Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File: gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier: mXyvC+X2jeL7BmvZw1Hr+/MVZjgcTe04RxFZ/RKJ97w=
Subject key identifier: 57:09:30:BB:FE:FA:4A:A3:B2:49:10:F0:E6:19:D8:80:75:CE:2D:C0
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 0194BD858AF3DDE1D76E89AD86037FC6F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number: 0AA7
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
2: WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa (hash: rq9cnpsLBzesNH6rgMT8gVQiRyG9ecQKConKub1KWeo=)
3: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
4: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
5: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
6: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: CqvjwmKvG4THr4uoiCTqzETRtM3fsQAo6iVdQsHB5Ws=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8a:f3:dd:e1:d7:6e:89:ad:86:03:7f:c6:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=570930bbfefa4aa3b24910f0e619d88075ce2dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:98:5d:17:d6:41:93:99:46:b4:1c:2e:59:
f9:85:d3:c0:1a:05:65:98:fd:20:11:71:8f:97:87:
25:03:23:79:93:7e:69:4b:4b:c7:a2:9f:c3:7e:9c:
0c:b6:61:c0:eb:0c:be:52:2e:68:21:66:f7:02:67:
34:70:d2:e8:16:92:e4:05:6d:3d:1b:cd:7c:66:64:
87:e2:22:03:c5:42:c2:b2:fa:c5:96:74:e5:14:fc:
04:f5:32:34:9c:29:fe:fa:89:08:9a:7f:fa:f4:75:
c4:62:2c:f6:cb:7c:49:b6:44:60:8c:7b:49:08:54:
d8:bd:25:e2:fb:ec:8c:b6:a6:76:84:36:f1:35:14:
5b:4c:16:7f:f5:19:e5:f7:fe:26:35:03:ac:67:de:
ca:70:af:74:56:a3:73:85:89:c8:bf:8b:cf:2b:77:
ca:cf:59:8a:3b:a2:af:87:0f:e5:00:78:45:5b:00:
a1:df:de:de:39:68:25:66:71:30:3b:6c:ee:d6:c9:
be:25:0c:a5:79:7f:3a:00:7f:bc:9c:1c:95:f2:70:
75:43:95:15:56:16:f0:e6:ce:53:f8:24:6b:e9:cb:
29:9c:bf:1a:90:3e:38:8a:79:df:8c:c2:e7:34:29:
fa:4a:cf:d7:ca:f3:2d:3d:f9:d0:f2:4e:1c:2b:82:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:30:BB:FE:FA:4A:A3:B2:49:10:F0:E6:19:D8:80:75:CE:2D:C0
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:7e:77:c7:84:5d:98:99:02:04:79:1d:94:40:6a:1d:a8:
86:df:d1:12:5f:2c:75:c0:79:93:06:48:88:ce:79:98:fb:b5:
d4:92:42:2d:3f:32:36:be:8f:46:63:fd:f7:ba:be:94:f4:24:
39:e3:19:65:82:c8:14:b3:33:c2:37:c8:e6:e7:38:09:f4:0b:
86:66:0c:88:d0:aa:47:88:e8:8c:b5:b2:d5:b2:9b:24:ad:5a:
50:bf:7e:66:03:66:da:7a:22:4b:c8:99:12:bc:8b:08:34:5d:
28:45:29:8f:ed:4e:1c:3f:ce:1f:bf:d5:26:3a:09:bc:fb:04:
e5:bc:51:c9:dc:d4:c6:99:e1:88:28:a2:a2:9f:eb:9a:93:cc:
60:04:6a:c5:63:d5:7a:b4:c1:4f:59:c6:89:6f:53:7f:bc:b7:
ff:e6:a1:ed:b3:fe:41:53:20:59:55:49:ad:c3:ec:26:36:8e:
b6:a3:c2:84:9b:c5:5a:27:9e:c5:ff:7e:b4:7f:97:21:d5:18:
b2:58:c2:7e:0f:35:36:b2:f3:17:b6:45:3d:fb:88:cd:7a:e6:
3b:d2:b2:12:28:07:fe:fe:21:90:03:a8:d7:11:4f:b6:c7:87:
37:ab:b8:cf:96:a5:4d:c0:01:15:4e:a7:eb:79:db:0c:8f:7f:
17:db:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:02 2025 by rpki-client