Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
File: G55Be7nssazpSR68KCO7eJNLLN8.mft (raw, json)
Hash identifier: Of21a17tW6QmoPZPeRioUuudpn0Avg068SnL1IlgnoM=
Subject key identifier: 48:6A:A4:BA:80:68:A1:00:BB:EE:62:2C:96:46:2A:F9:A8:86:F9:45
Authority key identifier: 1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
Certificate issuer: /CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Certificate serial: 0194BC04D05827F7A211CBFEFBA2B6C3CB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
Manifest number: 12D4
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: G55Be7nssazpSR68KCO7eJNLLN8.crl (hash: DVJugv8aXo+efu0ijn66F4Ma/2bYCxWwbZuJpks0Iu4=)
2: f15TdDcMT1QcfJoOTLmAzw7eopY.roa (hash: TVQuLBtSVfry/RScedTQ4EygqyHlfDpV3ocjm8JQl5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:58:27:f7:a2:11:cb:fe:fb:a2:b6:c3:cb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9e417bb9ecb1ace9491ebc2823bb78934b2cdf
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=486aa4ba8068a100bbee622c96462af9a886f945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:23:14:0e:66:ae:28:f7:3d:15:f8:91:88:
3d:8d:f0:34:b3:3f:e8:00:40:55:db:a1:ef:66:6e:
c8:c9:ca:5a:50:0b:82:b2:9a:eb:76:00:78:e9:8f:
96:ed:33:91:4d:c9:d0:23:be:4e:1b:5c:ad:85:aa:
1b:ac:a4:50:47:16:17:63:89:b1:89:b4:a4:0d:32:
0c:b5:7b:cf:bb:39:60:1f:14:be:77:6d:7b:03:e3:
ca:17:49:db:34:db:41:e0:72:53:d8:54:2f:e5:e6:
17:5b:60:0b:36:0a:f4:1c:44:e3:61:db:13:19:02:
2a:b2:60:85:b5:4f:54:0d:e0:67:f6:3c:09:5b:5b:
b2:9b:4b:26:99:2b:55:25:6d:f1:db:f7:7a:af:1a:
5b:47:a9:82:5b:0a:8f:b3:13:87:1e:14:11:ad:12:
56:a5:d3:20:09:47:7b:24:e5:63:1c:38:4f:49:b2:
54:31:1a:07:ea:43:69:71:fa:9b:6c:51:76:71:40:
a6:65:f8:f9:ee:56:f9:fc:53:f8:29:1c:e6:e9:fd:
ea:fe:f3:fd:90:97:81:7e:18:8d:ee:ab:8e:df:a2:
2d:23:3f:4b:e8:8c:28:f8:55:f9:85:d1:57:1c:04:
59:59:a9:39:27:16:63:a8:e9:14:8d:db:bc:96:a1:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:A4:BA:80:68:A1:00:BB:EE:62:2C:96:46:2A:F9:A8:86:F9:45
X509v3 Authority Key Identifier:
keyid:1B:9E:41:7B:B9:EC:B1:AC:E9:49:1E:BC:28:23:BB:78:93:4B:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G55Be7nssazpSR68KCO7eJNLLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bdfe17-91ad-4f31-aecd-81ed12ddf175/1/G55Be7nssazpSR68KCO7eJNLLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d6:35:90:f8:91:07:2e:ca:53:48:b7:84:36:d0:c3:da:0c:
69:a1:ed:34:da:aa:17:5d:9d:fa:08:0e:2b:18:79:43:1d:51:
90:09:4d:b9:dc:1e:97:96:0d:3f:8b:c8:ca:1e:75:56:52:d2:
79:06:ff:a9:74:3d:5a:39:96:c4:1d:50:56:2b:76:07:b9:a2:
c2:a1:85:83:c3:47:44:61:d8:d3:57:2e:e2:16:f5:87:84:2d:
9e:e1:2a:e9:55:df:07:05:11:a9:ef:db:f9:0d:7d:83:95:e1:
62:86:89:cf:02:72:f4:e8:86:56:31:c4:41:1a:3d:20:1d:88:
f1:7d:0e:cb:d5:b9:79:c3:60:89:22:8f:55:ae:5b:02:41:8d:
c9:3e:2a:81:fd:60:63:c7:1d:f8:5a:83:2d:c9:91:87:8a:00:
a4:46:d8:79:4e:1c:dc:9f:3f:66:39:55:1f:d8:58:be:b0:cb:
1c:cf:2d:d0:20:22:41:42:3e:0e:78:7c:7e:6a:18:42:80:f5:
95:44:3a:60:9a:f4:e5:fe:55:cb:69:34:5b:f1:89:8e:97:25:
62:c5:8b:55:45:db:28:ec:8d:43:67:ee:ba:2a:e6:b9:f1:3f:
de:c4:8a:23:94:49:24:c4:41:fb:1b:03:3f:43:4e:ac:7c:30:
8a:de:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:25 2025 by rpki-client