Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File: gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier: fRYbzH0dqhtCYQzEF1PwHVdl2IzccjhC9CM0XhTBVqw=
Subject key identifier: 55:CA:38:85:83:52:89:7E:AA:F3:A1:8F:1D:C3:45:C7:3B:7B:DA:54
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer: /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial: 0194BCA9A9FFC340495A46C0BE5A72F2C91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: lMpwy7ERmpocnXuG+j0SRG1xat0tQU3tqH71QqxiUj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a9:ff:c3:40:49:5a:46:c0:be:5a:72:f2:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=55ca38858352897eaaf3a18f1dc345c73b7bda54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:8b:a2:9b:b8:8e:3a:d3:49:83:65:6f:78:
90:96:64:e6:fa:16:65:a9:cc:33:b4:a2:e2:03:9a:
f8:f4:b9:8d:65:b9:56:e7:09:9c:f8:a0:27:80:7f:
b9:62:bb:cb:7b:91:df:ce:5e:b3:bb:30:19:db:29:
a1:ff:83:0b:29:a8:54:1f:b6:82:d5:fa:18:b2:f3:
f6:0e:0f:52:9e:9a:8f:ed:79:5f:a2:99:55:54:ea:
3c:2c:05:a0:7f:65:a5:f3:4b:89:8c:ec:5c:f8:bc:
93:6f:d5:6a:21:68:90:b7:9a:41:0f:24:1d:db:0e:
00:9a:14:3c:67:aa:68:70:d5:cb:e1:25:03:c2:b5:
e0:7d:d5:eb:2e:be:90:16:cf:28:c7:e1:19:74:2c:
c2:aa:94:34:48:7b:97:fd:f0:f4:62:f5:7f:c1:58:
5e:57:65:11:42:0a:bf:7d:b5:b2:b8:a8:88:42:b0:
0a:b5:8d:42:06:63:74:c1:47:50:90:30:16:56:80:
24:40:30:20:f0:78:6b:b1:eb:a4:a6:45:0b:fa:2c:
8e:4f:3f:c5:c9:86:d0:6e:c9:e9:ee:05:10:26:04:
69:9a:ce:f9:d3:af:28:af:e2:c8:57:8a:1e:2f:c2:
69:f9:59:5b:c2:5a:f1:f3:6b:f4:c0:aa:65:21:74:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CA:38:85:83:52:89:7E:AA:F3:A1:8F:1D:C3:45:C7:3B:7B:DA:54
X509v3 Authority Key Identifier:
keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:65:98:a3:95:cb:39:44:bf:6c:75:04:81:50:9d:03:38:f7:
94:f0:f6:06:bf:d8:19:0a:60:eb:39:62:aa:c0:25:4d:c0:c5:
70:0f:49:4c:69:8c:f4:04:54:c9:09:b2:2d:26:c0:60:9e:6a:
d4:f7:9b:66:c9:a0:18:9c:c2:b3:9f:19:2e:4d:75:bf:9c:12:
c6:00:c6:96:b8:24:54:55:33:ca:d8:c2:ad:2c:35:be:f0:55:
e3:ee:0b:ea:73:30:13:ab:9d:ae:da:f4:7e:78:d5:9f:08:9d:
4b:4d:10:f7:a3:8f:d9:5a:50:35:f3:a4:44:d5:ea:66:69:75:
c8:ee:c2:b6:0c:30:27:d4:00:0a:91:11:b7:57:4b:07:bf:ca:
68:81:a2:77:50:ee:59:de:0c:7f:64:fa:9c:ca:a8:f5:28:39:
ad:1c:e6:90:e1:1f:0d:74:09:d0:87:d6:1d:05:74:a6:80:71:
a9:dc:f3:5a:ab:7b:61:5e:d1:3b:6e:2d:a7:8d:e8:e5:7d:dd:
81:ef:13:61:1d:cc:85:87:7d:e3:c8:91:4b:5c:7e:0f:eb:1c:
28:19:a9:03:6b:f5:80:07:bb:4d:ed:f4:7c:5d:37:aa:93:4e:
1e:5b:bb:d2:9e:6b:ce:1f:e2:00:bf:40:19:15:d5:34:ea:a0:
ab:e1:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:45 2025 by rpki-client