Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: zhHiLdJXEZl7CwfYFF6LIvrKjeFF/riInEnerZUdU5Y=
Subject key identifier: C2:03:F2:54:CA:04:BF:C1:62:B1:EB:7F:AA:DF:55:2A:D0:D1:3B:02
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0195E1594774967644E38CC9DAC731C1881E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:01:19 +0000
Manifest this update: Sat 29 Mar 2025 10:01:19 +0000
Manifest next update: Sun 30 Mar 2025 10:01:19 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: +jijdiy6La1lUS73L3NBiIkl3l1jz+4m3FeGp9LrRHk=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:47:74:96:76:44:e3:8c:c9:da:c7:31:c1:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Mar 29 10:01:19 2025 GMT
Not After : Mar 30 10:01:19 2025 GMT
Subject: CN=c203f254ca04bfc162b1eb7faadf552ad0d13b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:a2:23:b5:ae:94:c7:22:72:ab:86:dd:cb:
ec:16:f3:76:20:be:4a:db:84:6c:ae:85:5c:11:69:
49:68:f1:fa:50:4a:ac:30:20:51:a2:ab:de:29:21:
3b:05:44:2b:b8:ce:8a:bc:05:5b:f1:72:25:6a:f1:
90:0c:5a:5a:20:a0:21:c3:61:20:94:6e:63:71:d7:
3d:2b:82:26:79:3f:98:67:5f:ab:83:ba:03:94:0a:
22:aa:5a:04:f5:e2:31:6f:9e:d9:59:5d:5a:67:95:
0e:2e:74:69:dc:65:53:40:0d:2f:fc:66:96:20:5a:
86:b6:93:21:15:cd:3e:45:77:4a:33:0f:0c:f5:57:
ae:c4:f9:10:41:6a:21:fa:bd:a9:de:fc:19:6a:cd:
a4:e4:5d:98:e5:e9:dc:6b:bf:9c:d9:50:f8:54:f4:
11:19:76:0f:21:e8:a0:02:b6:b8:48:a7:06:3f:70:
f0:61:69:2f:47:3b:c0:75:89:74:c5:35:19:52:64:
74:27:8c:3a:b0:34:6a:7b:d8:6c:4b:70:0b:bf:a5:
38:1e:0a:90:68:35:45:51:cd:a6:99:d2:15:0e:60:
e7:c8:6f:dd:d9:d2:46:07:66:d4:3d:76:0e:1a:6b:
d5:9e:aa:a4:5e:34:ab:3f:fc:84:0c:cd:a9:da:c8:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:03:F2:54:CA:04:BF:C1:62:B1:EB:7F:AA:DF:55:2A:D0:D1:3B:02
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7a:21:0a:5a:65:2a:aa:2d:cc:5f:55:36:bd:5d:82:cd:ec:
81:55:0e:4f:1e:56:85:22:49:dd:b3:59:13:c3:2a:a7:d7:7f:
54:1f:24:b6:0a:cc:cc:a6:91:22:d0:21:30:89:9b:63:ff:e9:
3e:ee:a9:40:12:d1:85:87:9f:c5:bb:2f:07:63:c5:5b:e3:c3:
53:46:1f:ef:cd:56:0f:87:ff:20:b5:df:d6:9c:63:f3:3b:9d:
27:9d:a1:03:d9:ac:0b:ab:bf:da:6f:64:4f:ae:f4:87:87:0e:
de:39:0a:54:3a:85:ee:63:5f:aa:c4:1e:5c:ec:ce:d2:64:7a:
9c:40:65:e2:4c:82:e6:60:ad:a2:45:d0:bf:cf:6b:56:ca:82:
bb:1b:c0:cc:21:1c:7a:2e:33:5d:0d:4f:a8:cb:7d:80:bd:a8:
77:0f:50:d8:86:bd:e5:0a:22:b0:80:a2:96:67:e8:42:f3:f5:
d8:83:8a:5d:4d:74:e5:21:87:e0:df:99:b9:fd:4d:eb:1b:6b:
bf:e3:ce:75:98:a2:bd:b6:3a:a3:73:45:33:64:24:8b:b1:4f:
50:60:8d:f8:93:e6:6e:86:d0:6e:29:fb:fd:9a:ca:9e:d3:16:
31:65:4f:26:73:ef:ac:8b:22:2c:5f:c6:6f:f4:a4:21:48:29:
29:2e:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:07 2025 by rpki-client