Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File: gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier: xZnfEJHE8WkDGfbqikUNNcAUJ4NRVF61PoRYJmBZ+PI=
Subject key identifier: 8E:B7:A6:E8:7E:C1:10:B4:3E:9C:61:50:5C:04:A2:32:63:2B:89:37
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer: /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial: 0194BC3C5E7B70DE9E6758967FEAB9008A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number: 05C2
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: YsN1iTrVbgdgiC7773sEovvK+OkaNZI0qznYd80Uw4s=)
2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:7b:70:de:9e:67:58:96:7f:ea:b9:00:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=8eb7a6e87ec110b43e9c61505c04a232632b8937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:52:93:9c:0b:0f:8d:14:31:b8:d0:87:db:
23:d6:de:0e:29:5f:6d:92:f8:e6:d6:45:d7:8b:15:
a4:89:34:1d:2c:40:21:91:44:2e:0d:27:e6:2d:b1:
14:75:9c:9b:4b:49:c7:d1:3b:6f:5d:4d:db:a4:06:
2f:1f:e2:52:aa:d7:7e:37:6b:8f:ec:b1:2c:71:4e:
0c:e4:09:8e:c2:e4:46:fc:02:30:55:92:44:74:bf:
cf:7c:78:63:b3:05:3f:e8:2b:84:0d:f3:2f:e9:4b:
e3:b4:88:61:94:67:94:18:f8:b9:da:71:21:0e:e1:
1a:5f:51:0b:96:26:c9:f5:d7:8c:80:ad:c8:10:44:
08:f7:be:ca:11:07:a2:a8:67:e1:13:53:65:02:77:
7c:7b:4e:c3:fb:73:e7:a4:f6:36:ca:b2:02:c2:5d:
89:a6:53:f7:d1:13:ab:6b:0d:77:37:1f:cc:56:02:
aa:f4:8b:a6:67:d5:51:2c:aa:82:ab:49:15:bb:a7:
ce:51:37:2b:44:39:38:d9:b0:92:ea:e1:12:34:6f:
ce:cf:51:1b:fd:32:f4:40:d9:0e:1a:5d:f6:b3:6c:
88:ad:02:2b:5d:75:6a:05:24:ec:bd:43:9e:a6:48:
c0:5e:ae:b0:c9:10:88:eb:14:e0:f4:98:67:f3:bd:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:A6:E8:7E:C1:10:B4:3E:9C:61:50:5C:04:A2:32:63:2B:89:37
X509v3 Authority Key Identifier:
keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:58:65:e0:33:ba:aa:e6:0c:c5:72:74:e2:96:e9:24:4a:fa:
64:70:4f:20:d3:c5:9e:e6:00:52:fb:3d:b6:e6:5c:05:ac:bc:
79:39:d6:81:43:bd:9c:5b:bf:10:63:0e:3e:1a:36:6f:83:fa:
77:ca:a5:1e:56:18:9c:18:f3:cf:cd:ef:b1:c9:9e:80:3a:43:
44:21:17:f8:6d:ea:17:e1:73:47:49:42:63:74:cf:86:ea:e2:
a8:61:10:d8:14:26:8c:e0:86:9e:bc:29:39:60:51:40:81:08:
cc:ba:8c:db:28:a3:62:17:bf:15:74:61:20:78:f9:26:74:a8:
04:71:de:24:2f:bd:7b:3b:b0:08:c4:66:a5:b0:50:90:27:6e:
3a:60:d5:b3:d2:3c:ae:d1:fc:e9:27:71:33:6a:e1:fd:fd:bb:
1b:d6:76:22:98:2f:e3:b2:32:25:bb:41:6e:ee:68:cb:6e:79:
49:7a:57:3f:48:36:2e:57:94:94:9d:a5:6a:2a:c9:19:20:a9:
7b:77:90:c2:4c:e6:90:67:0f:2c:82:f3:43:2c:30:3d:e0:f5:
54:33:b8:82:f1:4f:a4:e7:12:62:30:14:b5:07:4b:fd:23:d9:
d5:a6:df:40:5f:f2:d6:c6:9c:bd:ab:d6:6f:82:53:c4:16:39:
1c:ed:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:14 2025 by rpki-client