Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
File: gFPZtR9HqlX55ScEdUhp9VNrrkw.mft (raw, json)
Hash identifier: cdWGsM55xwzMrWd0BxIlFcSI8rYIEvqT5712Siahwg0=
Subject key identifier: 58:EF:CF:10:4C:D7:C4:7E:9A:8E:37:5D:73:4D:56:CF:67:33:AE:87
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 0194BD17F2D8B29CB24B7A03139C276E0192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
Manifest number: 0B5B
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: JQj924cUZ739dTo2CAmTW-Nn1zw.roa (hash: wLvSRyuv0hEPp/uJ8ZfBwX5TJv2CK5mAgRM5bxes1Tg=)
2: gFPZtR9HqlX55ScEdUhp9VNrrkw.crl (hash: 1ad77WOudhSVd/yB4NtJqSShjDfaX2W2EDa8TUy2uoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f2:d8:b2:9c:b2:4b:7a:03:13:9c:27:6e:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=58efcf104cd7c47e9a8e375d734d56cf6733ae87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:ad:75:23:17:d8:83:49:37:86:80:85:c2:
3f:f0:7f:2f:d7:3e:0f:10:d0:b0:22:9e:f4:0f:73:
90:80:34:f4:c2:61:20:90:2b:0f:a2:70:90:8e:ff:
c0:94:49:36:d5:7b:9f:17:ef:60:5f:1f:e5:b4:1b:
f4:67:97:7b:5a:3c:5e:bf:e9:8f:46:27:c3:59:8a:
6c:1f:ff:6d:41:6d:58:81:fa:be:26:a1:12:2f:54:
b0:b7:bc:e8:ce:3d:39:58:69:b0:09:7f:f5:c7:d3:
2a:eb:1b:b5:cd:8e:56:83:af:fa:ba:02:e9:f0:38:
48:ae:42:5b:39:54:85:0e:6b:8a:16:22:8d:1f:c9:
84:b7:fc:5e:3e:f0:f5:b6:8f:34:83:ba:91:b8:b0:
96:14:1c:90:59:d5:59:d6:5e:3c:4c:de:6a:b9:ce:
ba:67:c6:d9:48:ad:9c:22:84:f0:0d:cb:81:d1:87:
32:09:c5:eb:a0:63:e7:63:0b:05:8e:d3:1a:a2:8e:
23:21:70:ba:62:92:91:6d:15:0c:c9:b9:99:3b:8c:
6b:c9:83:7d:fd:38:64:54:80:f7:a7:77:f7:73:f5:
34:01:06:49:e2:57:d8:08:f3:e6:31:55:b6:23:02:
e3:60:fb:fb:26:cf:a3:e5:99:65:9a:7f:8d:09:c5:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:CF:10:4C:D7:C4:7E:9A:8E:37:5D:73:4D:56:CF:67:33:AE:87
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e5:fc:da:91:28:56:b6:68:22:a6:ee:22:b3:87:ff:80:ad:
ee:99:50:c0:a2:54:3e:14:7c:22:74:46:ce:de:db:e8:63:79:
25:57:ee:06:6e:08:b1:72:af:2e:9d:bb:29:b4:08:c6:bd:e3:
ae:9e:4c:ef:12:78:c5:31:ec:12:88:7f:58:5d:bf:ab:8d:f8:
70:1c:5d:22:0b:54:29:35:4d:3d:50:63:fc:4c:62:fa:b4:6d:
fa:4f:f4:43:9f:8b:aa:66:90:94:03:2b:24:49:45:68:04:bf:
ac:34:4f:2d:ed:f7:34:9c:8b:6f:57:f7:2f:60:80:55:e5:c4:
26:90:70:30:8e:af:2a:02:3e:75:ca:b1:b0:34:88:2b:50:f1:
a8:f3:85:f4:66:cd:c2:ac:a6:4d:bb:30:d2:60:48:7f:88:5c:
bb:e4:7e:a5:03:f4:62:34:c1:fe:82:53:c7:20:d3:bb:45:a8:
34:37:e2:b7:b0:9b:fb:b0:5a:e7:04:e0:d8:8d:00:96:e7:57:
6f:12:1d:08:59:3d:2d:a4:eb:e0:80:56:6e:60:73:07:46:bd:
90:9d:de:4e:3c:9d:d8:70:6a:78:70:98:d9:37:30:96:c5:d4:
ab:ff:9e:8c:db:25:55:23:2e:ae:33:73:86:53:db:e8:31:cd:
dd:2d:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:00:24 2025 by rpki-client