Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier: znErS+Pb1dQzaikUuJpKHmvyI+J6woQMJCwmu2av6wo=
Subject key identifier: EF:BE:19:F1:78:AA:35:75:C1:F0:90:54:DB:81:1D:52:65:F0:E3:44
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 0194BD1754BFC98FCB9A515E6A1D65B441AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: Odo7dA0aiI3tfqXjLSSVT1p2s2T/vYzBoolIRv6iXyE=)
2: jFeXSLOcmKjdy19dvekbxvl1dmc.roa (hash: 52Ov8zQceO7HlblWWc/Kf8ebS6bj291XEV6Vi2okLGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:bf:c9:8f:cb:9a:51:5e:6a:1d:65:b4:41:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=efbe19f178aa3575c1f09054db811d5265f0e344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:f7:96:90:cb:d7:69:ee:fb:ad:ce:e2:81:
52:dc:8b:c9:0e:90:1e:b6:b3:f4:34:28:f5:75:f2:
60:73:aa:ba:d0:4d:64:8f:99:76:b7:df:18:63:c5:
de:04:f0:bc:3d:79:e5:f9:86:77:7c:39:38:69:06:
d1:09:2b:01:9c:a3:21:60:51:14:9d:4b:17:60:0d:
04:b0:cd:9b:8f:c4:3b:70:b8:d7:e9:a5:1a:8f:9d:
54:a1:55:a6:70:0f:2b:0a:2c:f0:77:b2:7c:c5:c6:
38:73:66:1c:34:66:37:9b:56:d7:75:1c:c9:95:2b:
e6:0d:c3:7a:0b:33:e0:4e:1d:33:de:4a:0c:50:c1:
ca:b5:6f:d7:ca:cb:6e:3f:95:1b:3a:15:83:90:b1:
57:65:14:d9:fb:d0:31:ca:31:a2:36:3a:90:83:2d:
70:5a:5a:3b:a8:80:8b:93:af:67:d1:33:0f:15:25:
d5:fa:5b:ab:6c:2e:2f:dc:ab:64:97:aa:0b:cd:22:
ef:24:cd:1b:63:38:f4:5a:a0:17:75:d5:89:d8:46:
b2:a6:3d:43:be:45:84:d6:17:c4:5f:e7:80:2d:6d:
d9:89:c8:73:f4:53:6a:45:87:4d:ea:a9:0c:76:6a:
46:e5:11:2c:9d:a7:c7:84:93:02:19:7d:68:06:13:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:19:F1:78:AA:35:75:C1:F0:90:54:DB:81:1D:52:65:F0:E3:44
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7a:bd:ed:7a:cd:19:45:a9:48:52:59:55:53:ec:22:da:e4:
59:31:e5:80:f4:d9:93:f3:0b:0e:4b:75:8c:12:1e:4a:62:a2:
ad:d6:a9:e7:a0:48:50:df:07:95:52:22:56:3c:b0:8b:52:80:
e0:41:1a:62:8c:a4:e6:e4:79:7b:e6:cf:8a:42:00:1f:35:ed:
cc:a5:c0:a6:d4:6f:7b:4d:bd:59:87:36:11:2d:1d:2d:56:cc:
c9:25:46:35:69:56:2a:f7:36:80:2b:f2:3f:a8:f2:b0:d1:5f:
35:e3:5c:c6:3f:ed:82:c1:1c:7e:01:a5:4e:e5:3a:e2:05:14:
be:d2:32:6d:6e:17:1f:65:6d:42:7e:c5:db:a6:54:b2:fa:7e:
f2:34:20:f9:b9:c0:41:ed:06:66:5e:88:d1:f8:94:6b:9f:1f:
11:2f:0c:43:52:88:5b:19:0a:ca:61:5a:c5:62:93:dd:7f:6c:
94:d4:36:60:37:6c:e6:4c:16:87:f0:da:64:46:9c:7e:30:20:
51:49:da:63:80:98:03:e7:a9:8b:88:95:91:8a:59:aa:86:f0:
f0:dc:56:28:31:1e:e6:a9:68:02:a4:7d:0c:7a:83:4d:ca:93:
4c:32:d6:27:80:f7:2a:f2:d6:e8:43:20:44:58:d2:78:56:20:
3d:87:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:19 2025 by rpki-client