Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
File: 1GL5scD2-pylMXZOJtOu0hG_7YE.mft (raw, json)
Hash identifier: 8xqjWGdLkfXaKkwO4RYgduM8UvdFNZ6lSABhaKMgN/E=
Subject key identifier: C6:AD:CB:9B:2E:1F:26:CC:98:C2:20:89:D0:DE:64:7C:9C:84:68:DD
Authority key identifier: D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
Certificate issuer: /CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Certificate serial: 0194BCE0826BBEE3475EA40AF80DBE2D27AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
Manifest number: 0A49
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 1GL5scD2-pylMXZOJtOu0hG_7YE.crl (hash: MyAW2MxzHZXhuqrw73Znk6woYVHa581j0Y77gcysA6s=)
2: CzS60ntrl-ifakYiPMHnNys_2hg.roa (hash: gJEVLSYuR5fsAEatKrGL8Os1DpygWBOtVxsvnHWW9x0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:6b:be:e3:47:5e:a4:0a:f8:0d:be:2d:27:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462f9b1c0f6fa9ca531764e26d3aed211bfed81
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=c6adcb9b2e1f26cc98c22089d0de647c9c8468dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:b1:fe:f3:96:99:b0:28:d9:5e:6b:5b:46:
54:36:68:82:28:8d:9a:94:ef:bb:5f:43:dd:18:2c:
3c:58:2a:57:55:5b:6c:d4:25:bf:a9:cb:6e:09:4c:
60:41:d8:1a:0d:3c:8f:4d:8f:a3:d5:8c:30:58:28:
0c:ca:08:bb:47:cb:d5:42:f1:56:ac:aa:65:a3:cd:
dd:33:6f:df:03:43:1c:ce:08:a1:62:70:cf:d4:3b:
f1:ea:13:88:f8:70:e1:f9:46:b5:73:9f:bc:83:90:
e1:4b:70:22:ee:0b:a4:65:7d:66:61:4e:28:a0:04:
32:82:d6:1a:24:98:e6:90:28:ec:ef:ef:86:b2:0b:
b4:b9:fe:f4:20:b2:4e:41:03:b3:8c:a2:99:27:2d:
b9:2f:63:47:e2:4d:bb:e2:83:e2:48:09:0d:c8:58:
64:1f:83:f5:67:2a:91:52:e5:b8:1c:31:e9:f6:a7:
9d:ee:56:10:58:26:0e:0a:bb:fa:7a:89:42:f5:63:
02:bf:c7:28:26:2d:44:ad:03:b6:50:a8:15:55:06:
16:48:b0:60:78:c7:d4:f2:3b:1b:77:f6:10:29:ba:
98:01:ff:18:09:76:63:c9:56:8b:24:4a:3a:1c:17:
5d:19:72:7e:79:ab:c8:df:c1:ed:d9:ea:00:43:56:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:CB:9B:2E:1F:26:CC:98:C2:20:89:D0:DE:64:7C:9C:84:68:DD
X509v3 Authority Key Identifier:
keyid:D4:62:F9:B1:C0:F6:FA:9C:A5:31:76:4E:26:D3:AE:D2:11:BF:ED:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GL5scD2-pylMXZOJtOu0hG_7YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/100c81-56f5-4db6-a66a-b1043b635a1e/1/1GL5scD2-pylMXZOJtOu0hG_7YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9f:5d:cf:d1:42:07:ff:fe:7b:11:24:0b:8f:c5:ad:33:37:
25:d9:5f:bc:2c:87:a0:5d:99:81:31:d8:f1:b2:5c:f9:3a:8b:
1b:27:1e:52:cc:a1:5c:f4:86:03:31:cd:b4:f8:81:4a:c4:ae:
bb:f3:09:dc:ae:28:8c:23:b6:a3:e4:8f:71:14:45:72:c3:e4:
da:63:14:a8:fe:36:ee:a0:79:04:01:a7:5e:25:09:9a:99:5c:
36:f9:a2:3b:77:2d:a4:c1:67:6a:59:a5:05:20:9d:80:10:1a:
3b:c2:78:b4:df:ec:11:c5:5d:5d:81:c5:5c:9b:33:ec:b3:73:
a7:2d:5f:f3:53:75:49:63:c7:65:1d:f3:ce:e5:ac:6b:d4:b0:
13:50:99:10:5d:ce:27:5b:fb:df:a8:59:87:d8:8b:21:ca:49:
bf:50:5b:55:f3:e2:19:62:1f:de:df:a3:40:4b:4b:92:c5:fe:
38:62:dd:8b:c3:af:75:fe:e3:33:7a:a7:b1:ce:35:11:4e:84:
82:80:e3:18:bd:84:28:46:85:6d:be:c4:ac:c6:7e:2a:9e:66:
b5:13:22:00:30:3a:f7:07:28:c6:98:c3:5c:99:d4:a5:c3:b7:
c8:26:3d:41:51:d3:7c:e2:ad:b4:df:17:08:37:c9:8d:37:82:
19:72:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client