Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
File: gvGLgDOdiuY39KAvM1u-x8jCa94.mft (raw, json)
Hash identifier: fN44KrY90wriZCm3tN9r5sgKO3qkdCW/uJy5mdOWevc=
Subject key identifier: AA:D2:55:5C:82:F0:09:59:75:C5:12:11:C7:9E:B6:BB:3E:3E:CC:F8
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Certificate issuer: /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial: 0194BC72AAD58BE0DBBBCF61FD174824127D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 1-q3Sc_aFuf3HEfZnJlmO5IobYdI.roa (hash: 1ZydJMw0C7UeG9c7OwbN/uc3B58dbwLgrfGBkI/dEhg=)
2: gvGLgDOdiuY39KAvM1u-x8jCa94.crl (hash: GrfuSkRgQw8Y3c9ilcUorT4uVBG94LDx7LHcAszHv1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:d5:8b:e0:db:bb:cf:61:fd:17:48:24:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=aad2555c82f0095975c51211c79eb6bb3e3eccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:6d:78:d6:c3:54:2b:a6:b4:64:69:a1:d7:
d4:5b:62:fb:10:db:fa:ff:f4:a7:c6:93:d6:7b:ce:
7c:89:b6:34:5b:53:b2:ca:78:4b:a8:22:c7:d6:bf:
ca:77:d6:1c:a4:19:b3:84:8b:21:d4:b3:05:7c:03:
29:49:6b:05:ce:5b:1a:e9:ba:a7:de:79:88:87:5a:
08:d6:aa:7f:7d:1f:a4:a1:af:65:71:56:6f:65:7e:
20:e5:37:22:2e:3a:41:4e:25:97:70:7e:2a:2c:32:
b5:75:17:f8:88:1f:cb:89:62:4c:51:49:f1:c7:b8:
05:e2:ed:27:69:4f:bf:59:ad:f0:6f:bd:25:92:06:
86:13:bc:b6:26:36:c8:93:f3:18:76:39:df:2d:15:
70:ab:06:0b:47:ee:03:d8:ad:91:2b:0c:95:18:27:
2d:64:18:f9:a5:77:03:f4:f1:5e:b5:78:dc:f5:fe:
b7:f5:9a:0c:6b:75:1a:8c:4a:65:7f:7c:b6:7d:3b:
e9:c6:44:8b:10:52:20:f4:fd:e4:42:eb:89:c7:02:
05:2e:31:7c:7f:a9:c2:e9:41:e1:fd:f6:74:a6:de:
e0:bf:40:1d:c5:66:9b:ad:66:7c:33:a2:69:59:71:
54:f5:da:da:dc:3a:c3:71:25:db:b7:9f:0d:10:b4:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:55:5C:82:F0:09:59:75:C5:12:11:C7:9E:B6:BB:3E:3E:CC:F8
X509v3 Authority Key Identifier:
keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:36:3a:32:95:36:26:18:36:f7:da:ba:4b:9a:33:b5:af:
56:3e:2d:5a:fc:36:df:42:24:2b:d1:36:1c:83:48:7b:52:ec:
e1:9a:8d:8c:0b:fa:96:a0:84:0e:3f:29:0c:20:5b:cc:93:7b:
f4:47:a5:b6:60:ea:b7:69:0a:99:f2:cf:73:5d:b7:c9:e1:13:
cd:8b:7d:15:7c:81:20:62:11:a8:4e:be:08:b0:0f:39:d6:c7:
34:cb:a2:72:a2:d7:a8:38:f6:2d:30:50:6e:16:82:42:f2:e9:
a9:fa:6b:d9:53:c4:cf:88:5b:5c:cc:6f:81:ba:bb:d1:93:9a:
d1:e3:da:ee:08:a7:75:9e:bc:53:8d:70:c5:f4:bd:31:15:80:
66:49:12:03:37:f5:2e:38:6c:74:3c:33:01:e9:cb:a6:1c:6b:
b1:cc:d3:ab:5c:ef:72:fa:fd:14:bf:0b:9b:89:d5:dc:7f:4c:
fe:3a:3e:0f:28:48:0f:31:cc:51:6b:55:aa:83:7c:20:f4:73:
9f:d5:27:40:7d:f6:22:4b:ef:47:a7:7e:9e:aa:c8:71:84:68:
8c:2e:c5:db:a2:59:03:f4:ad:24:67:d3:8c:22:ba:7a:5b:ea:
e1:4d:d0:1c:4a:da:ef:8f:b3:ab:47:3a:24:f5:5c:2a:bb:65:
2b:c5:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:43 2025 by rpki-client