Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json)
Hash identifier: SjjargoATtKX401sQZVJMxGP0GjMDHW/jXqnu1XsHiY=
Subject key identifier: 4F:EB:D9:C6:D0:D3:00:EF:4F:74:E3:4B:85:6A:17:56:18:BF:80:28
Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Certificate serial: 0194BCAA1E0CD3707D57778192A3B055C767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
Manifest number: 0CFC
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=)
2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: RzYTIbnSOLvMLHN9nh/dBM2AjFMuPYftKk/jXQ0K/0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:0c:d3:70:7d:57:77:81:92:a3:b0:55:c7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=4febd9c6d0d300ef4f74e34b856a175618bf8028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:3c:85:0b:c2:af:4b:3d:34:dc:af:f4:b4:
9a:e0:ae:95:7c:e8:5d:7b:52:7c:26:44:1c:43:d2:
97:48:61:c6:45:51:02:d3:f5:26:80:0f:a4:43:0a:
26:b7:76:2c:9a:f0:24:bd:6c:fc:a9:93:32:cd:30:
55:7a:3a:46:3b:ba:b9:cf:ec:6d:41:a7:32:00:d8:
e4:a1:7b:37:fa:5d:31:95:4b:52:78:78:12:e8:4d:
dc:ad:17:1e:85:2c:f2:10:6c:5e:68:af:78:aa:0d:
a1:40:d2:67:44:19:22:0b:fc:8f:1a:a4:65:a2:7a:
b8:76:92:22:34:b6:ae:72:42:a0:23:dc:62:3e:eb:
94:da:28:89:07:8b:6f:5b:47:47:ef:ed:84:e8:e8:
1d:9d:17:c9:39:e5:c3:87:b0:20:ce:dc:fb:c2:36:
72:a2:f5:fc:c1:fe:e1:73:11:64:3f:2c:2e:29:69:
f5:a4:74:37:c2:12:50:55:15:e4:5f:35:37:29:17:
b0:59:e0:86:c9:cf:c6:92:d7:63:d3:19:bf:ca:06:
c9:55:59:0a:48:b7:8c:df:43:14:16:ac:f2:9e:ff:
94:63:5f:43:92:cd:0f:f2:6e:cc:d4:ed:db:6e:f0:
44:7c:ca:bf:5d:de:87:c3:3e:04:1e:cc:aa:aa:27:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:D9:C6:D0:D3:00:EF:4F:74:E3:4B:85:6A:17:56:18:BF:80:28
X509v3 Authority Key Identifier:
keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:45:55:33:b8:f5:10:d4:e4:20:e9:80:3c:51:f5:5d:6d:a1:
1d:60:5e:45:85:37:fa:6c:6a:78:40:12:fd:c5:56:cc:84:8b:
28:89:fa:b4:ff:36:fb:aa:6e:b0:d0:c3:e6:7e:d7:20:e5:60:
a5:71:74:da:8c:d8:c3:60:ea:9e:7e:d0:92:4d:7a:f1:4c:9e:
8b:91:7a:2a:22:9d:d6:a1:e1:17:2b:40:1b:ba:16:7a:81:a9:
28:98:d1:45:10:f5:85:39:b3:8e:c7:6f:9a:8d:9a:76:2c:53:
63:f1:28:9c:ed:af:14:b2:02:5e:3d:4f:f6:79:29:c1:d8:a7:
1c:82:cc:f9:ce:4b:69:d4:4d:2f:84:04:73:45:18:8b:fc:66:
79:f3:cf:c3:44:08:09:8c:6d:70:38:36:c9:c6:44:eb:85:e6:
13:bb:b4:5a:53:e2:f7:b7:1c:5c:f4:6e:50:79:87:04:96:59:
8f:78:54:ab:ee:f0:ed:da:ca:5c:ca:a8:81:6c:37:3f:b3:91:
90:a5:94:02:be:dc:8f:8e:86:c2:62:bb:55:bf:fd:ab:66:3a:
4b:08:3c:81:b3:a5:d0:f4:77:20:75:76:da:40:0c:9c:c3:ca:
d6:cd:33:5f:36:1c:18:3d:fc:e1:ef:62:69:4e:41:11:08:cc:
d2:0e:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:58 2025 by rpki-client