Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: BN4cqwVp6gDWtvnJWpQ0wEg5XnhZ5VUlnu7HbBm9CQU=
Subject key identifier: 18:95:05:4B:D9:B1:D3:E2:95:D6:20:38:63:5D:C3:41:72:B5:2C:86
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 0194BC04D48C514F9E7C13C191EF6FDC2843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0C51
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: HcwljhaozhPzadduJuO0qrBs61arcEUhNKGiVZwfh3c=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:8c:51:4f:9e:7c:13:c1:91:ef:6f:dc:28:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=1895054bd9b1d3e295d62038635dc34172b52c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:6f:7d:4e:72:13:1e:91:ec:1c:e1:af:26:
bc:79:1a:41:3f:bf:63:9d:6a:06:e1:38:c4:f8:d8:
2f:4e:20:30:52:57:41:b1:a7:bf:3c:47:32:b5:62:
2f:fd:e4:86:38:2b:9e:ff:7d:91:26:fc:49:a9:c8:
ef:00:d4:db:6f:c9:66:6c:eb:3a:99:db:c2:20:ce:
09:c5:96:75:41:93:ad:db:9a:49:33:bb:20:bf:12:
83:fa:22:af:ba:7b:8c:38:77:7c:17:2c:e6:0d:fe:
68:b3:b2:df:25:70:1f:98:5b:57:fe:60:88:2c:ff:
88:81:af:db:5e:6f:7c:05:91:c6:e5:ba:fc:04:a4:
5a:17:5a:26:1e:34:68:cc:a8:2f:dd:ca:1c:36:10:
89:c5:b7:24:ba:50:10:96:56:8e:ba:0c:19:ad:60:
94:37:9d:12:cc:10:80:2a:a9:c5:63:cd:50:7d:e2:
5b:2a:eb:33:f2:37:3c:e8:38:16:b5:8e:c6:67:21:
af:c8:c7:90:e8:0b:8b:02:51:48:b7:34:0f:11:3c:
66:29:f2:95:6c:e8:b4:c2:e5:1d:af:47:5a:86:59:
db:f5:b7:a9:20:30:eb:56:ff:e7:e2:58:3b:6c:ff:
43:80:ff:ac:b1:3f:89:65:ca:6f:f8:af:d8:53:d2:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:05:4B:D9:B1:D3:E2:95:D6:20:38:63:5D:C3:41:72:B5:2C:86
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:10:1c:88:1f:87:39:2a:13:b2:f5:53:0a:89:08:28:b0:
ec:a7:72:dc:c3:a5:30:51:e7:65:f3:b2:5e:43:09:ad:c5:2f:
4b:e9:14:c0:de:4d:f4:72:6a:26:28:f9:04:1a:31:9c:24:e5:
7e:88:05:2c:ff:62:fd:a8:42:ee:97:e9:9e:ec:8f:ba:cf:c3:
7c:79:68:b6:ec:33:6b:db:67:20:e5:4c:d2:ef:a6:ab:cd:fb:
0a:08:2f:21:04:bc:4b:c6:a3:53:11:1d:75:07:ef:6c:23:4f:
e7:63:6e:23:7f:eb:ab:b4:18:98:28:02:be:37:95:db:03:bc:
b1:61:81:a1:ae:94:cb:c1:e7:a4:73:f0:c3:00:4d:c2:b5:0b:
50:d8:f6:d8:03:62:bd:0b:59:6b:b0:a9:0f:d1:3f:b0:75:80:
fd:42:cd:04:77:e5:b5:66:12:f4:d2:64:89:ab:3e:7a:1e:69:
5e:8a:29:e4:4a:c4:a8:69:d6:8f:d7:37:6e:14:cc:ea:5f:45:
4d:5b:15:e7:81:71:e8:fc:08:d9:ec:37:4d:36:cd:8a:87:d5:
96:c8:81:03:aa:3f:37:24:f6:86:9f:68:61:47:6f:b7:cd:6e:
ee:d7:e9:74:db:0f:40:a4:6f:9c:c2:1a:cf:84:7d:71:01:08:
ef:cc:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:22 2025 by rpki-client