:05:06:f6:da:3b:bf:e6:e5:32:
31:6c:68:a7:44:ef:9a:2d:32:d5:1f:a0:f1:83:63:4e:d1:54:
17:34:5b:3c:5c:9a:56:b5:3b:19:a2:09:bf:60:49:a8:05:b8:
3b:94:e3:88:72:28:a9:98:3c:a8:36:7a:d7:a2:16:93:9a:6d:
fc:e5:fc:a9:32:29:92:0f:67:9c:3d:95:63:68:b8:3e:34:d6:
10:d6:59:f6:52:24:5d:5b:e6:4f:94:50:8c:e9:bf:79:b3:2a:
1b:f7:b0:b9:e2:8c:c1:c2:4d:3c:cc:13:82:f8:f4:4d:3c:a6:
30:3d:e9:89:fc:1c:68:7e:d0:d8:1c:1d:14:a8:2a:5b:27:ee:
62:f7:b3:b6:29:2c:35:ec:6d:d8:85:58:74:86:f5:3b:3a:d4:
35:d4:23:d3:1b:63:c4:c3:77:8e:b8:3f:06:6c:e2:10:37:08:
53:dd:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:57 2025 by rpki-client