Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
File: gvJFXc9FrmWm_cz494Ic48UkAR0.mft (raw, json)
Hash identifier: imVtTnJZ4gLBFMpf0Ki13piXfnRB9iZYkJmK2WyZ6dg=
Subject key identifier: BD:B5:D8:2B:9E:56:51:7B:45:BB:ED:15:4F:DF:BE:EB:24:BF:5E:33
Authority key identifier: 82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
Certificate issuer: /CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Certificate serial: 0194BCE0ADFC53DC0490D1A19F59E47F4145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
Manifest number: 1410
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: eS_V4C4cNESsUi7U8IjjlNIhlSE.roa (hash: wdsqtGZ831qd+AJFvCqG1OGszbCCIEt4963PPzg5D0k=)
2: gvJFXc9FrmWm_cz494Ic48UkAR0.crl (hash: hGGadIpOoUfohLVB2BRxk2Kygs3sagH00qVwvKwb6c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:fc:53:dc:04:90:d1:a1:9f:59:e4:7f:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f2455dcf45ae65a6fdccf8f7821ce3c524011d
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=bdb5d82b9e56517b45bbed154fdfbeeb24bf5e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:75:76:70:cd:be:30:de:75:42:c5:02:ff:
1b:4d:79:d1:f4:da:5e:03:b3:c1:4f:36:3f:4e:85:
6d:20:74:c8:76:55:4f:d1:d7:b2:ca:5b:58:7c:36:
04:a0:6d:9b:8c:33:7e:ed:4e:24:09:6b:03:a7:a9:
ef:46:c7:0a:91:28:df:db:99:1c:45:34:2f:f4:73:
2c:1c:1e:5f:f8:99:91:4d:31:40:54:b6:70:a0:5e:
cf:58:30:fc:15:c6:06:41:61:c9:34:33:37:19:af:
e9:f3:af:81:86:db:37:97:c9:41:8d:cf:20:5b:48:
ad:f2:44:07:40:18:fc:b2:16:48:d1:3a:60:bd:05:
8b:9a:26:21:11:cf:7a:ce:de:c9:b4:3e:d3:77:11:
7c:88:1c:bd:d1:2f:f1:9f:c8:37:98:54:4f:44:1a:
f7:91:69:84:62:b6:13:0e:ae:b7:a3:f8:e2:2c:79:
d3:18:b5:bc:2f:4c:05:c0:65:e5:e1:fc:b2:ae:b4:
24:85:47:95:f1:d7:7f:14:c1:e5:ae:ea:28:13:87:
39:3b:3b:e4:30:54:cc:fc:15:01:47:d2:f0:27:4e:
b7:93:3c:ff:0f:88:3c:83:31:56:c6:25:19:2c:de:
bf:6b:1c:bb:9a:4c:61:33:a6:e5:d5:7d:b1:03:23:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:D8:2B:9E:56:51:7B:45:BB:ED:15:4F:DF:BE:EB:24:BF:5E:33
X509v3 Authority Key Identifier:
keyid:82:F2:45:5D:CF:45:AE:65:A6:FD:CC:F8:F7:82:1C:E3:C5:24:01:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvJFXc9FrmWm_cz494Ic48UkAR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a24de-44f0-4a54-9137-ecd9faff262c/1/gvJFXc9FrmWm_cz494Ic48UkAR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:8e:69:f1:48:6e:12:d5:01:73:87:62:70:d7:d4:c2:f8:
e8:0f:aa:9e:55:f1:bd:ce:10:f6:0c:5d:61:2d:fc:8a:ce:c8:
01:67:14:3a:ad:ee:69:69:31:d7:90:3f:18:cb:6a:5f:53:cc:
8e:84:72:c4:07:2d:01:15:e1:0e:fd:3a:67:61:9a:07:39:df:
63:48:98:35:6c:cb:fb:7d:0d:32:07:9c:d7:31:49:63:86:72:
3f:0c:6d:fa:8f:fe:bd:17:18:d3:34:3e:58:47:2e:66:b5:51:
56:b6:58:d4:29:e0:1b:26:56:2d:16:82:51:b5:f1:e7:00:e1:
a2:04:f2:db:d3:17:1f:dd:d5:40:d5:4e:c5:0a:be:6e:9a:f1:
15:d0:db:fa:7d:56:ee:5f:ae:4b:bf:9b:e9:ed:49:73:ca:e9:
eb:5d:5a:8a:79:cc:80:5d:0e:35:24:5c:f1:b9:07:7b:c6:36:
e9:a8:07:9e:f7:95:46:87:73:c3:e3:d6:5e:f6:67:d4:04:f8:
73:75:97:00:6f:8b:eb:1b:eb:4b:a0:65:09:68:90:55:95:67:
6d:98:3b:01:7c:94:c1:ab:03:2a:0b:3b:ca:3e:93:a4:56:85:
31:b2:7a:a4:f5:89:91:aa:fe:ad:41:2c:af:87:54:83:07:c8:
eb:68:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:31 2025 by rpki-client