Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File: guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier: qtzSylWLWS3rYf3unNWBMDNvXEmJc9Ng9WYi73dEkYA=
Subject key identifier: 64:D6:A9:F5:34:89:9C:B5:83:02:21:74:E9:43:C5:77:C2:CC:7B:09
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer: /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial: 0194BCE096CA1A9D96DBFC0D4B3917F81CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number: 0C27
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: FqQHS5x0K7fb3ABv-R1O2rQGEvc.roa (hash: 2VetqHsWLuCtCZQI5pXnNL52eNemAp797/ha4XRoM7M=)
2: _FNnAfXHIK3mS0z3F15N5D4m-eE.roa (hash: AzmbPxnJj3q2Pp6UGPDbM97rM3z/NgrygHufcP5z/7g=)
3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: YZhfMxw0YvW3bp7zcMn6Vo/E9W/fnjFFMu5OcJ4S/eM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:ca:1a:9d:96:db:fc:0d:4b:39:17:f8:1c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=64d6a9f534899cb583022174e943c577c2cc7b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:31:9c:63:62:15:ab:97:8d:3c:6f:89:ba:
38:0e:07:48:e1:16:84:d5:f8:45:d8:52:69:51:9e:
9c:52:47:aa:93:eb:03:ef:49:83:fe:6a:fe:84:6f:
b7:63:c8:1c:d7:a1:6b:09:c4:6d:06:b6:0b:8b:a7:
83:85:f4:cf:7a:2c:cb:29:5e:b9:69:bb:d1:4d:b5:
af:74:12:e5:b3:65:a5:43:90:6a:c5:5e:37:a9:3d:
ca:11:3f:68:e7:d6:3e:48:47:e6:85:76:c3:bb:64:
b7:56:f3:cb:4f:7e:72:97:75:8c:74:48:d2:5f:e2:
16:c1:2f:5a:79:89:26:c9:5f:a1:0d:4b:32:28:ae:
38:55:c0:3f:9c:76:ad:31:3a:43:ec:5a:e5:40:ea:
a0:db:a8:2c:e1:69:ba:cb:c9:ea:c9:d0:03:06:f6:
5f:e5:03:b4:41:e0:e5:21:8b:78:22:4b:93:35:4d:
59:00:8f:79:b3:65:82:47:e0:e1:3a:d5:34:2f:cc:
42:0e:55:2b:99:f5:9c:32:3d:36:77:19:64:67:78:
7f:be:a1:09:b7:48:5f:fd:2a:d3:0e:2e:95:1f:9e:
27:4a:89:3b:a5:40:f8:28:87:be:c2:45:ba:3c:db:
fe:ad:be:30:e9:78:10:71:20:3a:48:ee:85:a1:b6:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D6:A9:F5:34:89:9C:B5:83:02:21:74:E9:43:C5:77:C2:CC:7B:09
X509v3 Authority Key Identifier:
keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:f9:58:5d:e7:03:3c:d0:00:8e:dc:51:28:f8:cb:e5:7b:
e8:bd:3e:62:c1:c8:76:a9:4b:48:a5:e7:16:ec:6e:0b:7b:81:
e0:7b:39:04:50:4b:e9:b3:7b:1d:e8:ec:99:ba:a1:e9:ba:98:
80:3e:5e:7f:cf:c5:1e:30:37:b4:cf:9b:b1:fa:a5:c7:46:94:
9d:63:2b:ab:34:af:a6:27:26:7e:6a:20:07:b0:85:c8:91:95:
e2:a9:43:e7:37:a5:ab:51:42:72:b4:b9:5d:f5:28:c0:89:ae:
cd:7c:3d:d2:19:42:62:17:39:2f:02:4e:76:a5:ad:3d:fb:78:
30:73:b5:76:25:74:77:19:d3:ec:30:58:77:54:6f:e4:99:79:
94:36:8c:3f:2b:61:f4:05:f2:ea:fd:73:d7:a7:a5:87:51:58:
e6:8c:01:18:fa:3a:bf:8a:30:99:87:45:23:3f:e4:0f:26:17:
b2:b6:0b:bf:0b:68:16:32:ec:e6:ad:14:ed:17:33:5b:00:db:
aa:20:18:05:d1:f2:8b:9c:35:6c:36:03:98:1a:56:79:48:1d:
b7:c8:d5:af:5c:cd:99:4b:3a:e4:c0:81:d7:89:fd:23:84:a3:
4a:f8:68:e0:8a:f3:6c:0c:1d:f2:15:03:df:12:fa:ee:0b:f7:
38:e6:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client