Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
File: giSLXgiFiWS6K1RzFSAV_VmR_fg.mft (raw, json)
Hash identifier: BM2iw9rpmXtkuchEqcPBybGkMSo+YgjMLZl+ZF6j5s0=
Subject key identifier: 63:AE:F6:D4:81:B8:60:D1:2D:BD:39:59:B1:67:2A:47:73:53:3A:8F
Authority key identifier: 82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
Certificate issuer: /CN=82248b5e08858964ba2b5473152015fd5991fdf8
Certificate serial: 0194BD17AEA9A82B3B0DD0F190E364D9A94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: GpgJajGCbSNl3e4aO7PdAchg1ng.roa (hash: JjeUV08MlhBjZNwlusZZDt6ugsqaNAcVm8lYJFEKoLw=)
2: giSLXgiFiWS6K1RzFSAV_VmR_fg.crl (hash: 7siLBQ8trsNOUuh1aTOjDhELl3yhqwbdICvu9/5UBq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:a9:a8:2b:3b:0d:d0:f1:90:e3:64:d9:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82248b5e08858964ba2b5473152015fd5991fdf8
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=63aef6d481b860d12dbd3959b1672a4773533a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:66:ca:1d:8e:da:b6:70:35:f2:f4:fe:f0:
70:72:b2:a7:9a:bb:05:95:a6:77:b0:fd:59:21:da:
37:f9:e1:89:52:2b:c9:f3:36:f3:2c:68:fb:17:53:
07:6a:2f:29:75:54:81:22:d5:f5:2c:c8:06:19:ce:
96:b8:c0:a6:e0:fa:eb:43:77:f8:b4:3d:43:6d:76:
42:e1:df:ce:89:42:f9:22:65:cc:69:f2:91:1b:9f:
57:dd:e1:15:65:55:2a:a4:ea:d1:ca:c0:fe:ee:d5:
2a:55:fe:ce:2e:c8:60:25:e6:77:00:99:96:de:d5:
8e:84:78:b0:b3:a0:b3:c6:bd:98:ab:fe:5e:c4:d8:
ce:f5:6b:f4:6f:4f:7a:15:4f:1d:bd:c5:e7:d5:36:
00:ce:73:c0:73:4f:4e:6a:ce:da:ba:3d:b4:da:dc:
45:f4:9c:d3:b0:b6:ec:77:c2:90:a2:a8:cc:7d:7c:
77:d9:f4:f3:52:d8:db:65:df:83:8d:8a:d7:63:2b:
28:12:35:cc:04:21:62:55:46:f3:56:c5:27:43:2f:
39:b2:8e:cc:7e:9b:70:1d:9d:ff:d0:6d:9b:40:8f:
83:72:51:31:ce:73:31:e8:e3:16:15:de:a9:00:2f:
ed:14:ae:00:f0:e3:6f:ec:14:ca:99:a4:da:78:8c:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:F6:D4:81:B8:60:D1:2D:BD:39:59:B1:67:2A:47:73:53:3A:8F
X509v3 Authority Key Identifier:
keyid:82:24:8B:5E:08:85:89:64:BA:2B:54:73:15:20:15:FD:59:91:FD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giSLXgiFiWS6K1RzFSAV_VmR_fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c903f3-8246-4c4b-aa4f-ae6469ab3f40/1/giSLXgiFiWS6K1RzFSAV_VmR_fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:8b:18:ed:15:90:28:ce:d8:eb:d0:cb:55:b5:86:62:ec:
34:d2:6c:94:26:03:35:85:0a:55:a0:6e:8c:4c:d0:f7:19:94:
21:84:71:e7:7d:0a:38:4f:4b:fb:19:49:ff:b4:32:dc:64:63:
2c:7d:c3:42:43:86:bc:f9:a0:3c:47:a7:8c:d4:00:04:ed:c6:
56:ec:e2:6f:8a:b1:15:67:40:61:4f:b8:00:73:66:85:af:36:
71:c3:bd:0b:06:fd:8c:ba:04:7f:c8:46:ac:e2:2a:ca:d6:a1:
14:8d:e1:59:29:91:46:32:91:2d:6e:92:73:67:f0:33:4b:16:
f1:e6:0a:28:6a:26:ea:80:3d:6e:f8:ec:d0:16:00:83:5a:eb:
a2:a2:d2:5f:fa:5c:4b:85:cd:99:5e:4e:27:75:e8:a9:b2:f5:
8a:02:de:eb:da:4a:c5:1f:4d:b3:e7:f4:11:8c:01:12:f6:4f:
7e:4c:2b:22:4f:66:7e:c4:2a:55:5c:2b:52:5d:4c:fc:a3:e8:
e4:22:39:07:dc:ec:24:c1:f3:ff:31:aa:d2:10:c4:28:56:03:
fd:5f:a4:42:a1:ff:22:a8:a5:38:a7:eb:7b:dc:27:2e:e6:0a:
24:3e:5c:2a:43:42:23:ba:bb:0a:b0:35:87:fa:7e:f9:83:48:
3e:6e:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:36 2025 by rpki-client