Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
File: RIGO8G79biLUcUBKtTikucgH7-A.mft (raw, json)
Hash identifier: PTnPRxKHkCHu9r7PzGRrRISjSAp6pJU/iUnC3uUV0Dw=
Subject key identifier: 70:9C:94:51:BC:EE:83:49:44:9E:5F:46:1C:6B:4E:A2:28:48:D6:22
Authority key identifier: 44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
Certificate issuer: /CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Certificate serial: 0194BD17722E6E4BE70565871020D3C37638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: RIGO8G79biLUcUBKtTikucgH7-A.crl (hash: 7SjL28O81P0IJpvREA+AUABNaymMnR4h/ahaCNI/O/A=)
2: gVTOZDUERQqeJ1ADkfu8mZFQa3s.roa (hash: odk8IfZ2FDqkprFgoeInqeHkb7oDViev8pVCzwkhG+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:2e:6e:4b:e7:05:65:87:10:20:d3:c3:76:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44818ef06efd6e22d471404ab538a4b9c807efe0
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=709c9451bcee8349449e5f461c6b4ea22848d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:76:26:9d:70:0d:25:7f:4f:ae:ec:c0:ed:
51:00:51:6c:68:5a:31:1c:f7:c2:06:52:cb:85:df:
93:f6:ab:c9:5c:f2:bf:a3:f7:ad:72:ef:ee:49:67:
13:7e:c5:13:ee:18:19:37:d3:c5:43:ed:19:88:64:
5b:25:04:8f:cd:b6:7b:17:4c:d0:db:87:d5:48:e1:
23:fc:9a:67:42:6f:1e:c4:2a:58:fa:cb:df:68:be:
39:cd:77:38:ba:e7:27:b7:03:8b:83:31:c7:2d:56:
25:da:97:7f:dc:e7:96:61:88:4c:18:25:d3:70:54:
fc:78:a8:ac:ce:25:78:f0:41:03:d5:14:78:72:7a:
fe:aa:08:d6:b5:be:ce:25:1c:d8:2e:79:db:b7:12:
7c:b7:e7:a7:43:97:82:45:13:8c:ff:28:e5:8b:e1:
c5:d2:94:a4:58:e6:a2:8f:fa:34:9a:54:c9:fa:c6:
2a:97:13:5c:98:ed:3a:75:e6:94:7f:f9:cb:4a:f9:
cd:91:f0:f9:59:c6:9a:39:62:2e:5f:d3:98:46:7a:
0f:a7:f9:4b:d5:34:58:62:1a:c6:81:e6:19:07:70:
33:0c:bb:71:e5:98:24:9f:5e:49:df:91:7d:d1:a8:
a0:89:cf:a3:93:24:e1:0d:d5:cb:de:89:26:07:95:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:94:51:BC:EE:83:49:44:9E:5F:46:1C:6B:4E:A2:28:48:D6:22
X509v3 Authority Key Identifier:
keyid:44:81:8E:F0:6E:FD:6E:22:D4:71:40:4A:B5:38:A4:B9:C8:07:EF:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIGO8G79biLUcUBKtTikucgH7-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ba6b0b-382e-440f-8db9-35afb5c248b6/1/RIGO8G79biLUcUBKtTikucgH7-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:4e:60:2e:51:42:60:27:9f:5d:f5:12:1a:97:d4:00:b9:55:
fd:f4:69:32:bb:ca:5d:64:8c:c4:5e:ae:df:d5:c6:5d:cc:0d:
54:1c:2f:b1:13:23:d6:14:dd:56:3c:b9:85:ef:9f:51:5a:b6:
43:db:92:f7:53:1f:76:ff:15:de:ac:a4:38:7e:1b:4b:78:17:
11:7e:17:29:67:36:44:94:5a:0a:a5:a3:2b:8a:b5:3d:0e:74:
b7:fc:41:af:e6:b9:65:c9:eb:39:72:32:77:b4:5f:2e:9f:b0:
63:e7:35:ce:80:3a:d8:75:8e:d4:4b:8d:b9:44:7c:c7:f5:5b:
d1:ee:ad:9f:4d:6d:21:55:e0:31:24:29:ee:36:5a:15:55:86:
38:2d:4e:74:68:8f:0a:d5:4c:96:31:ac:66:a9:f8:b3:b0:97:
18:17:a7:83:3e:0a:45:99:c1:dd:c7:06:d3:e8:c1:d1:81:c2:
18:3f:cc:3c:ec:2e:17:2d:99:fb:34:15:95:75:7e:3c:3a:6b:
2e:92:4a:75:fb:b5:23:47:e9:f7:ec:34:df:53:b3:81:11:85:
c7:03:7e:47:ba:12:26:2b:d8:80:7a:e9:27:9a:93:ed:de:f4:
ac:af:16:5e:c6:ac:7b:80:45:ec:4e:63:13:06:3b:4b:e0:4a:
ea:e7:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:37 2025 by rpki-client