Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
File: GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft (raw, json)
Hash identifier: KqI+ueebTRy/C+3Aa1ZBJyCjNGFBWBuklPB6TytrBH8=
Subject key identifier: 31:5B:47:6A:A0:04:32:45:9B:B2:74:97:30:20:2B:52:6C:42:4C:3F
Authority key identifier: 19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
Certificate issuer: /CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Certificate serial: 0194BD8594483790B557EE3FE9A9094979C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
Manifest number: 030A
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: E9TifD1sfMQN679LyLG0hiwKeX4.roa (hash: 7SvhO02KqCz55FUneR+KgndNdPdJd/1FqEb2wmvkStA=)
2: GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl (hash: MjoYPqjo76Bdqd3/KOF0cIr1lEahqtImUpiiMstNSmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:48:37:90:b5:57:ee:3f:e9:a9:09:49:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1960ae666a682b424f6c994ab2e014dc3c64fbcf
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=315b476aa00432459bb2749730202b526c424c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:e3:f3:53:e5:36:26:75:16:07:30:27:e4:
7b:39:be:26:14:1f:ec:a1:ba:3c:7e:72:31:17:d1:
31:e3:5f:40:61:ad:78:8b:68:b0:c3:30:5d:08:7c:
7f:76:eb:84:4a:18:fd:32:10:cb:d9:fa:65:dd:25:
6a:97:c0:b7:73:f3:55:13:c3:e9:d0:bb:34:d3:62:
43:bb:cd:97:9e:5a:48:c2:19:51:00:cf:f8:b3:98:
fe:58:cb:a1:e5:05:a2:2a:ac:25:94:5e:6c:66:72:
b4:ea:5e:d2:ef:20:a8:02:ff:cb:0c:a3:bf:2f:cb:
c7:ce:4e:68:67:15:56:6f:b8:60:b3:e3:6f:39:9b:
8c:86:65:9e:27:29:de:8e:ff:7d:f7:02:a9:38:ae:
f1:ee:d5:fa:b6:29:b0:a3:52:25:67:84:3e:3b:43:
d4:a4:f1:3d:02:a0:59:5e:7c:29:0a:65:94:02:e3:
80:ba:aa:12:2e:b6:a1:d4:e6:61:d2:23:98:8d:3f:
7c:7c:e5:78:03:d7:39:fb:91:4d:f7:02:02:04:89:
80:18:91:e5:34:bd:f6:a4:13:62:0f:a5:ce:65:45:
3c:f2:c6:96:8b:91:2d:56:be:9b:25:37:f6:01:65:
79:6d:0e:9f:72:65:54:03:9c:20:a1:f8:12:5d:03:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:47:6A:A0:04:32:45:9B:B2:74:97:30:20:2B:52:6C:42:4C:3F
X509v3 Authority Key Identifier:
keyid:19:60:AE:66:6A:68:2B:42:4F:6C:99:4A:B2:E0:14:DC:3C:64:FB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWCuZmpoK0JPbJlKsuAU3Dxk-88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4c0de9-42a3-44dc-998e-523d20925dad/1/GWCuZmpoK0JPbJlKsuAU3Dxk-88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fb:5d:39:73:4a:d1:16:03:9d:29:cf:d8:77:d7:6f:30:d2:
39:c6:0a:4c:3c:0a:ed:22:5a:e7:6a:31:bb:7b:6e:51:88:39:
68:8e:5b:c0:33:76:68:9e:42:f0:d0:0e:9a:fb:1a:ca:3b:d5:
3c:f3:ef:e6:e6:ae:58:c7:2d:e4:d4:98:15:77:08:ab:2f:7e:
b8:65:9b:66:10:51:2b:d7:17:9f:0d:c8:99:90:e9:3f:81:8e:
1e:5d:5a:a4:52:99:45:e8:8f:e5:06:47:4c:86:e2:16:d6:18:
b4:e4:fe:5c:6b:b4:9d:05:f0:59:4b:70:c2:2c:bd:3d:2e:49:
14:45:0d:f2:6f:54:c2:eb:7a:d7:dc:b4:fe:c3:78:f8:a7:4e:
ff:90:f0:81:cd:1e:cd:6a:da:82:df:65:0a:8b:6a:c6:fe:35:
ba:12:18:ae:99:d4:65:04:80:ec:7f:57:f6:72:3b:b1:b8:b6:
6a:d7:62:cc:97:46:f1:18:f5:a0:e2:86:10:73:75:7f:fe:22:
c2:59:57:3b:59:7c:9b:d2:bf:35:41:c3:93:12:ea:21:7e:16:
a3:55:41:e5:7a:ec:fb:02:b8:7e:14:6a:26:20:7c:f5:da:97:
98:26:d6:59:37:48:dd:bf:fc:23:4a:65:91:93:d6:ce:06:9c:
7e:68:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client