Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: CkWxoPy5sm/wmtGTFLlMsEi8y3bF//YhswjkrIQTYb0=
Subject key identifier: 1B:B4:B8:B2:57:31:75:07:3C:59:97:8E:A0:77:9C:3E:DF:13:92:3C
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 0194BBCED9F805F9B7240D2F7F2A9D6FE50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0935
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: u6Eaupqmn5oGyu49EQ+/tTmyD6LRZA4NKMPWRqnZHbY=)
2: TRfMCYgQom2qb1ltkPZ8pDFMPbw.roa (hash: B/bZzAE30Cbi1NKH6O3ZfRrv6UmAF6KTnp6VWp5movg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:f8:05:f9:b7:24:0d:2f:7f:2a:9d:6f:e5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=1bb4b8b2573175073c59978ea0779c3edf13923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:32:fd:f8:b5:fc:47:13:dc:59:d6:41:07:
4b:e4:3e:19:fb:9a:22:ff:02:95:25:3c:13:7a:19:
ca:80:c7:a6:b0:51:3c:1a:71:49:d4:5d:5c:51:ed:
73:eb:4e:8e:46:41:b5:ec:1a:66:4b:a3:24:3b:9c:
03:e9:04:73:6d:8b:8b:b4:45:d8:3a:12:35:fb:3d:
29:75:69:0b:2f:ef:d7:4a:aa:2f:07:c5:48:e2:5e:
bb:2c:d2:0c:2a:4b:5a:75:9b:3b:2d:02:08:08:64:
41:2c:09:1b:6d:d4:6b:4e:4a:32:52:a1:35:84:7d:
b1:93:7b:69:25:e1:ca:6a:50:ee:2e:6e:48:81:66:
f7:fb:bf:8e:7e:ff:8f:ed:2c:be:6a:4b:56:59:14:
9e:86:a5:c7:ba:66:75:58:a6:f9:a0:75:60:eb:83:
60:95:dc:a6:fa:2c:f9:30:d9:36:e5:a7:40:26:50:
69:02:72:41:b9:b4:e2:c6:d7:91:d2:f1:10:5e:40:
7f:6b:18:6c:4c:ae:e5:35:e5:59:b0:76:41:ba:a5:
3a:5e:e3:63:1a:4a:36:f1:a7:89:de:28:aa:49:f2:
72:96:aa:fd:ef:2d:83:4a:18:cc:cb:24:a3:28:5a:
c5:b9:c1:ae:2d:e0:3c:4d:60:5c:88:f1:f7:45:f2:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:B8:B2:57:31:75:07:3C:59:97:8E:A0:77:9C:3E:DF:13:92:3C
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:46:fa:35:54:11:78:cb:ac:25:45:d3:9a:d8:48:69:6f:09:
23:49:a8:ae:f1:1b:0a:d7:03:5e:3b:94:de:3e:43:08:6e:ba:
80:67:f5:f0:81:31:0e:69:ad:8e:38:20:af:3f:7f:8c:f5:df:
8f:f2:41:8c:39:fa:f7:af:f9:49:7a:f8:5d:8a:f4:49:40:98:
77:bc:38:57:4f:9b:4d:57:90:64:30:4c:1f:6f:3d:b9:28:e9:
27:dd:5f:4a:6c:87:b2:da:cf:73:78:4c:e8:c7:ca:07:52:03:
b6:ce:e7:ea:d7:e6:ec:93:9b:97:60:f4:56:f7:b1:18:f3:b0:
48:0f:6a:4e:3d:d2:28:b8:19:a3:d9:0c:6e:3a:ca:92:2a:fb:
e6:24:3b:fa:24:7d:b5:84:62:d7:6d:6e:e5:0d:5d:00:ee:cc:
2b:ab:85:1a:eb:31:82:fa:a6:f8:85:86:26:f9:23:a2:d2:ab:
06:71:8b:cd:5e:4b:23:0d:df:f9:ef:08:6a:d1:89:e4:58:60:
95:ba:d8:61:ce:a7:a3:5c:03:4d:57:ad:a9:aa:87:2e:62:8c:
55:20:a7:74:94:9e:c9:2c:14:41:1f:c0:38:a8:64:dd:e1:f8:
8e:55:7f:30:c1:49:56:80:a3:dc:e3:eb:41:ab:ed:e7:77:64:
c3:b1:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:16 2025 by rpki-client