Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: Xw2L1bTF2fIaSgrDETMotWVArCYhXpeQJLI/k9X5yko=
Subject key identifier: 2E:63:0E:FF:24:18:EB:06:D5:9E:E9:4B:8C:66:C9:EF:33:33:D1:72
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 0194BC04EDD1DB9333781E17DB21BCDFECA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 01B9
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: 2xtt13umeFLlo4YvvVvlQPLeUUncpBHKMfcxWGRWgOU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:d1:db:93:33:78:1e:17:db:21:bc:df:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=2e630eff2418eb06d59ee94b8c66c9ef3333d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:54:1b:1a:63:03:04:e6:19:71:0d:f9:d3:
a1:8c:97:63:26:12:62:3c:2d:1d:be:ef:35:96:c0:
8a:bb:30:ab:b8:a7:88:1e:e2:f5:2d:04:cd:6d:83:
b3:19:7c:39:27:7c:60:f9:c5:b1:50:2e:70:fb:36:
80:58:fe:79:c2:f5:b8:60:8a:c6:75:cb:74:55:f6:
91:8b:a7:c8:c3:f3:4f:68:41:c0:3a:88:92:4a:8c:
3d:1c:90:88:f4:dc:fe:9b:ee:92:cd:f8:d8:57:af:
87:37:d4:95:ff:0c:89:c7:91:1f:01:c2:12:e0:34:
8e:18:bb:c4:3e:49:ba:76:1f:d3:69:d7:19:90:96:
dc:4e:32:52:df:49:82:d6:b9:88:33:ad:1d:74:26:
e9:de:82:99:e9:fb:af:be:cd:89:5b:7f:f0:fc:75:
c2:37:52:de:96:ae:ed:9c:15:3e:03:83:b4:c7:ed:
43:1d:84:be:4b:d9:c7:f8:fc:4e:4e:33:6f:11:56:
9a:af:33:f5:40:61:f3:35:17:73:8d:58:11:a0:4d:
fb:5e:03:f5:ff:a6:03:09:0c:f7:ee:1f:2f:85:cc:
2e:ba:15:3c:58:11:c9:07:0d:09:69:c0:50:68:85:
c4:f3:50:94:af:be:a0:93:d6:93:d9:ce:6d:ad:ec:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:0E:FF:24:18:EB:06:D5:9E:E9:4B:8C:66:C9:EF:33:33:D1:72
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:13:08:db:92:c5:7a:12:75:eb:ab:f1:38:41:92:20:b3:17:
86:f7:ab:b4:9a:a6:df:7a:31:f9:d0:eb:cd:9f:fd:8b:40:30:
81:10:b3:a1:62:f7:4e:f0:1b:ef:2f:95:20:64:8c:35:5c:b6:
b6:0d:4c:62:f8:c9:fa:52:1c:8e:67:28:c9:c6:8c:a5:a7:48:
28:4c:66:f2:23:10:3d:68:82:2e:00:f4:3a:39:13:ba:7f:52:
4c:59:9a:af:fe:eb:69:27:06:7c:8b:3d:36:66:7c:81:92:9c:
98:cf:8f:08:ef:50:68:43:1a:be:e6:4b:1a:9a:1b:e1:2b:e4:
75:f3:ce:1b:b3:7e:9f:a8:56:83:6a:57:f5:2c:5e:32:f6:65:
14:81:7b:86:54:f1:b8:97:43:97:37:ce:13:9b:9a:64:38:a9:
72:a1:b2:ff:3a:8a:8f:a6:1e:a7:d3:49:6b:07:24:01:71:2f:
d4:63:39:f5:1b:4a:54:d9:fb:81:32:00:d2:8d:f2:1b:ec:87:
9c:27:06:02:1b:c6:7c:52:43:68:6d:14:c1:9e:42:58:14:13:
70:d9:21:f1:78:81:8d:31:08:54:ff:f0:d6:55:c3:bb:5f:c9:
9c:93:1c:ed:c2:f4:93:4b:ae:71:e7:c2:ff:63:fe:1a:e6:b7:
e4:55:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:26 2025 by rpki-client