Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: LvgXRwlcv1pvPxrJN7EttnVpmlmH+PxOotcCAfTT3RM=
Subject key identifier: 83:D1:DF:AA:DE:FA:C7:4E:5D:84:D0:AF:BF:D6:71:A2:9E:C5:FF:C1
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0194BC72CFA18A1D297FF9E4E43053C41125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: jnQ7NT3B1l9PsvoKO6RSB7dG3T5D4/7NQmvjGhms9KQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:a1:8a:1d:29:7f:f9:e4:e4:30:53:c4:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=83d1dfaadefac74e5d84d0afbfd671a29ec5ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:44:62:64:09:71:44:e8:4f:fb:bd:a1:b2:
cc:f1:66:88:4b:9a:40:33:7c:6b:17:c5:0e:e4:1c:
eb:13:6a:8e:8f:50:81:e7:ba:a7:fc:f6:dd:f0:15:
5c:53:32:cc:6f:b3:40:ee:5d:c1:09:f2:28:30:d1:
bd:6d:d2:0a:97:b2:d0:fd:5d:5d:21:a3:3a:b3:02:
6b:79:2e:13:8a:cc:70:b6:46:94:82:25:5f:5a:1c:
2c:9c:46:12:b9:7f:51:b5:b0:0f:27:20:4e:28:ce:
13:a7:52:0e:8a:f7:45:cf:77:0a:a0:f9:f3:2a:81:
1b:de:5e:dd:4a:ba:5b:8d:e2:78:64:d4:0b:a7:10:
13:9e:b7:4e:d2:00:42:48:61:21:e6:52:b8:57:cd:
06:7a:2a:5d:bb:e5:91:c6:b1:89:a0:6d:c1:13:4a:
7f:aa:e8:78:4a:05:1f:39:3a:38:a6:11:93:9f:a9:
a8:5e:e6:1d:f9:b7:c1:4a:b6:f7:53:b4:76:b9:89:
aa:87:7f:e1:29:c7:30:68:10:56:55:fb:f9:d0:01:
9b:c3:01:4b:31:60:9f:18:27:fd:98:2d:84:b4:a3:
f5:53:df:10:8d:4e:a1:44:01:c2:c9:59:d3:d8:d4:
47:db:90:a1:7c:09:37:8f:93:cb:5d:16:60:f1:17:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:DF:AA:DE:FA:C7:4E:5D:84:D0:AF:BF:D6:71:A2:9E:C5:FF:C1
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:aa:9f:9f:7c:31:9a:35:39:59:d5:7d:25:47:f3:f8:96:
5d:ad:b4:b0:8e:da:d3:8d:c9:d0:1e:6c:8d:5e:4e:8c:2a:3f:
ea:ef:e5:3d:76:88:40:46:12:23:fc:b0:f8:8e:9d:15:1d:17:
55:b6:4d:52:13:1d:35:5b:35:09:de:a7:f6:c4:d4:59:8f:a8:
88:50:dd:91:06:11:2f:44:19:dd:ff:a8:02:5e:27:98:1d:15:
35:b4:40:48:6e:ac:83:26:6d:7c:32:0a:93:d6:c4:9a:f3:94:
b9:50:82:af:21:29:d9:9e:25:98:48:af:c7:1f:65:83:1c:d7:
4b:ec:d0:39:ab:88:83:5e:60:26:c6:82:d9:44:72:14:d1:14:
d9:20:29:47:8f:a4:09:98:3c:3c:75:9b:f2:ca:11:f9:8c:34:
79:36:9c:c7:45:5c:f6:56:89:0f:ef:dc:5d:d0:39:06:da:24:
64:d7:65:ce:5b:fb:03:9e:71:e7:8e:6a:dc:3d:4b:48:3e:12:
77:f0:76:22:04:a5:fd:99:45:01:e1:a6:f3:d7:b4:82:0b:90:
98:66:df:43:4f:45:93:12:78:cb:61:49:fe:bf:a3:91:44:e5:
a8:ef:33:09:63:ac:1f:8a:eb:55:69:41:16:1e:0a:b9:e1:68:
1d:76:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:12 2025 by rpki-client