Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: FFqgJX5cenDIbUMBC+M4thvFWzYlRvg/ELMtrEDw4qc=
Subject key identifier: 7F:AB:C8:3A:E9:30:D3:4B:4C:F7:AA:A7:E5:AD:B3:EF:0F:F8:AC:3B
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 0194BD4E430B5AE147031E805C596E6891A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0A99
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: xrA37ohGUCYdOm2x8BaY+ysLpwtzDffqh226tOmK1XA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:0b:5a:e1:47:03:1e:80:5c:59:6e:68:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=7fabc83ae930d34b4cf7aaa7e5adb3ef0ff8ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:c8:a7:81:20:d7:47:30:42:6b:66:ab:e0:
f7:42:17:7d:11:0a:32:7e:fd:33:6c:04:1b:e8:31:
66:75:16:5a:12:d7:c1:a7:33:41:aa:da:c5:9a:58:
e0:86:5d:ee:1c:18:1b:89:bb:72:32:d3:d3:8a:06:
81:83:fd:63:6a:f9:58:23:77:6a:40:5c:b4:06:dc:
56:0e:80:be:ed:39:b8:a7:2d:a8:f9:f4:ae:ea:12:
81:78:82:b1:92:cb:c4:8e:e6:9d:b5:7b:3b:b1:33:
db:6d:23:e8:3a:a3:c9:12:f0:ea:8a:ae:10:7f:86:
72:2a:74:d8:d1:7e:1d:f0:fa:97:c3:18:4b:72:58:
1f:9e:45:53:ee:35:22:54:f8:35:51:72:3b:81:c1:
fe:e5:53:32:40:91:75:76:92:3e:14:cf:b5:6d:47:
4b:0a:24:0e:f7:9c:35:1b:77:11:ce:c9:a3:b6:61:
34:c1:25:4e:78:a3:09:c1:1a:75:ef:fd:32:e9:19:
2c:da:b8:36:8d:c2:6d:ab:20:16:6c:29:b3:b1:b4:
fb:34:75:65:a3:3d:bd:90:67:03:53:5a:48:1e:bf:
e3:86:41:93:1e:9f:4c:91:f1:73:96:ea:93:0c:e5:
ca:8f:2f:8c:51:62:23:82:37:28:8b:65:78:58:ee:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:C8:3A:E9:30:D3:4B:4C:F7:AA:A7:E5:AD:B3:EF:0F:F8:AC:3B
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:ec:2f:06:19:76:5f:35:4b:f0:b4:e6:c5:aa:b5:6c:ef:
b9:3b:91:86:37:91:f9:0f:92:b4:bc:a8:56:e6:78:6b:74:38:
d7:ed:e9:9b:8e:49:61:c9:aa:6c:1f:09:05:aa:60:d0:a0:81:
ae:ec:fc:20:f3:92:82:b6:d9:71:8e:79:38:32:08:12:48:38:
d9:f3:33:0c:68:2f:53:fc:41:35:1a:41:0e:8f:02:af:b1:e2:
05:5f:2d:e4:46:22:d9:88:02:6f:92:46:40:bd:92:0c:4d:e0:
39:e2:33:7e:bb:91:23:17:a9:51:7e:11:c2:03:0d:ce:4f:a7:
38:40:b2:2d:15:bb:c4:74:a7:72:98:ba:e0:aa:ec:69:bb:92:
9e:e9:b2:37:ee:a3:80:ed:df:e9:0d:8c:fd:80:c4:ce:fb:c0:
31:11:2b:2d:68:a8:85:91:69:9a:e2:d6:eb:15:c0:45:14:1f:
80:32:49:a9:63:4e:45:ad:f1:21:c6:f8:54:ad:09:0e:3a:99:
94:a2:d4:b0:96:88:73:a0:46:dd:c2:94:f3:59:5d:7d:f7:cf:
0b:2b:0e:20:01:ca:23:e7:d9:39:a4:8f:88:b5:52:25:03:55:
c9:ac:fb:09:af:29:f6:ce:16:07:e9:c4:57:70:95:71:55:b4:
65:e6:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:07 2025 by rpki-client