Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: cMZqax4qCJb3btC6glHe9BGwfpxVJBpvwwW+CapqyfI=
Subject key identifier: 27:8F:B3:E6:6E:4B:A1:0B:E8:98:27:AB:76:53:A6:BA:CF:F4:73:6D
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 0194BD85B5D7697F45A8149629EED9D000B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 0FA6
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: UGrR__PyRipPzdjGAZBG7BppT8M.roa (hash: iYevY5/kIjNolOqwa16r2Chgd87dJ+qeTiEz7+9fEjM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: XFEOGWPUWk7ovbQJB2mnr7udPuCSCpZI8/IPW05cuhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:d7:69:7f:45:a8:14:96:29:ee:d9:d0:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=278fb3e66e4ba10be89827ab7653a6bacff4736d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:85:af:a1:34:4c:6f:04:72:93:e2:78:17:
6b:f5:80:cf:1d:bd:6d:c1:fb:b4:e0:53:33:cb:9f:
c5:cd:74:6f:07:fa:0c:f9:10:f9:02:db:80:86:1e:
60:1a:b9:09:8b:41:38:ca:3f:1f:8a:bf:79:31:1b:
bd:bd:49:51:1f:ca:bf:1a:80:e2:e1:54:6e:01:58:
93:56:63:c7:2e:4e:14:52:2e:5d:4f:43:92:4a:fe:
16:48:10:e4:51:85:14:a5:b0:6c:57:b9:2c:08:1a:
bc:d9:50:6d:0c:26:25:0c:bc:e5:04:81:ef:27:81:
27:47:86:d1:0a:8d:a1:12:c6:98:f9:3c:37:61:3d:
3c:b8:c4:7c:e6:64:dd:23:fc:e4:a3:4b:f3:b1:07:
b4:38:cd:6b:09:62:71:67:ae:85:84:c1:f6:1b:8f:
72:6e:bd:d1:92:6b:79:3a:b5:92:3a:96:19:14:95:
49:8e:97:bc:99:d0:6d:17:ca:23:15:6d:df:d1:dc:
47:18:4f:ed:99:e3:aa:50:23:84:38:64:b8:39:c5:
e3:9a:c1:1c:a7:78:32:0f:5c:dd:b5:c4:61:6e:4c:
8e:8d:ca:de:3b:60:b6:2b:b4:95:32:bd:f5:51:35:
f2:5c:6e:ea:05:aa:55:27:fa:14:fd:86:a2:b2:7e:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:B3:E6:6E:4B:A1:0B:E8:98:27:AB:76:53:A6:BA:CF:F4:73:6D
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:ab:07:b7:e3:7a:02:f9:73:83:0e:1f:ef:90:96:81:f3:
fd:ba:5f:4c:82:66:62:ba:cb:10:11:ea:36:da:a2:79:23:1f:
5e:19:bd:66:a0:ca:f9:bb:d4:8a:06:43:dd:2b:91:a1:6c:12:
63:73:2b:4d:d2:b8:a9:fd:2d:25:da:0e:23:d0:e0:95:9b:cc:
1b:01:50:48:0a:28:19:46:9d:6c:cd:d5:80:6e:fe:0c:80:1b:
a5:bf:f9:0c:d4:e1:85:76:0c:de:2c:ad:62:19:53:fb:c4:2e:
d6:97:f0:08:9d:f4:5d:c4:3a:e8:9f:5a:f3:62:24:e8:08:06:
4b:94:b9:f8:aa:cd:1c:ee:2b:a8:37:7e:c5:8b:2b:6e:1e:30:
e1:d6:47:a4:39:e7:fa:7f:77:e0:7d:41:82:2d:d3:22:de:f9:
25:aa:ef:f3:4b:14:d8:95:47:b8:d9:56:5b:7d:53:9b:89:18:
84:b4:ff:6c:e9:5e:ff:18:47:62:5a:a4:e8:17:49:ce:0c:35:
f6:82:b3:95:f4:e7:0b:74:57:e1:23:16:44:c0:10:3e:19:d9:
0a:3f:4a:40:9f:df:24:a3:dd:a4:d4:9c:aa:29:b7:f1:ea:b6:
ea:91:85:18:b9:d2:66:23:af:c9:11:98:6b:93:54:b9:bb:ff:
53:4e:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:11 2025 by rpki-client