Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File: gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier: GewdWgj2PQeHVlEcxnBI5FuVtLCGehPqIyzyj/9n0WE=
Subject key identifier: D9:E5:1F:EF:1A:A5:7F:BC:EA:EA:89:68:D6:3F:BB:85:6B:E5:22:B9
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer: /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial: 0194BD1764A60A2AD7C442A651A1559A47A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number: 098F
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: IF4dvZYasNpyPhFcYvRKFYP+R+ZMxMvfuWOMly/wODQ=)
2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:64:a6:0a:2a:d7:c4:42:a6:51:a1:55:9a:47:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=d9e51fef1aa57fbceaea8968d63fbb856be522b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:a7:ed:4a:de:60:1c:33:af:5d:66:d6:e3:
d2:90:ef:ed:6a:53:b5:5d:1c:32:2d:aa:3e:05:3e:
61:fb:38:ea:47:75:e7:73:02:a5:85:06:ac:43:71:
cb:df:70:ab:61:78:39:2f:5f:25:94:d0:a6:ce:7e:
07:91:f6:28:7b:0c:69:00:44:0d:f1:71:02:8a:b0:
ff:a1:64:24:81:4c:45:e2:f7:5d:2a:94:14:c0:f9:
80:c8:69:b7:a0:b0:00:46:41:3b:ca:93:5f:80:51:
d5:b2:67:b8:4d:03:11:d5:8a:5b:57:1c:ee:26:75:
ab:47:fb:a4:9c:23:a7:00:b6:de:ca:8f:e5:d8:7f:
d8:e3:3d:ee:3d:33:52:97:15:75:c7:ae:9b:e9:17:
93:2e:31:e4:bd:2a:a1:e7:fe:90:0e:eb:28:ea:03:
fb:55:e8:a8:ba:f9:df:31:fa:0f:c8:31:a5:a7:14:
73:5e:24:a4:fc:fc:c3:c2:c4:f8:a1:af:2e:90:eb:
05:93:c5:e7:32:51:6a:e7:e6:de:be:92:9e:06:76:
16:6e:b1:43:29:a4:5a:40:3d:e0:21:6a:f1:f8:58:
d0:59:0c:7f:f8:17:9e:d5:9a:9f:e4:0b:5a:c8:6d:
26:0c:9f:97:8a:3a:e5:96:d3:6b:57:93:f0:09:c0:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:1F:EF:1A:A5:7F:BC:EA:EA:89:68:D6:3F:BB:85:6B:E5:22:B9
X509v3 Authority Key Identifier:
keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:b0:cd:d6:31:e7:a8:9e:85:22:33:63:b5:04:94:b5:3c:
77:76:fa:d3:8d:ca:12:26:00:ab:cd:45:fb:6f:9e:36:a2:c3:
ff:84:63:68:6d:1e:f6:1a:ce:7a:3b:f5:32:bb:16:32:ab:0a:
dd:02:e1:06:8b:b0:ad:7a:8e:34:2e:e1:75:8c:23:62:71:a2:
00:79:6c:95:f2:a3:63:31:7f:cd:13:63:18:ac:e0:fd:de:40:
a5:fc:3b:64:ea:db:ff:c0:25:c2:8e:03:bd:e5:10:b8:86:ba:
ab:0f:f4:72:03:1a:a4:d1:46:a6:d3:79:e2:cc:89:d7:36:15:
36:61:52:5a:73:01:cf:7e:26:0f:4e:78:6c:82:1b:d0:10:87:
01:7c:ea:23:fe:26:14:f3:40:6d:4f:b3:23:26:63:c1:6c:e8:
1a:01:56:72:52:ee:20:f6:f0:1c:b3:4d:3f:ad:2d:f2:2e:0b:
a6:b3:27:5d:2d:56:8d:44:87:bb:50:8f:d7:49:44:88:bc:08:
06:cd:34:ee:a3:3d:6b:f8:84:f9:b8:38:33:84:49:f5:37:c9:
89:68:73:e6:5d:5a:b4:35:b7:47:7b:1e:06:3b:b9:05:90:36:
04:dc:3d:49:9b:e6:be:48:75:1a:5f:83:93:3c:28:22:38:72:
c6:e3:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client