Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File: gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier: cL/vr82LL3eAtbqnRQiv46QJe5oT+/se0pzAobNUzkY=
Subject key identifier: 92:AC:E7:30:2B:42:65:9E:37:CE:6A:9E:84:6A:6C:96:BA:9F:01:DC
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer: /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial: 0194BBCDDC3DDB05D1150524473C2A6072C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number: 13F7
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: 8FLRYVQdX3uKC3EUcIINM4PPH70.roa (hash: AvJSbDISdiRpzDgo8gSH1kCL/FtFtirNCOoP+EDCSag=)
2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: kTULse5Z4c1/PZvOADCyikUCRBPrSyIgqhQS8K4OlFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:3d:db:05:d1:15:05:24:47:3c:2a:60:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=92ace7302b42659e37ce6a9e846a6c96ba9f01dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:23:4c:23:ac:bd:da:06:98:e4:e9:37:a9:
7d:57:c8:3e:d5:cc:da:6e:eb:3c:8a:26:ec:db:c4:
26:b4:88:6c:43:da:c8:2a:06:7d:88:ad:76:58:1e:
73:61:b1:b7:36:0c:4f:9c:58:d2:ed:17:50:a2:77:
e6:56:d8:26:69:ce:53:e1:3c:2a:05:49:91:b6:51:
8a:a8:d3:62:87:09:d5:36:60:26:fe:36:64:0f:c8:
fd:83:0e:b9:f4:dc:8d:f7:99:86:ad:9e:a8:c8:ef:
08:08:f9:06:6f:2f:2d:0f:ac:48:58:73:bd:14:85:
cc:50:fe:a9:4f:59:f4:6f:8e:0d:13:c0:7e:1c:88:
fd:96:3f:ee:4f:33:cd:c6:36:cf:a3:79:ac:4e:7a:
b1:fc:66:87:87:81:2f:24:b1:74:26:64:34:4b:11:
8f:ae:b3:c5:18:8e:35:91:fd:83:52:a7:4f:db:14:
a1:eb:ff:58:77:00:73:95:8d:64:dd:96:e4:fb:3f:
12:62:9f:cc:1a:99:6c:5a:b4:7f:ea:5d:66:8d:ec:
30:c1:02:43:1d:7c:84:ec:30:0c:7b:be:07:a0:95:
79:6b:00:33:95:5d:9a:46:d5:e3:49:28:2f:6f:93:
34:bd:ed:f2:8f:95:4d:ac:b2:25:2e:2b:b0:74:a7:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AC:E7:30:2B:42:65:9E:37:CE:6A:9E:84:6A:6C:96:BA:9F:01:DC
X509v3 Authority Key Identifier:
keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:91:01:b0:29:6c:b5:b7:85:bb:57:ea:8d:aa:96:88:c5:
8c:01:c7:9f:fa:a9:85:fe:f2:3c:47:e8:ec:8a:b5:e6:49:8a:
1d:5c:c7:c7:fb:83:c6:74:cb:5b:6c:00:d3:ed:cb:1c:48:eb:
2e:40:dd:f3:a2:95:18:6b:6d:b3:6b:1b:ab:2b:dc:4d:37:06:
cc:c2:be:4e:c2:70:c1:b0:dd:af:90:41:08:b8:f6:81:3d:46:
6f:64:84:f2:91:7b:5a:e6:01:fb:f7:07:b4:71:63:db:26:7c:
75:43:59:06:26:81:59:61:a8:49:16:73:bd:eb:cf:9a:1a:06:
f6:60:88:87:a1:d7:d9:2d:fe:29:96:87:67:81:8a:3d:e4:79:
03:7b:4a:ee:13:3a:c1:48:2e:5a:f7:e1:a4:1a:01:b9:fd:6d:
ec:81:ab:49:1e:ec:2f:7a:fe:fd:df:a0:aa:98:8e:18:b5:62:
bb:46:1d:87:4d:47:c9:0a:ca:49:ef:e8:23:ef:55:b8:f6:ed:
a1:c9:e9:c4:a1:b1:ae:d7:ec:8b:0d:db:1a:2a:6c:4a:c7:6b:
2a:04:8c:c0:4c:45:84:dc:90:c3:ba:21:c6:42:e1:ba:da:e6:
58:d9:61:d5:26:66:32:d6:e2:43:0a:58:4e:1c:f9:af:a0:10:
20:e0:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:20 2025 by rpki-client