Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: 5sIrKdAXWX+O+bczRbzMoc+arksX9n0B+nZ6z/CaTIk=
Subject key identifier: 7B:7D:F0:C9:02:90:91:AA:74:BB:A3:65:24:A5:14:B0:62:10:80:99
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 0194BBCE68A967A774F3C0FEB2CDA14927D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: 0ZKsyrUPku36ZcWb7TyuYZ4cq0PSSb6KwK9k5ydR49s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:68:a9:67:a7:74:f3:c0:fe:b2:cd:a1:49:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=7b7df0c9029091aa74bba36524a514b062108099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:ca:cb:16:0f:88:da:e0:06:e2:6e:b0:73:
ef:bf:d3:bb:1c:f2:c5:12:90:c4:60:3f:b7:9d:9a:
c1:61:9a:9f:01:6c:e0:b9:6e:48:a7:d6:c2:be:1c:
1d:04:e9:17:75:4b:26:b4:21:80:80:4d:80:e0:ca:
6c:04:79:f7:5a:cf:ee:57:3d:61:65:75:d9:50:16:
27:3f:ba:14:76:a3:49:63:b6:47:52:78:5c:2d:1e:
af:3f:b0:f0:c5:b3:55:f2:bd:ed:5b:45:32:a3:b2:
9e:56:4f:66:f8:dc:23:43:e9:8a:ca:90:4c:9f:0e:
43:0a:5d:89:ef:71:39:e3:78:c3:ee:53:44:ae:57:
c6:ac:87:e3:89:f8:bf:4f:07:61:21:b2:96:96:91:
f4:24:c6:f6:e6:1a:16:6f:ee:9b:64:c1:f4:ca:f7:
5f:17:22:ca:4e:8a:60:54:9d:0d:58:8f:b9:e3:75:
4d:f2:37:dc:4d:37:af:f2:56:4d:ce:f3:de:4f:e0:
fe:83:cd:64:e4:9b:0d:92:25:d1:99:a8:12:a7:f1:
24:2e:0c:85:d9:00:ad:70:9c:0d:f1:d3:f9:d3:ee:
5d:12:8e:18:40:9b:25:f5:67:07:df:db:fe:1e:53:
a4:a3:01:81:b1:fe:d5:9f:4e:6e:3a:db:81:87:9a:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:F0:C9:02:90:91:AA:74:BB:A3:65:24:A5:14:B0:62:10:80:99
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:52:7a:da:d4:24:bd:da:54:d1:27:09:61:5f:12:83:35:
90:2f:c0:27:a7:e7:64:76:dd:2e:c4:7b:93:7e:1c:98:61:da:
e9:1a:e9:92:76:6d:e0:e5:19:ad:fe:c4:22:16:98:8a:42:77:
e6:36:b2:78:eb:e9:6c:ec:ea:67:ab:ab:30:f3:99:7e:0e:f5:
b2:8b:a5:b0:a9:07:bb:2c:c4:36:65:93:04:8e:ad:48:03:5c:
f4:50:65:aa:92:a0:d2:0a:91:53:90:94:2b:fe:c3:45:f6:e2:
70:74:1b:4f:0a:b7:4a:9e:d1:d0:05:83:e7:8b:66:cd:36:fa:
ce:d0:ba:32:4d:40:bb:3a:fa:c9:8d:81:34:c0:02:6d:7e:49:
47:e4:a7:6b:b4:7b:d5:3b:7d:b1:51:94:51:b6:11:0c:95:c2:
de:35:ae:77:27:b5:d0:46:7f:2e:87:b8:41:b5:d2:54:db:7f:
94:38:b1:b8:d9:5f:1f:98:56:fb:fb:72:7b:f3:8e:22:e3:f4:
66:53:4f:ed:c0:4c:e4:da:dd:3e:44:8c:19:07:20:9e:3f:6f:
f2:24:57:29:ce:eb:c6:6e:3a:3c:e4:42:08:b5:6d:9c:d6:1b:
a1:15:83:60:de:b4:ef:4b:ea:7d:58:05:30:db:42:58:96:ed:
18:50:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:33 2025 by rpki-client