Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
File: ga5w39QwUnNv6F8A0phM43a3brM.mft (raw, json)
Hash identifier: iKL2IKijsgRYLgOlFQNvjDIzHZfmPdHmm2C2Cx/uJG4=
Subject key identifier: E6:65:E7:43:B2:BC:2D:12:06:CB:ED:18:C0:BC:6A:5E:10:FC:46:C4
Authority key identifier: 81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
Certificate issuer: /CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Certificate serial: 0194BC04A05CC65CD0B89E35CCAA8FC840CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
Manifest number: 0585
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: PWVVCu9dDfBo5aJQ6tlPGGlV6B0.roa (hash: 7Oj98eAXsnZMzEk2r6cNh4fSjsZETDRb2EQ95CICh04=)
2: ga5w39QwUnNv6F8A0phM43a3brM.crl (hash: WoejzWlsofJSs38Fy8/vVIYMzI3cjt8i10LnINFwFO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:5c:c6:5c:d0:b8:9e:35:cc:aa:8f:c8:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ae70dfd43052736fe85f00d2984ce376b76eb3
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=e665e743b2bc2d1206cbed18c0bc6a5e10fc46c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ee:57:87:31:d9:70:84:2e:08:37:cb:5c:ce:
cb:4a:02:22:5e:5e:dc:aa:bf:a3:02:8e:f5:b7:2f:
66:6e:87:65:16:03:f0:31:f9:0e:e3:de:67:2f:e0:
fd:0d:ab:67:8b:f7:52:a1:af:c9:7b:c0:ae:ed:35:
e1:80:6a:0f:af:4e:52:d1:0f:88:95:29:38:f7:7d:
81:29:f1:69:f6:0a:69:f0:59:c1:c5:4d:a8:78:db:
8c:28:6c:d8:92:c6:a0:f6:8c:1b:df:64:2c:b6:d4:
a7:b8:9d:f6:4c:2e:0a:fa:6f:ba:a5:a1:cc:3e:4c:
42:2b:72:c7:c0:e5:9b:31:96:44:29:f7:80:6c:fd:
e7:43:b3:10:11:db:57:5b:34:7c:55:af:2f:d6:56:
24:eb:89:37:5e:68:77:f6:49:0f:20:b6:c2:65:d0:
8a:11:f4:2c:bd:fb:31:b3:cc:19:f1:44:8c:c1:6c:
dc:09:bd:97:f1:a8:10:4c:2a:37:31:f5:a0:45:0e:
61:55:60:db:d4:8e:e6:1c:73:04:11:7e:c0:6c:50:
fd:72:e7:2c:f8:86:fd:c4:86:fc:62:4f:24:9a:56:
f9:98:57:a5:18:06:2b:ee:ac:76:4d:fb:53:8d:c1:
98:c5:84:25:5f:e9:20:28:4b:dd:6a:a9:a1:1d:01:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:E7:43:B2:BC:2D:12:06:CB:ED:18:C0:BC:6A:5E:10:FC:46:C4
X509v3 Authority Key Identifier:
keyid:81:AE:70:DF:D4:30:52:73:6F:E8:5F:00:D2:98:4C:E3:76:B7:6E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga5w39QwUnNv6F8A0phM43a3brM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6ea16c-b92f-4041-a508-bb5893a6ac91/1/ga5w39QwUnNv6F8A0phM43a3brM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:b2:a9:7f:3f:f5:ce:b3:75:eb:62:5a:54:cc:11:56:2b:
ae:02:dc:fc:e4:e9:cf:0b:63:24:66:30:88:06:d9:5e:b2:cd:
c5:16:a0:ff:35:86:bb:0d:30:c1:dd:f5:36:b3:0a:ac:b9:69:
d8:a9:38:05:d1:ec:91:88:28:c8:91:b9:51:c1:98:e0:fd:33:
58:fa:77:c7:59:86:5e:25:1b:2d:85:1c:3d:76:f0:f0:08:07:
16:c7:45:01:83:1b:d6:5f:1a:50:96:e3:d2:63:ff:e7:7e:a9:
0b:36:93:0e:4c:14:9c:e7:fd:9f:4a:b5:a7:51:44:c7:cb:a4:
6c:23:0e:e2:33:b2:d4:bd:86:91:eb:d6:84:d2:76:91:31:d8:
c4:7f:a0:92:1b:36:b7:7c:cb:88:07:57:73:92:1f:f5:a0:f5:
20:5d:f8:59:3e:48:e5:0d:c4:45:82:b1:d0:86:59:b8:f5:97:
4f:80:ca:fa:95:fc:3c:7a:f4:73:77:a3:a2:bc:87:3f:18:e9:
53:92:b8:3c:44:40:f2:1e:6b:47:7d:c6:0b:0a:24:ae:54:40:
3a:a6:53:56:77:02:a7:95:b2:c4:90:53:42:d0:4e:ed:5d:bc:
7e:6f:1c:23:48:0a:70:79:26:41:b2:51:d0:9c:8d:1d:41:18:
61:81:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:26:49 2025 by rpki-client