Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File: gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier: 0y7DJNYMEL7uYxS7jviH3vMdXlN/fPj74P9nB0wmDX0=
Subject key identifier: 93:EE:4C:52:AE:9D:E5:B7:D1:C1:F0:2F:91:86:06:36:DC:B5:E8:59
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer: /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial: 0194BCA9BB4D4117B1B701052DD7E28F02F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number: 03D6
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=)
2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: w3UjNM/SmEtuptxSrUeS/M6iJyK5IdAwni2jQ5/rzyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bb:4d:41:17:b1:b7:01:05:2d:d7:e2:8f:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=93ee4c52ae9de5b7d1c1f02f91860636dcb5e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:5c:92:49:87:23:16:48:ee:19:e9:8d:ae:
2f:b2:80:d1:b6:e7:44:be:99:f8:fd:cb:da:ad:c1:
24:eb:69:9f:8c:77:4a:34:ac:8f:62:71:fe:28:13:
b8:f1:fe:d0:b8:62:7a:45:a4:10:2f:32:84:90:c6:
2f:a8:13:27:aa:f6:87:26:3b:29:df:5f:52:ee:11:
41:96:95:17:13:d5:a2:ae:3c:ad:df:d3:7f:e2:6a:
b6:19:34:68:2f:97:ef:50:f3:5d:a8:08:c3:cf:64:
a0:e4:20:7b:58:56:72:96:04:21:4c:78:38:72:f3:
6c:b1:15:35:40:26:a1:7f:33:8a:55:e8:4f:55:de:
d6:2e:90:fe:6c:f3:2c:1d:80:bb:ba:4d:6e:65:49:
fe:c4:3f:8e:65:0e:e3:77:b8:f5:99:b5:dd:57:4a:
1f:53:82:b8:6c:42:e8:13:18:cd:0e:89:28:fd:34:
ec:66:d2:68:c2:73:82:ee:04:7b:2f:07:83:26:9f:
aa:28:3d:a9:cd:75:18:d8:bf:fc:55:88:a5:d0:4f:
01:f4:9b:02:ce:7b:12:e2:e8:00:81:7e:57:a8:5f:
df:81:bd:fc:5b:d1:fa:33:d2:95:8a:bc:12:32:29:
30:44:f7:35:36:02:64:7a:16:2a:c1:0e:f5:40:70:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:4C:52:AE:9D:E5:B7:D1:C1:F0:2F:91:86:06:36:DC:B5:E8:59
X509v3 Authority Key Identifier:
keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:e2:00:e0:03:a6:5c:1e:d7:36:08:08:6e:7d:88:ac:5a:
02:dc:f8:23:2d:b3:1f:e4:dc:b1:96:7f:34:31:c9:87:93:0a:
8a:0f:4b:4d:f7:fb:14:e2:b0:82:c6:38:d4:8d:d1:88:5e:50:
7f:5d:1e:32:e1:f4:ab:34:9d:1c:96:77:f7:c7:d3:7c:d4:ac:
84:e5:9a:e8:32:2e:7d:e9:51:4b:20:85:0c:e7:06:f8:89:0b:
80:08:71:98:d3:bf:2e:51:8e:1b:d2:e4:78:55:b6:26:f3:dc:
c9:18:cb:b8:77:af:c7:39:6f:80:12:fa:df:96:9f:b3:c8:cb:
e5:79:f1:05:1d:32:26:e3:17:37:d7:bc:bb:15:b1:21:a7:41:
c5:db:08:28:d1:46:4e:3e:03:10:78:5f:78:1d:a7:15:81:29:
c8:11:c1:3f:5b:a0:e6:ce:dd:cf:0d:11:26:0d:d3:15:7b:f3:
f1:1c:8c:bc:59:2c:0e:3d:36:05:98:6f:5f:c0:50:aa:08:3e:
94:fb:df:b6:27:85:fa:85:2a:da:9a:68:8d:78:5b:3d:13:77:
ee:bd:e9:5b:1d:56:95:59:1a:b4:79:4b:ed:6c:ed:01:ca:53:
a9:ef:e5:d7:50:9b:07:82:ac:04:15:6e:23:e1:d0:c0:1a:31:
74:1c:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:45 2025 by rpki-client