Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File: GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier: hkW5ToGLIT2mMBiV86DX1x9JBzapg5ZJBYClTWWHl0A=
Subject key identifier: 08:0A:68:8C:85:75:5B:E3:0C:15:02:54:73:3C:20:03:21:63:51:71
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer: /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial: 0194BC04E64C7F58A5441E4A20A66A860ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number: 05BE
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: IkBmbUBVKvF+Xxyl5BYr77UbhB0CinbFLkbU4Mw+HB0=)
2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e6:4c:7f:58:a5:44:1e:4a:20:a6:6a:86:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=080a688c85755be30c150254733c200321635171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:7f:a7:d4:90:b9:96:4f:6c:b1:59:7d:f7:
10:90:eb:7d:7d:18:e6:12:7b:a3:b0:62:f3:a3:99:
38:b4:62:16:85:1d:3a:44:50:a0:a3:db:5f:c5:98:
bd:ae:86:bc:09:c6:0e:eb:a2:6b:3d:c7:6e:f4:84:
46:93:b9:d2:b9:1b:d1:0b:4d:1f:5f:14:86:6e:7a:
33:a2:32:06:d9:6b:9a:14:0a:eb:8b:3e:8a:64:6f:
36:5f:f5:1a:34:35:49:bc:f4:a1:31:83:a0:44:6f:
b9:aa:8e:5a:97:5e:8a:39:9a:b9:b6:d3:34:20:fe:
df:5f:32:6e:b6:39:12:0b:ca:d4:a5:36:85:dc:f1:
3f:97:31:2f:ca:05:ca:f4:5d:54:ee:fa:95:de:ff:
5b:ea:35:d3:99:c9:db:d7:e0:13:28:8c:ca:79:4b:
b9:af:0d:c0:cb:11:ae:e8:ab:0c:ab:8d:e6:5e:c5:
46:cb:bd:f7:15:f7:4d:84:a9:be:8c:89:26:70:15:
ac:92:e0:61:56:ba:1b:28:b7:13:1e:97:85:7c:09:
e0:ff:c0:c4:5e:ea:cf:51:e9:2a:dd:ad:f5:52:a2:
01:a8:2a:31:18:68:22:00:09:40:ce:70:f4:8d:de:
22:6b:f3:62:28:6d:e8:1d:68:c0:94:bc:1d:7d:90:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:68:8C:85:75:5B:E3:0C:15:02:54:73:3C:20:03:21:63:51:71
X509v3 Authority Key Identifier:
keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:96:d1:d4:21:e3:41:31:f7:c0:ea:06:41:53:5a:34:09:
52:41:d4:2f:5f:1b:c4:2a:6a:81:f6:6e:12:9d:57:39:7f:22:
27:4b:9c:4b:db:e9:2d:04:1d:9f:54:22:29:8e:54:5e:11:fc:
8c:be:ba:12:a9:56:c0:59:76:2e:64:96:87:95:22:cb:47:ad:
27:91:66:55:59:69:68:81:4b:82:92:bc:84:a1:bd:c9:ed:88:
3a:27:6a:fe:cc:55:bc:c8:93:53:65:a8:28:02:fd:1e:81:44:
4a:0a:1d:cd:11:d2:84:40:b8:b3:ef:d3:ff:e8:73:96:5a:4e:
72:d5:ea:ba:8f:5a:4d:a0:fa:86:fd:13:8a:6d:ef:7d:11:43:
3c:a7:16:1d:a7:70:a8:d0:b6:2a:35:94:3c:53:9c:63:5e:84:
2c:42:50:f3:82:5c:60:f0:4e:ea:a2:d9:db:8d:0f:db:eb:41:
d8:1b:b1:69:a8:79:04:64:74:e7:ad:83:e4:db:b2:ed:64:f2:
f4:f2:54:90:1d:81:0f:15:f3:57:cc:75:28:85:77:9f:89:9a:
e7:01:46:0a:a4:c2:88:28:11:29:07:6e:dd:ad:58:bd:c9:50:
8e:84:d3:e0:06:b6:89:3e:bf:80:37:ac:b4:87:32:16:b0:e0:
49:c1:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client