Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File: G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier: hBz5pzXVQdXJrptCSoVcr/IcUcm0P74bHunkIMGr2sc=
Subject key identifier: 31:85:45:8A:FB:38:79:5D:40:3B:1E:BD:EB:B6:D0:DA:9F:25:7E:B5
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer: /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial: 0194BD855F6C9F4DAB59F816FE29F09A262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: HnoPmCb5kiMSwDoKr4nCfhNeA64bXBeRilsXGlFUJgY=)
2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:6c:9f:4d:ab:59:f8:16:fe:29:f0:9a:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=3185458afb38795d403b1ebdebb6d0da9f257eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:37:fa:72:ae:b7:b6:9a:d9:1b:4e:39:78:
8d:fe:ea:94:86:0f:2f:3a:61:82:bf:ef:b1:94:9e:
5f:ee:2e:77:d2:94:20:07:e2:fc:71:6f:24:96:1c:
c0:81:dd:15:d6:b0:a1:f8:f8:42:ad:04:d8:41:37:
63:66:61:27:5e:f6:92:98:06:9d:7e:c2:0b:a3:9d:
35:ec:35:44:2a:79:f1:df:51:56:e0:ba:e9:d5:2a:
49:e7:b3:84:83:83:e4:bd:53:53:8a:d0:7a:0f:13:
65:65:34:b6:bb:1b:a5:10:6b:cb:de:37:cb:10:35:
7a:f0:c0:4c:46:89:ac:7c:8a:0a:ee:f7:3f:fc:d8:
d1:41:5b:b5:6c:57:12:db:bd:13:df:ea:e6:3e:4f:
76:f1:96:65:43:e7:28:b9:ad:95:13:27:38:e5:cc:
51:94:b8:36:fe:cb:1d:15:97:1b:15:87:ed:54:3c:
cb:db:b2:e7:f5:d6:1e:a8:85:ec:f0:61:c7:67:70:
f6:f2:a8:6e:ea:62:2a:a0:66:ef:18:ab:5c:67:80:
09:b9:02:6f:da:ed:de:79:e0:a9:3b:0b:1f:cb:f6:
94:e7:a3:42:f0:2b:83:83:7b:6b:69:49:d3:73:13:
64:51:c3:d0:30:98:e6:1e:9f:60:e7:1a:4e:38:35:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:85:45:8A:FB:38:79:5D:40:3B:1E:BD:EB:B6:D0:DA:9F:25:7E:B5
X509v3 Authority Key Identifier:
keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:24:3f:05:ea:0c:06:85:a8:6a:59:14:86:9f:d3:1f:9d:89:
92:5f:45:0d:44:bf:66:b1:6a:ae:24:73:6a:be:6b:71:d6:52:
c9:27:00:f4:7e:52:97:a9:c3:9f:6a:29:10:d5:5d:06:25:06:
c7:ab:6b:fa:3a:b3:99:68:a6:40:63:80:97:e9:6e:3f:42:ee:
68:6a:92:a4:18:ea:d8:ac:23:7e:b4:17:4f:71:40:4d:d2:b9:
36:d5:63:d8:79:ab:dc:af:78:fa:e0:b4:d6:31:81:88:6d:b1:
fb:87:17:b1:b3:b4:4d:27:76:f6:2f:3f:66:f3:57:5f:33:31:
f9:4b:53:8b:42:c6:90:c5:40:bb:c6:35:b3:27:df:c7:8d:d2:
79:85:5b:da:a1:dd:af:c6:33:d7:f2:f7:e7:07:e7:49:bf:97:
54:15:c0:0a:49:fd:43:39:e9:19:24:aa:ec:25:a5:92:62:cb:
81:cf:40:90:86:b5:ee:ed:62:5b:08:cc:d2:45:df:62:1e:9c:
6f:f1:0f:4f:03:ec:5f:69:64:21:2a:22:59:16:bf:41:f6:b6:
2c:c3:08:cc:0d:59:49:9f:d7:60:28:7b:e6:a2:cf:a7:95:6f:
b3:60:ae:d3:6d:f1:81:0d:c9:75:c4:9a:f9:55:3f:3c:68:89:
e5:2c:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:40 2025 by rpki-client