Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File: g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier: AjaIJxkdxk0uj0/8PsOf24ICUbBMMEuqQ+Fe1ciPZSw=
Subject key identifier: A3:B1:07:56:34:F8:44:E5:BB:FF:62:27:9D:6C:57:DE:6E:55:E4:D8
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 0194BBCDDF3CE26112985E4CF98B8A2B97ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number: 13FA
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: lE48EFnwGfS4zU3ihrTHypdrQtSFz/sf5A9dcQOvb80=)
2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:3c:e2:61:12:98:5e:4c:f9:8b:8a:2b:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=a3b1075634f844e5bbff62279d6c57de6e55e4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:6d:5a:73:3c:f3:d8:50:7f:1e:fa:92:80:
79:41:11:8b:74:86:12:be:87:fd:ba:98:96:1e:58:
68:a1:e1:81:fc:3b:d5:73:18:fe:f6:96:87:88:ce:
80:5b:69:f7:2b:48:f1:76:2e:05:ae:31:8d:ab:29:
80:87:fa:47:1c:52:a7:70:fd:14:ef:a8:a2:65:3d:
d8:16:37:4f:a8:2d:2a:15:2e:8e:96:cc:7a:2b:ad:
79:58:01:67:7d:fe:95:be:e4:d5:20:41:b8:7b:f4:
1c:b6:00:9d:db:e0:3b:96:1e:c8:03:15:bb:d2:51:
9c:72:45:ba:f1:15:af:68:a9:36:17:14:71:79:3d:
bc:2b:f3:b3:b4:b1:00:fd:f1:51:45:c1:32:9a:9b:
55:c1:6c:59:91:49:48:3c:1e:d8:51:39:b8:87:46:
82:1e:07:0f:78:63:2a:72:bb:b5:07:25:48:88:3a:
7c:59:73:e2:71:a3:3b:cb:c5:8a:36:0e:ef:04:41:
35:3c:75:7d:d1:36:30:8a:7d:1e:ac:a4:1a:05:67:
48:1a:c9:ec:5f:cd:2a:97:a6:af:bb:2d:46:9b:ae:
10:f5:69:32:3b:24:3c:f1:c6:a1:ac:17:05:f4:6d:
e0:f0:c9:55:cd:2d:22:2a:4d:b4:87:7a:f1:0b:24:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B1:07:56:34:F8:44:E5:BB:FF:62:27:9D:6C:57:DE:6E:55:E4:D8
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:cc:58:85:b0:40:2f:0f:91:5e:de:0d:c8:62:6e:a3:01:
93:43:6d:3a:04:db:e6:17:8a:87:bd:28:ce:cb:01:08:33:94:
59:11:1b:50:3d:a4:46:34:c3:50:a0:99:a8:73:4a:e8:23:49:
62:54:11:28:06:9b:a4:b8:04:a0:0b:80:6d:5e:71:d7:64:2a:
bc:c8:f3:ea:8f:06:1c:5b:66:ed:05:45:63:43:cb:4d:2a:ee:
02:e9:69:b9:73:22:67:fd:16:f1:b9:0d:19:c4:0f:80:d6:a5:
f8:81:34:a7:ea:de:28:c6:4a:ce:c4:7e:0d:3e:9c:b7:70:70:
ed:fa:f7:e2:69:b6:64:46:a1:ea:6a:25:43:db:22:43:81:db:
13:99:a4:56:8d:60:58:06:4b:53:ce:e2:b8:ad:c2:cd:af:01:
99:cc:c5:28:79:8c:57:43:14:f0:12:42:24:43:b1:c7:4b:fd:
c4:2f:0f:5f:ac:9a:8a:f3:a0:66:fd:a5:bc:cd:52:4b:92:7a:
8c:1c:73:33:99:b2:d6:d6:73:54:2a:c9:39:66:88:3e:ae:64:
84:96:c2:9d:8e:93:f9:45:fa:16:5d:dd:ca:62:85:7d:ad:d2:
6c:ae:ed:91:65:70:62:d0:82:6a:a3:14:8a:a5:cc:e7:db:d3:
90:18:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:23 2025 by rpki-client