Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
File: gv59AOlM0qfL9_noLPCZJBdBjfY.mft (raw, json)
Hash identifier: eBj2y/dWKZk+IeNF0Mo9ENWZlet8ljMDcs+ltX+D7/U=
Subject key identifier: C5:2A:54:D8:A5:30:30:1D:EF:E2:AC:93:A2:48:07:01:01:5E:49:4B
Authority key identifier: 82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
Certificate issuer: /CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Certificate serial: 0194BBCE646B58B47F1469AF95B4C4FCE8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
Manifest number: 0570
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 248bDK_2X4s3D78cLTN1zTJo8ls.roa (hash: kLQEr1R8+53FUqqBvs455Xwu5a5on81N6ifpRavsyZA=)
2: gv59AOlM0qfL9_noLPCZJBdBjfY.crl (hash: 6gT4khLPLO4jOTKcciec2qavs1D1JLX2cJTs4ubM8uQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:6b:58:b4:7f:14:69:af:95:b4:c4:fc:e8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fe7d00e94cd2a7cbf7f9e82cf0992417418df6
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=c52a54d8a530301defe2ac93a2480701015e494b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:b9:65:0b:1a:05:32:05:6d:a3:c5:e3:5a:
d0:c4:f2:6c:b0:bc:62:60:32:05:d5:d9:11:e7:94:
28:2b:0a:1a:0d:fb:4f:26:a9:38:cc:51:51:d9:5a:
08:ee:44:b0:6b:05:de:8e:6b:28:88:ac:cd:da:63:
88:1d:01:64:29:42:ae:62:b6:4b:62:e0:40:84:8e:
61:24:b7:a5:b2:6e:31:0f:59:2c:73:86:62:b0:c5:
d0:01:6a:f2:64:99:a0:da:d2:de:05:07:c6:d1:87:
d6:16:da:a1:14:89:2a:70:32:9e:f9:fb:49:16:f9:
61:73:37:ca:f1:3c:9d:3b:55:7a:c7:43:07:5e:13:
f0:32:7b:23:3e:33:9b:a4:62:c0:5a:44:b0:f4:8a:
8a:69:e7:74:6f:c1:27:94:06:25:40:57:40:1a:57:
bb:a7:8c:fe:7d:26:6c:af:4f:66:9e:02:00:8d:70:
b6:94:fc:13:ec:38:50:d8:2b:a6:3b:2d:c3:65:51:
7f:78:42:c8:01:4a:64:60:a5:cb:e7:c4:02:da:55:
1a:7f:db:0e:67:58:14:cc:99:fa:a2:dc:3f:92:ca:
90:1d:96:cc:7a:85:2f:74:07:eb:4a:83:a3:c9:15:
5d:91:b5:e4:b5:11:8b:fd:27:d6:13:51:c1:60:43:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:54:D8:A5:30:30:1D:EF:E2:AC:93:A2:48:07:01:01:5E:49:4B
X509v3 Authority Key Identifier:
keyid:82:FE:7D:00:E9:4C:D2:A7:CB:F7:F9:E8:2C:F0:99:24:17:41:8D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv59AOlM0qfL9_noLPCZJBdBjfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/20c7e7-a49f-4031-ba77-63df603161c9/1/gv59AOlM0qfL9_noLPCZJBdBjfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:ad:98:70:0b:b7:d3:61:c8:58:bc:f5:3d:76:72:6d:77:
0b:cc:7b:98:7c:a3:64:57:54:ef:40:40:ad:fc:71:00:c8:3f:
df:a2:af:e6:24:28:40:24:84:da:ff:da:9e:29:0d:ee:4d:8c:
ee:af:a3:8c:36:af:4e:82:ff:71:4f:c2:ac:9f:4a:24:d8:97:
a6:a6:02:6c:83:9d:1d:3e:7b:ef:8c:0c:1b:79:41:19:13:23:
c5:b9:95:d8:51:1b:a2:11:84:10:2c:cf:14:b1:77:b3:e2:f0:
da:bc:9f:ba:2a:b1:06:c7:09:ed:9d:e3:66:24:34:51:da:ad:
11:84:15:00:17:23:b6:e1:54:64:64:03:62:33:10:5a:e4:a0:
a7:47:75:c7:b9:22:46:38:98:8a:20:7b:85:d4:b2:6c:7e:47:
f5:a5:7b:16:7f:9c:45:54:e2:59:8a:e4:ee:dd:02:1d:e5:37:
c6:a0:2c:f0:8e:cb:27:d2:97:bd:f3:b0:4d:74:5e:35:6c:fe:
60:38:0b:2c:9b:93:85:f5:86:d9:01:81:cc:32:78:76:b5:66:
5a:a4:d9:4b:37:2d:a3:d5:d3:e8:d8:14:7e:e4:27:b9:be:97:
39:d0:36:78:61:a1:c0:ed:04:77:dd:e7:10:46:f4:4d:6c:bd:
0f:93:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:17 2025 by rpki-client