Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: 3GCE9NTA66Llo28CTA7LaD+Py1F24ObcvQ9VlBugsCk=
Subject key identifier: 01:25:45:6E:A1:E7:5C:9F:58:C4:F2:7E:A1:F2:9C:7A:80:FA:A5:77
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 0195E0EB0AD10476E4FDDCE4CF07A6992454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 08:00:54 +0000
Manifest this update: Sat 29 Mar 2025 08:00:54 +0000
Manifest next update: Sun 30 Mar 2025 08:00:54 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: 1P01/k3dRQ8FM15aAgz5TyNjyKbZypxV69pi8bH32mk=)
2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0a:d1:04:76:e4:fd:dc:e4:cf:07:a6:99:24:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Mar 29 08:00:54 2025 GMT
Not After : Mar 30 08:00:54 2025 GMT
Subject: CN=0125456ea1e75c9f58c4f27ea1f29c7a80faa577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:45:1a:73:2f:28:27:9f:4f:69:54:d6:6c:
8e:fa:15:4c:aa:dd:6c:91:fe:13:ef:c8:5c:a6:53:
70:a5:71:d1:7d:0a:dc:dd:a4:e1:43:bc:86:05:eb:
fc:bf:17:40:44:8d:ce:fc:aa:4a:77:dd:df:d6:50:
76:7d:80:71:25:6c:d1:61:a6:94:a8:f8:7f:d3:00:
b8:ce:c1:2b:6f:58:46:e7:5c:52:50:1c:c7:59:c0:
f5:c4:90:40:fc:09:80:b1:fc:a9:0e:2c:9f:14:c2:
7a:de:f9:43:c0:71:70:c7:65:25:45:f5:d8:ac:f8:
ea:24:66:e7:7b:c8:4e:55:a0:81:70:5a:4e:af:cd:
60:b0:43:36:e5:e6:cc:b1:9f:e8:f1:2f:fc:69:e6:
e2:49:d2:46:c0:84:07:26:4b:ae:12:c1:f1:b2:5a:
45:8e:c8:14:42:57:82:d1:b8:6b:31:9f:7a:c0:d5:
83:72:09:88:4a:52:d9:be:83:08:8d:95:c9:08:58:
ad:0c:85:4e:a8:74:17:0a:a5:1f:cb:fa:2d:76:08:
52:1e:90:e4:8a:aa:a2:7a:0b:31:20:75:c4:a4:1e:
30:d9:2e:9f:47:7f:1c:95:21:4e:e1:ae:80:23:5d:
87:2f:e8:ef:17:66:2c:bf:33:bc:e9:01:bc:5d:d3:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:45:6E:A1:E7:5C:9F:58:C4:F2:7E:A1:F2:9C:7A:80:FA:A5:77
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:dd:2c:71:ee:01:fc:9f:6f:ce:a9:60:71:f0:93:06:87:44:
97:7b:dc:57:6c:4f:8c:e7:5e:7c:25:28:e5:9c:90:fa:9e:8f:
71:6c:f4:54:36:4c:92:88:ee:81:89:8c:b1:4b:20:ec:90:1c:
57:ab:55:df:cd:2e:04:81:a7:4b:7e:77:7d:e4:37:cb:a0:c1:
a7:2b:26:1d:d9:8b:10:3f:18:01:e4:c7:f0:25:03:7a:cf:39:
c7:f7:97:e2:4d:09:cb:fb:6e:8d:38:90:bd:b6:9b:75:f6:ff:
26:7a:2e:87:e2:8e:b6:c4:81:c3:da:e4:7d:26:3f:de:68:cf:
02:04:c7:0e:18:6a:7f:e9:76:5d:c8:d7:82:58:49:c2:c0:34:
c0:38:15:46:16:61:f6:45:0e:52:2d:02:cb:08:cc:51:32:c0:
ac:7a:93:57:ed:2a:8b:25:cc:31:60:62:7e:0c:91:f8:ec:dd:
64:88:66:a5:78:36:1f:f8:b0:11:77:94:21:60:d5:19:81:5f:
bc:cc:45:4e:c2:32:c7:24:1b:d4:1c:bc:d5:77:92:ab:c4:9b:
4e:98:66:2a:e5:fc:b0:46:1b:24:f9:2d:dd:65:fb:1d:54:4a:
56:68:9b:8a:66:9f:58:e8:a3:57:55:0c:80:eb:c5:de:8e:bb:
57:63:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:58 2025 by rpki-client