Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
File: gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft (raw, json)
Hash identifier: NxR/Ji8KSQwoaQcIiY8mefBf36EszsMqqXDM+p7pOhI=
Subject key identifier: 00:A6:80:E8:AE:7C:81:85:1C:F6:2A:E0:24:C0:47:AA:34:9D:BD:3B
Authority key identifier: 81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
Certificate issuer: /CN=81b65a230d6927dbac201097f949e2eaa2731220
Certificate serial: 0194BD4E687003194E28F253C1387648A137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
Manifest number: 09C2
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: gEaDDtDg3NGIpNO0dp0YVtxxUek.roa (hash: 1qHWY4UuDI5K0+nd/rC4bO24NaTlHFHg0zG3FVkfXdU=)
2: gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl (hash: z4UYtaCJT3hUTzNvcvgkVLmSOszA9/9r8maXMP/sQFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:70:03:19:4e:28:f2:53:c1:38:76:48:a1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81b65a230d6927dbac201097f949e2eaa2731220
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=00a680e8ae7c81851cf62ae024c047aa349dbd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:30:57:b7:cd:60:d8:bc:6d:28:cc:63:11:
43:59:35:7b:21:bb:97:fb:77:50:13:c8:c8:64:e5:
70:0d:42:ea:be:6f:0e:fc:bd:7a:8b:f8:49:28:de:
98:fc:28:15:13:06:d9:93:65:15:34:c0:b3:bf:cf:
76:b2:ed:49:23:22:96:3f:44:fc:d4:d4:11:3a:39:
e3:e4:97:ab:4d:16:af:ee:13:68:23:5c:d3:de:dd:
68:68:bb:62:e5:22:00:ab:63:41:f3:0f:83:1e:e8:
72:96:39:0d:03:4d:a5:85:9c:ec:26:90:41:de:43:
b0:74:68:7e:5d:ab:5f:b9:41:d9:8d:f7:46:06:97:
f6:17:51:ad:24:fe:17:c9:b5:db:c4:6e:56:20:34:
ca:45:33:72:84:15:25:5b:9b:97:24:c8:24:91:2c:
af:13:76:a6:1c:8a:b9:cd:4e:87:f0:9e:bb:d1:a4:
ee:20:aa:39:f2:e7:11:ed:33:96:1b:bd:24:93:e8:
1f:1d:bb:a4:c1:f9:14:3d:84:a0:b1:cf:2f:2f:ce:
65:e4:55:8a:a4:f1:48:6f:57:d7:7a:e4:58:0d:48:
19:00:5a:96:46:b7:f8:04:91:eb:70:28:52:dc:3f:
8b:4d:f4:be:62:ea:e2:34:96:9d:4b:5f:20:e2:26:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A6:80:E8:AE:7C:81:85:1C:F6:2A:E0:24:C0:47:AA:34:9D:BD:3B
X509v3 Authority Key Identifier:
keyid:81:B6:5A:23:0D:69:27:DB:AC:20:10:97:F9:49:E2:EA:A2:73:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbZaIw1pJ9usIBCX-Uni6qJzEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cdecd2-38d6-40cf-ab02-dab9dc6dc4c9/1/gbZaIw1pJ9usIBCX-Uni6qJzEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:09:72:2a:42:33:b0:b3:f1:e4:d7:89:6d:71:a9:99:1b:
f4:94:4c:a3:e3:ce:fd:73:a1:73:b5:19:30:94:be:1c:02:67:
50:c1:39:fc:0e:b2:8f:b8:e7:6e:69:c5:03:dd:d9:76:a5:5f:
83:1a:bf:2c:5d:38:62:de:a1:e9:b6:6e:20:3e:37:41:6f:b0:
ed:d7:d9:5b:80:e8:c7:3a:cb:f1:91:ce:54:52:db:1d:b7:d7:
01:e4:4c:27:02:75:22:c4:43:6b:a2:d4:da:e4:51:9a:52:b7:
a3:bc:20:91:ea:59:3e:be:33:ec:b6:5a:64:e9:4d:7f:77:d5:
fa:9a:1b:cb:8c:3d:86:76:26:71:cb:de:e6:a2:40:ae:86:0e:
cd:0c:fc:75:64:1a:aa:6c:fd:e3:fc:ed:be:d3:0f:32:3e:75:
27:79:60:57:12:f1:a4:bc:61:60:be:e3:d7:67:07:6d:50:70:
ca:74:f9:ea:e7:4f:1a:56:12:8a:18:b5:c6:4a:a9:d1:06:1f:
d8:ae:cf:9a:9f:3f:cf:49:8b:85:5d:7f:8f:11:6f:5a:a5:ef:
d9:1a:b9:70:af:c3:f4:11:e5:62:ab:8a:69:2b:d7:03:f9:71:
e5:25:68:dc:62:6a:14:0a:86:c0:af:4c:93:d8:38:22:17:b8:
e5:d5:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:04 2025 by rpki-client