Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
File: G6jqOiKIpq-PZKg4MALHQIVXmgc.mft (raw, json)
Hash identifier: tG4ZSxdLP4HfyM3Rvl7MIbiy2zx9USuhtTgMeHOXbDs=
Subject key identifier: 4E:C9:5F:E5:10:A4:4A:8B:5F:03:DC:77:53:44:9E:70:13:E7:ED:06
Authority key identifier: 1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
Certificate issuer: /CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Certificate serial: 0194BCE0A4CF44839A7463C1C2F4CEBD02B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
Manifest number: 12C5
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: G6jqOiKIpq-PZKg4MALHQIVXmgc.crl (hash: Qbh+qpVCVABYhjquOZiiL3Q8zng7wd/EAMD64JnwNEQ=)
2: awSvsuAzEkNxIrYxJqTZDb_nVnE.roa (hash: 3jZ+yIojuG+AZ6SFsISQRAEfZSYSxHFN/YCIQpbx+o8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:cf:44:83:9a:74:63:c1:c2:f4:ce:bd:02:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba8ea3a2288a6af8f64a8383002c74085579a07
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=4ec95fe510a44a8b5f03dc7753449e7013e7ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:bc:d4:7a:52:a8:04:3a:5d:36:1b:f7:80:
1f:c2:50:2d:88:c7:c8:87:bb:03:09:cb:d6:4e:7b:
c6:9b:18:53:b1:d0:b7:90:9a:f7:04:e1:f9:8d:84:
2c:70:f2:d2:41:59:3f:a3:98:0d:70:c9:e6:92:0d:
34:d7:3b:f9:96:50:ea:40:9d:21:b4:10:7e:17:f8:
1c:5f:8d:ab:66:ea:72:ab:4e:0b:a9:92:07:ca:16:
a6:e3:35:3a:a6:67:89:41:a2:80:6f:50:2e:54:10:
40:2c:3a:4f:7a:d9:1c:8e:11:f2:be:2e:0c:2e:98:
ce:a7:bc:4c:f0:c4:49:59:d3:72:e3:ad:eb:3d:43:
5b:ae:01:94:d0:5d:61:af:65:2e:ba:40:19:04:23:
3a:38:4a:23:58:f5:20:07:a1:29:81:1b:60:e7:45:
19:28:7f:69:22:be:d9:52:ed:6f:f2:78:1d:ca:bd:
76:18:74:8f:94:7f:40:c8:c5:a7:16:1b:81:eb:18:
de:d8:28:50:c7:a1:ae:a9:70:f9:72:4b:02:58:95:
ce:10:b7:ea:4d:f8:6a:b0:25:03:a1:f9:68:f7:37:
38:9f:cc:4f:04:72:a0:b9:52:fa:ed:3e:b3:bf:56:
c9:24:ca:13:f5:52:ae:65:88:4f:6c:dd:85:1a:15:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:5F:E5:10:A4:4A:8B:5F:03:DC:77:53:44:9E:70:13:E7:ED:06
X509v3 Authority Key Identifier:
keyid:1B:A8:EA:3A:22:88:A6:AF:8F:64:A8:38:30:02:C7:40:85:57:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6jqOiKIpq-PZKg4MALHQIVXmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c0b283-88b9-43cd-b08f-a8ea43253ed5/1/G6jqOiKIpq-PZKg4MALHQIVXmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cf:7a:30:10:3c:8c:70:23:d0:73:12:65:fc:d8:97:60:b6:
9b:6c:21:f7:76:bd:01:36:10:3a:18:e7:ec:f8:6c:e8:06:ef:
1d:69:c0:6a:12:e3:59:20:5f:c8:aa:49:fb:5d:1c:fd:5d:c3:
37:5d:36:a7:8b:98:2a:01:d0:7c:b4:3d:00:92:1e:89:8b:8a:
0d:ce:89:f6:39:d9:6d:36:1d:c9:51:1f:cd:af:3f:5d:8e:e3:
8f:a9:33:20:2d:64:24:95:80:9f:7e:cf:19:ca:fc:77:86:56:
e7:b3:0c:d9:54:f1:e6:9f:35:73:12:37:95:43:cb:81:5f:65:
ca:41:b8:be:73:72:aa:6a:c5:4f:ef:36:d3:46:a3:11:d4:11:
b3:f7:0f:a0:3a:b9:b9:c1:68:40:2f:47:90:50:1f:a0:40:6d:
4a:0b:67:0c:0c:52:67:80:1c:3b:7a:b9:fb:50:77:aa:a8:f8:
ca:0a:d2:05:e5:08:eb:90:10:10:03:dc:54:38:11:ee:9a:3f:
4c:68:91:d7:c6:93:7e:6c:58:dd:e1:1d:ab:f4:d1:f5:bf:a5:
a8:a8:7c:45:3a:17:73:ce:5e:d8:4f:2f:bf:e9:c5:f6:ea:26:
95:d3:b5:03:b0:59:57:5d:8a:95:4e:45:cb:ba:18:6d:52:3b:
66:37:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:39 2025 by rpki-client