Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/G5OaLehopjMyOJF4aEm_od0-Lag.mft
File: G5OaLehopjMyOJF4aEm_od0-Lag.mft (raw, json)
Hash identifier: T4sijFHk/0CeFPE4R7AZpUymplRSLMd7NboSo9cT+oI=
Subject key identifier: 28:80:F6:26:5A:28:FD:5D:11:3F:B2:68:F9:D2:92:22:01:7E:0D:23
Authority key identifier: 1B:93:9A:2D:E8:68:A6:33:32:38:91:78:68:49:BF:A1:DD:3E:2D:A8
Certificate issuer: /CN=1b939a2de868a633323891786849bfa1dd3e2da8
Certificate serial: 018D689E58EABB209BC17FE2F344DCB41F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5OaLehopjMyOJF4aEm_od0-Lag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/G5OaLehopjMyOJF4aEm_od0-Lag.mft
Manifest number: 084D
Signing time: Fri 02 Feb 2024 07:00:24 +0000
Manifest this update: Fri 02 Feb 2024 07:00:24 +0000
Manifest next update: Sat 03 Feb 2024 07:00:24 +0000
Files and hashes: 1: G5OaLehopjMyOJF4aEm_od0-Lag.crl (hash: uz9a9RmP8axoQ6Hwvch7OjKk9yy6Syzbe1cGq61VZtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:9e:58:ea:bb:20:9b:c1:7f:e2:f3:44:dc:b4:1f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b939a2de868a633323891786849bfa1dd3e2da8
Validity
Not Before: Feb 2 07:00:24 2024 GMT
Not After : Feb 3 07:00:24 2024 GMT
Subject: CN=2880f6265a28fd5d113fb268f9d29222017e0d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:87:21:05:11:47:91:91:98:6a:91:fb:7a:
77:29:a8:1e:81:31:b9:cf:1e:db:98:64:46:3f:67:
c6:ce:65:5a:b2:4c:97:bf:0b:2c:f4:72:6a:e4:0a:
3a:c8:dc:8b:66:0f:33:31:1b:df:61:64:37:ab:42:
fd:5f:6d:82:82:1e:23:24:7a:7e:4f:c2:f5:48:da:
f0:25:50:c8:a1:c8:1a:a9:6a:c6:d2:dd:06:bd:02:
81:e5:5b:c5:a2:c5:b3:0e:f9:6b:e4:cc:6a:0b:9a:
93:73:d7:0e:53:12:f0:76:01:5b:96:87:51:2c:82:
c7:31:04:90:32:e1:6a:74:db:ac:1b:7b:f3:76:1d:
27:74:41:c6:f5:74:65:73:42:f9:e4:0b:d3:1c:4d:
49:e4:51:90:69:53:72:5d:eb:de:04:e0:58:4d:85:
02:30:1c:a2:54:10:55:0e:19:78:25:92:a1:10:9b:
e3:e8:97:87:c5:6c:f3:02:6f:a5:23:11:3a:e7:ed:
a7:86:20:a5:ea:ed:77:3f:bb:91:45:72:aa:89:4a:
3e:85:9a:8a:69:91:8c:d5:db:03:a9:32:7f:0b:70:
fc:b1:55:9c:cf:b1:8b:5a:f3:67:9e:6c:97:88:5c:
ec:e0:8f:73:02:7c:18:82:d0:2e:b0:5e:8a:da:3d:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:F6:26:5A:28:FD:5D:11:3F:B2:68:F9:D2:92:22:01:7E:0D:23
X509v3 Authority Key Identifier:
keyid:1B:93:9A:2D:E8:68:A6:33:32:38:91:78:68:49:BF:A1:DD:3E:2D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5OaLehopjMyOJF4aEm_od0-Lag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/G5OaLehopjMyOJF4aEm_od0-Lag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e738e1-717f-4982-a218-9ca8ae271291/1/G5OaLehopjMyOJF4aEm_od0-Lag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:03:e5:06:bf:21:1f:95:47:8c:f1:9c:dc:a6:ec:4b:87:
39:90:ef:9a:5c:9f:c9:d2:c2:bb:42:3f:c4:69:9b:de:0d:4b:
19:b8:c7:4a:14:89:9b:89:d1:b6:9d:c9:61:f0:27:8f:56:94:
bd:36:fc:81:2b:86:60:06:26:ae:10:83:61:a2:0c:1f:dc:c3:
6b:92:1d:ab:d7:2b:5b:56:bf:7e:e6:5c:af:1b:1d:ac:4f:b7:
a3:07:a4:17:37:1e:de:24:01:9a:ee:c3:3b:ae:d2:55:bf:b5:
66:e7:80:1f:74:d4:14:2d:7e:2b:71:9d:41:21:d8:69:2e:d0:
90:5a:c8:c3:ce:b3:f1:09:5e:5d:7d:69:14:40:0e:7b:71:be:
e8:11:04:f5:9d:5c:5c:fb:f1:20:cb:4a:d8:24:0d:53:72:f5:
d2:75:06:d2:f4:2b:24:c0:08:0c:19:87:d6:06:78:15:b2:7a:
9c:fa:54:a8:b6:03:10:c5:cd:12:28:5e:0b:0a:9c:31:74:87:
20:cf:ab:19:62:09:5e:df:d2:0d:ac:da:60:ef:2b:30:b0:20:
aa:61:41:1a:a3:92:e8:e7:3d:d2:e1:9f:75:b6:e8:75:b4:4a:
74:26:7c:ac:bf:85:54:c5:9b:23:9e:41:72:90:b2:1a:df:41:
70:b2:90:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:52:05 2025 by rpki-client