Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: uBqfXx4dQsJJpv7wdcndR6YKbOsM9r08mwuvYe4XJ8o=
Subject key identifier: 7E:D8:C9:6F:EE:33:7C:7D:A2:2A:B5:DB:97:42:94:C4:5D:C4:ED:80
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 0194BC04C7415321D90D747337595B297FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0AA6
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: 6Usb3ratYZ6D0Zaywu3zy7asyBM.roa (hash: mvJx8LQJM9rCQnMcKS37JkzCfYNP4MvGhPiFvu4e4PM=)
2: A8mHxLEXrqAFOW8BcAYBSd_XzeI.roa (hash: I8bAl/t+XgVEF3PHnvvr21l0GKu6zhVZ0Hhxzvtle2M=)
3: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: AGFOZXADbQe7R0a2uuJmmmp/RdMCifz0orrTJ+/IhWU=)
4: KPfcL3irOKeFnGKTIjqaXWtdJTU.roa (hash: 7sW3Ga16GFJniEHMt07dxCSlWmJVaB2HF6PzWi2CMu4=)
5: ScAFpN6HXhn2d-9KA3-XrhqvKKI.roa (hash: w5/z2L8qqgjYAxUqeC/hEc2RLTI0t7JTiIhe8154Qcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:41:53:21:d9:0d:74:73:37:59:5b:29:7f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=7ed8c96fee337c7da22ab5db974294c45dc4ed80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:f3:0a:01:f5:fe:f2:01:19:cb:fa:39:70:
01:4e:c1:06:8c:ff:08:f0:57:8c:23:67:03:22:0d:
87:a1:4a:42:a2:3c:ad:10:77:ce:4d:76:ed:8b:ee:
bb:99:3c:10:ee:08:7c:46:e4:0b:59:d9:61:11:5a:
43:4c:80:d6:52:89:b4:4b:34:89:91:55:2c:3b:f9:
e1:c8:87:85:f7:56:8e:2b:bb:56:ca:f6:a9:03:0f:
c2:00:09:37:c2:44:8e:65:a6:79:c9:6d:46:36:50:
ae:82:c9:f4:62:3b:16:c9:60:a3:77:68:f5:76:a7:
ce:ee:e2:ec:1d:91:40:9b:31:d4:c1:10:d5:b0:53:
f5:8a:03:de:06:5a:df:78:22:39:7d:16:bd:e1:ea:
60:76:f7:6f:a4:d5:28:b0:22:89:d7:4e:a4:8b:af:
1d:21:a5:4f:a7:ae:00:8c:46:05:e1:12:8e:3c:5f:
5f:85:70:86:46:3a:45:f2:65:28:15:e5:07:33:16:
58:80:0d:dc:52:7f:0f:66:67:e0:14:81:0f:0c:67:
15:e3:1c:6f:21:e6:68:39:7b:00:17:44:2f:34:ba:
57:c9:4c:fa:97:85:d6:ce:e3:14:44:e5:f8:91:f6:
0b:b1:20:4a:ba:a8:f7:08:fe:cd:69:67:bf:67:7b:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:C9:6F:EE:33:7C:7D:A2:2A:B5:DB:97:42:94:C4:5D:C4:ED:80
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dd:b0:ad:1f:48:b5:23:b8:be:40:9f:67:16:8d:a7:71:91:
96:41:d6:c4:60:7c:42:a3:c7:ed:bc:6b:2f:7b:05:c0:9c:8a:
85:dc:79:23:bc:d4:a7:88:a0:41:2c:96:76:3f:8f:de:9c:70:
30:c7:04:27:61:e3:f2:d3:1a:cb:74:48:a0:a7:4e:74:53:a8:
0c:6b:ab:1f:14:f3:6b:40:79:16:05:db:15:35:ed:26:28:5d:
7a:25:5f:2b:7b:46:71:55:87:5d:36:e1:cd:63:9c:f3:ae:0f:
b7:9b:57:f5:7b:f9:2d:35:90:e5:92:dd:17:20:56:72:20:6b:
3a:63:31:22:66:70:3b:5d:c6:df:7b:3a:5e:b4:4d:15:c5:b0:
99:26:3b:b2:8b:2e:1b:78:48:1b:fe:9e:55:84:f8:c8:e8:b5:
15:55:3b:86:6e:ff:05:2c:52:7b:1c:82:9b:a7:82:37:d2:7b:
b4:2e:d2:80:f4:c3:97:43:77:97:11:a3:65:9d:0c:d9:b7:6a:
70:a8:43:7b:da:b3:79:b5:cf:47:3a:14:fa:a2:ec:e6:bf:43:
5a:64:1c:7b:23:a0:1e:29:b2:d1:98:76:c0:33:3e:9f:15:42:
49:f7:32:f1:47:06:cd:54:cc:b8:74:60:e3:a7:64:1d:0a:87:
b7:84:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:28 2025 by rpki-client