Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: zH8G+ov8TVeAf3rcrTSIPdymrB1+gKzQXBOz7fKrlq4=
Subject key identifier: B3:EF:D6:20:39:06:FA:F5:52:1A:0B:A8:BA:FE:8C:2C:BB:B4:32:FD
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 0194BC04BF8C2AB1DF5ADD3EEF9F3356ADD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0DC3
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: lsOHf2NkZs5HYjv8SY79YNIzFwaxR9Qmn+HGPVKP4JE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bf:8c:2a:b1:df:5a:dd:3e:ef:9f:33:56:ad:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=b3efd6203906faf5521a0ba8bafe8c2cbbb432fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:94:ed:f6:ae:ee:eb:14:c7:d0:67:e0:db:
63:e5:e1:71:2b:88:25:70:64:f6:9f:17:2a:8e:04:
f9:75:e1:3f:9d:e0:ed:b4:9e:e2:e1:dc:5b:08:56:
d7:39:eb:8d:69:66:72:d9:52:e0:d3:6d:6e:48:bc:
3d:f7:f5:05:63:3a:14:46:c5:3b:3c:5c:4a:b6:ce:
98:e2:d5:d7:09:d6:fe:ac:c5:89:83:0e:af:f4:2c:
4a:d1:09:64:c6:77:f6:e3:16:72:da:0a:f4:39:d0:
3f:ad:1e:e2:3c:b4:b6:2e:0e:7f:fd:f7:71:07:3d:
02:bc:8a:6a:41:3b:0a:c2:49:a5:dc:02:a7:a1:39:
a5:d4:2c:c2:da:fb:8f:35:36:30:75:4c:32:af:18:
54:f4:a6:2b:bd:5c:72:a4:ce:28:91:b8:d7:72:ad:
97:d0:0c:f6:13:27:b0:7b:d4:f3:bc:90:95:f5:fe:
e6:3d:f4:d8:48:85:a1:e0:c2:72:8c:13:26:97:c8:
fc:1d:ed:5a:c0:c2:ab:fe:56:0b:df:85:27:3d:ae:
91:99:d5:ea:ac:62:1a:42:77:e6:f7:36:09:49:81:
ee:cb:de:10:19:82:1c:6f:93:02:a9:aa:aa:5e:ff:
d1:97:c6:fd:52:ae:d7:8d:c9:9a:b9:12:85:31:a1:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EF:D6:20:39:06:FA:F5:52:1A:0B:A8:BA:FE:8C:2C:BB:B4:32:FD
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f9:a5:1b:e6:f7:7e:2b:70:55:dd:ac:3e:59:c6:25:df:91:
0b:28:39:f6:82:73:e5:1e:73:0f:e3:fc:8e:d1:cd:c5:8a:08:
f7:72:1c:dd:4a:d9:36:e0:db:bd:61:8c:a0:dd:fe:65:1c:5b:
fb:09:5a:94:78:44:a9:ea:b0:92:cc:18:c2:ba:4d:1c:d4:8f:
e2:29:cd:ef:14:60:8c:0c:8a:bc:00:98:c4:4f:74:7c:26:dc:
5d:b8:60:f3:2c:8f:85:31:1f:8d:9c:38:5e:ce:56:33:ee:97:
42:bb:dd:17:b3:06:88:d1:6f:6f:05:31:aa:b5:a3:bc:c3:ef:
b7:99:d5:4e:86:9d:4d:e8:67:8b:45:d1:27:ce:fb:f4:23:c1:
60:a9:ae:f7:7e:92:ef:67:f6:68:4f:0f:3f:28:6f:90:a7:2f:
ba:2b:f3:d8:bb:76:fd:3a:70:c5:34:37:4a:d5:67:d3:79:e6:
43:bd:88:f6:3e:e5:04:e2:18:15:c7:e4:eb:48:ca:28:a9:1b:
35:4b:21:d4:a3:0c:ee:51:27:67:8f:ed:2f:5e:27:57:83:16:
9b:82:da:d1:d8:1c:b8:78:c3:a1:84:44:ed:93:55:4d:7f:0b:
f2:ab:50:ff:01:25:7c:1f:e1:e7:53:f6:51:e5:6b:ea:06:38:
c5:09:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:35 2025 by rpki-client