Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: UbUwXS+4Y4liTnv+sl2diubDHrEgN6yEth1cF3JAoWc=
Subject key identifier: 11:6C:B5:2C:4D:B8:04:FE:F1:34:E1:74:36:0B:8D:F8:22:09:80:6A
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 0194BD4E85254D16DBDF5FB5C7962816C3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 0328
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 5hNBi4pOh8tuQ2-hbUmZAAcoj0g.roa (hash: bvf6+FGQm47HOMj5UevrWk1RDXzOnQeu8ZcjR9Z2g1E=)
2: VnV_NALClcugVnJ8tM0-ssB-Wvo.roa (hash: i5vFppJbIjgrNIbkedUgagHC+ZhmU+v4i2sVl3277z4=)
3: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: SdouJGCIKZ3Ft3W48bosOeZ3jBpc74MwOCExumia9og=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:25:4d:16:db:df:5f:b5:c7:96:28:16:c3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=116cb52c4db804fef134e174360b8df82209806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:98:65:01:9f:5d:13:19:00:ca:84:c4:c9:
21:6d:86:18:d0:f0:8b:62:b5:c0:02:65:52:66:0d:
fa:44:2d:be:53:f5:2d:1e:65:af:33:8f:00:ae:63:
49:8a:23:fe:73:e5:56:e1:40:90:1b:99:81:5a:60:
27:1c:39:c8:54:12:10:a1:7a:3f:b2:77:fe:67:a6:
df:e9:86:6c:b1:c1:14:fb:37:2a:3e:d1:bd:ab:77:
31:cc:16:2d:fb:58:ac:9c:15:6b:75:bb:75:0a:d1:
ca:bf:68:8e:28:21:d0:9e:39:3d:98:d4:62:5f:53:
a3:26:4e:3a:9a:df:09:ac:5e:8f:50:0e:ba:2a:31:
a1:44:3a:90:7b:c3:b9:60:35:62:21:1d:81:22:fe:
b0:17:79:a2:b1:c4:d8:20:b8:f2:4e:86:ec:74:80:
29:b4:12:36:f1:33:14:3c:21:f0:7f:27:09:90:4e:
52:26:da:b3:ee:0a:6a:ca:4b:f8:68:27:8c:da:45:
22:a0:ba:cd:ce:f8:aa:54:da:b7:5f:92:20:69:58:
9a:3f:cb:55:14:7e:0d:7a:1e:b3:9d:d2:2e:f6:32:
fa:31:77:56:cc:5b:07:ae:db:23:9c:fe:83:1a:25:
03:62:ab:32:3e:22:b3:d4:78:c1:69:89:bb:59:42:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:B5:2C:4D:B8:04:FE:F1:34:E1:74:36:0B:8D:F8:22:09:80:6A
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:6b:30:82:36:2d:e1:ce:a7:89:94:2e:01:88:9d:d0:79:
6d:b9:5b:fa:89:a0:a2:97:ec:d8:da:df:f0:ba:fe:7e:15:af:
80:21:1b:92:1a:f8:b2:5e:05:89:5d:66:fa:cd:11:4f:92:ad:
9f:6b:9f:8e:e3:dc:04:c4:c4:08:01:89:38:9e:65:9e:d3:30:
81:35:5b:a0:86:cd:a8:56:d2:3e:6f:04:10:bf:63:dc:7a:1e:
bf:51:e0:09:d2:09:36:4a:eb:fc:de:18:ea:ae:d7:50:7e:ba:
78:43:d3:a2:83:e1:92:c5:95:96:e7:d2:e8:73:47:bc:86:06:
d8:fd:a2:4b:ef:30:6c:e5:60:46:11:50:fd:28:a8:66:1b:98:
cc:4b:ff:81:ac:52:51:4b:1b:ba:a9:d1:a8:a0:d1:51:6d:89:
c2:47:09:35:75:ce:fd:00:8a:74:8d:4e:f3:2b:08:92:72:d9:
e1:20:b0:58:74:75:3f:c4:ee:c9:57:29:66:c5:12:7b:78:77:
13:a6:59:12:a2:9e:19:b6:aa:80:c2:eb:5c:9b:4f:09:ae:2d:
17:b5:24:0d:6d:aa:5b:a3:ea:48:8a:87:c3:1c:1c:61:1e:cd:
63:fd:c5:49:0c:3a:4c:83:e6:e5:b4:3a:b1:ff:62:2e:58:93:
bb:3a:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:46 2025 by rpki-client