Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: MsZ4kvcwqaIClo2l4rhrwTZmRO5MTGYuhuwwt53BVIc=
Subject key identifier: 34:CB:6C:44:F0:28:56:A8:79:52:84:67:DE:F2:E0:2A:B1:6B:08:AB
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 0194BC3C209634C3AD4C4797259D5F57A711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: rvLb4xJzKJFRrMr7qh7GUoWYfmW526TlB2dTCsmb49Q=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:20:96:34:c3:ad:4c:47:97:25:9d:5f:57:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=34cb6c44f02856a879528467def2e02ab16b08ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:0a:5e:13:32:2c:c1:41:db:75:95:35:6b:
58:83:e8:9c:c4:76:68:f8:22:e1:78:6e:66:5e:e8:
b4:7b:90:21:a6:0f:f8:20:77:66:ef:d5:82:f5:87:
1a:bc:f6:a5:1f:f5:62:3f:12:99:78:8a:10:83:83:
73:bf:6c:5c:ce:37:c2:1e:b4:fc:7b:7b:0b:e5:d4:
c8:1f:53:63:d5:5c:ae:58:98:6d:d4:9b:30:0f:f2:
e5:98:f3:bc:c1:78:89:bb:54:38:dc:f5:ba:d9:18:
f6:65:f5:b8:01:ef:da:97:ca:de:51:8c:f8:0c:17:
6d:40:cc:35:80:23:1c:50:e0:49:43:4f:5c:c1:36:
c8:14:dd:cf:7c:ad:09:ae:d6:dc:1f:eb:90:64:5b:
c5:d1:f3:7c:eb:0d:d4:07:24:3c:f3:2f:be:78:b7:
80:ff:9c:52:a0:bc:30:f8:88:58:06:f9:f5:94:d5:
63:9e:bb:05:d4:68:af:0b:e8:a2:1c:f5:1c:e8:45:
86:19:e6:73:4e:a1:37:71:15:19:57:a9:59:2a:42:
4d:aa:10:80:ec:20:9d:ba:99:1e:3e:f6:71:f9:bc:
bc:d4:ed:ab:74:45:3b:49:e3:45:27:59:9c:95:c7:
f0:d8:c6:68:56:aa:84:c4:df:ca:78:9c:50:5e:4d:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:6C:44:F0:28:56:A8:79:52:84:67:DE:F2:E0:2A:B1:6B:08:AB
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:64:67:31:fe:7b:80:51:78:d6:d0:df:7e:9d:ff:19:06:e3:
99:99:95:1f:60:8d:83:ea:21:4a:ee:84:26:d1:93:06:1c:5c:
ff:87:97:24:6f:ac:6b:8b:85:e2:39:42:4a:a4:53:9a:18:27:
f8:bc:d5:55:c9:fb:4e:6d:c9:6f:b1:be:3c:27:c3:21:69:e6:
51:7a:b8:4d:95:df:93:b3:6f:a0:70:b9:c5:56:07:9e:d6:54:
f6:6d:a1:aa:9d:c6:16:2f:01:ba:5a:e9:73:31:05:b1:50:5e:
18:e2:46:18:d1:7f:6f:34:8f:66:53:e3:5e:37:04:cb:aa:d9:
4e:88:fc:d4:85:5b:3c:a8:c0:30:f4:b1:05:aa:4a:bc:0b:8a:
1f:35:0b:ee:d8:41:59:d9:d7:5a:6e:00:e3:0b:39:37:55:97:
dd:4c:20:2e:4a:fc:d3:16:14:56:f2:28:5c:b6:1b:55:27:7f:
a4:24:20:56:5d:10:20:d6:2e:10:b0:26:cf:a9:4f:4d:66:9a:
0b:95:0c:da:8e:81:a5:05:d1:1f:32:7e:71:ac:40:bc:dd:e2:
98:6b:0f:54:82:95:64:d6:a9:bd:dc:00:cf:d6:e5:97:2c:bf:
54:28:b7:87:ef:33:99:95:e9:44:55:a1:30:41:14:0a:1a:be:
f1:53:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:43 2025 by rpki-client