Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.mft (raw, json)
Hash identifier: LFRW4Ez5qdJ1lt9JztwkYO+QHNk1gCRjQ4LSOeBo9Ig=
Subject key identifier: 17:0C:BC:7E:0D:48:54:6D:EB:64:C0:D2:2B:45:9D:AC:C4:3C:ED:8A
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 0194BBCDF1A85B762FCEB817D3A158066FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
Manifest number: 1211
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: C29j8BjW64hUTo90rvT2p7vncMk.roa (hash: z1gCCbWIlJIwgYs0Ud8cLUPoe3m6/PGlyP6Xd1WDnws=)
2: gwn4FzfW8X58GtWISa_3HFAGTwQ.crl (hash: LAU+WzD9aeHEGK49BpF4/x0HQgqkwt6tS3CEW3yRNZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f1:a8:5b:76:2f:ce:b8:17:d3:a1:58:06:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=170cbc7e0d48546deb64c0d22b459dacc43ced8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:ec:d1:d1:1d:53:24:df:d2:a3:38:7a:43:
9e:a9:42:80:bc:eb:44:de:21:0b:e7:f5:85:c1:53:
46:be:55:ab:2d:99:ba:e8:2a:28:2e:70:73:52:43:
d1:5f:da:52:76:54:c2:28:2c:29:13:d7:2e:d6:1d:
56:84:8c:bb:54:f3:b9:b0:dc:be:32:42:27:60:f9:
0d:b8:e1:e7:9e:84:35:c7:fd:b2:4a:77:0a:9b:0b:
7e:9b:33:68:09:e9:f3:05:ac:0f:7d:15:8b:20:29:
fa:ac:4e:26:0d:7c:af:d8:8a:9e:5f:9a:2b:fc:ba:
38:cb:23:66:90:3b:70:81:57:42:13:12:67:ce:68:
da:1e:ee:2e:b0:43:61:76:a4:b2:cb:f0:98:3d:d8:
ef:bc:b5:a3:0a:ee:fb:af:42:95:6e:c6:69:f2:db:
9d:9f:54:be:65:5d:96:7f:05:e2:3b:a1:25:59:b3:
70:8d:45:2c:e9:7d:3e:6e:47:90:53:3a:b2:54:c0:
0e:d7:b8:f3:49:69:13:b5:89:22:f5:1a:30:11:a9:
9e:c2:e9:bf:6e:cd:e4:9a:05:f2:cc:10:7c:67:19:
89:a8:4f:6f:44:2c:b6:0e:1f:0c:2c:18:e4:08:54:
76:3d:29:87:e9:f2:11:34:f6:5d:9d:49:a6:3a:81:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:BC:7E:0D:48:54:6D:EB:64:C0:D2:2B:45:9D:AC:C4:3C:ED:8A
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3c:da:e6:15:68:3f:9b:8c:12:02:08:15:76:6e:e9:64:83:
70:61:52:1c:bc:28:ed:06:0b:0d:2a:10:c2:13:c1:61:39:15:
16:28:d1:3a:a5:87:7a:85:f2:ad:14:fe:9c:a0:b8:4d:b4:d4:
a7:a2:dc:23:29:0a:66:19:06:2f:83:21:57:06:58:b9:c5:03:
cb:f1:5a:6e:8c:6b:bb:74:99:48:41:56:37:38:9b:b9:e6:4f:
8f:51:da:ee:4b:eb:62:7b:86:f3:1a:42:95:66:3b:86:5d:68:
25:be:f0:31:3a:19:21:58:69:9c:e6:21:59:70:c1:16:af:fe:
b6:48:be:8a:8c:82:a3:2c:1f:a9:bf:a1:82:0e:36:df:e0:76:
97:0b:1c:6f:97:9d:c0:07:c7:72:0a:47:01:f0:c7:91:09:05:
c8:92:f0:7f:0f:51:bb:a6:15:35:e6:9a:28:c1:0e:a9:bf:f3:
eb:8a:b4:73:72:8d:db:6d:3b:8f:85:6e:c5:2d:d2:40:f0:d0:
5d:ba:88:38:c2:6f:a6:d0:19:cd:e4:5c:29:f7:e5:b9:a9:48:
02:e2:a0:ae:2a:39:06:27:7a:1c:cf:dd:8d:e4:19:0f:06:f5:
d6:ea:63:e3:31:e5:95:80:25:75:49:b3:ee:8f:52:67:61:7d:
bf:73:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client