Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
File: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft (raw, json)
Hash identifier: SFqX/4bZaX4NE9Wdl92JjYqJ7/mK8B94tFZM4mgRIvE=
Subject key identifier: 95:8E:3C:04:12:0F:29:3C:87:79:6D:A4:48:03:EA:18:81:E4:E3:AE
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Certificate issuer: /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial: 0195E159F6F8730601D22E257956832B99D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
Manifest number: 02C2
Signing time: Sat 29 Mar 2025 10:02:04 +0000
Manifest this update: Sat 29 Mar 2025 10:02:04 +0000
Manifest next update: Sun 30 Mar 2025 10:02:04 +0000
Files and hashes: 1: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl (hash: Xr6k7ijWQvfHF0BTFdCJXfj0UFPAEyonT9PFP61k9sU=)
2: M2pucQblYYW9Ed5SEiQtHoACy2U.roa (hash: DODZnFtncWTHKJyGcnZyitqgS3XB5iWWj/4xm4bmBmo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:f6:f8:73:06:01:d2:2e:25:79:56:83:2b:99:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
Validity
Not Before: Mar 29 10:02:04 2025 GMT
Not After : Mar 30 10:02:04 2025 GMT
Subject: CN=958e3c04120f293c87796da44803ea1881e4e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:f5:f6:5c:4b:c0:81:15:93:ef:f2:97:77:
ba:74:ff:3e:d7:40:ee:70:cf:95:b7:a0:f9:ea:5f:
ff:bc:c4:2d:f4:42:0d:e0:a8:a7:74:78:80:2e:f5:
17:6c:07:c8:44:4a:46:c7:e6:fa:64:35:05:a6:f5:
cf:9d:98:d4:3b:bb:30:94:da:cb:8c:13:4d:f4:a5:
7e:86:3a:5d:c8:f3:cf:09:6b:b6:a2:34:58:f8:7b:
7f:55:7b:37:55:28:9b:68:65:ef:74:0e:05:bd:ec:
81:d6:06:aa:22:29:d2:e8:4e:d5:b6:4b:5c:de:71:
76:ba:49:7f:0c:c2:b8:aa:99:85:e7:fb:de:ca:33:
7b:a8:66:0a:fa:78:71:77:35:c0:b2:11:2f:36:18:
27:49:73:81:58:00:cb:c8:74:09:c4:b3:06:30:25:
70:62:77:19:74:56:7c:a8:57:df:82:6d:20:6e:a9:
c9:5f:f7:92:50:63:58:c7:43:ed:99:dd:2b:8c:f5:
1d:0b:5b:b1:8f:09:11:87:2d:88:91:d2:6f:af:4a:
62:02:5a:5e:39:85:4c:d6:ac:44:8c:d0:b8:96:26:
82:61:cd:c4:5f:10:f2:f6:fa:44:e0:a7:1e:d7:c4:
21:9c:4a:dd:25:7e:a5:32:63:da:e1:f8:f1:34:17:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8E:3C:04:12:0F:29:3C:87:79:6D:A4:48:03:EA:18:81:E4:E3:AE
X509v3 Authority Key Identifier:
keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:bf:c1:ef:bc:db:46:b5:fb:f1:56:b5:94:db:98:46:09:
76:84:b8:7e:65:a5:58:98:59:e1:b5:fc:12:33:df:dc:d8:e7:
9f:8c:57:8f:5a:d4:89:80:b9:17:00:df:e4:4f:29:ff:97:53:
52:e3:c8:2d:bd:7b:d9:86:47:2a:77:b9:f0:d2:1c:1b:6f:d7:
5e:48:d9:73:b0:ed:47:c1:30:21:98:9c:ba:74:94:44:05:e1:
52:56:1d:ae:77:5b:de:66:20:4c:c0:9c:7b:a7:df:b9:96:29:
2a:c6:ae:02:0a:33:4c:a9:42:83:02:c2:68:f3:94:ec:7a:b5:
27:0a:b5:ed:22:d8:b7:96:08:53:e4:2f:01:fe:d5:45:81:46:
bd:e1:19:8d:c5:2d:85:84:a8:8e:39:03:89:bb:d1:b5:c8:7e:
b4:38:fd:f8:b5:81:f7:62:55:7c:1f:77:04:27:7e:59:df:1d:
e0:b2:fb:aa:15:ed:69:a4:09:6c:34:1d:7b:d8:76:1c:ee:05:
c3:bf:44:83:42:14:8a:f9:48:2c:8f:44:1c:37:73:e8:41:d8:
f3:95:67:ae:3a:9d:f2:06:9d:c4:d2:df:6f:f8:b0:c0:03:10:
7b:f7:89:6e:d4:5b:75:fd:04:35:f4:2e:86:fa:3b:39:01:90:
e1:aa:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:58 2025 by rpki-client