Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: 3ao3Kzd/0e1Ki/hWwcmRSDLgsIgKXNUpmiOSK3XLvz4=
Subject key identifier: 91:04:03:E9:F9:2D:E1:13:4B:1B:F0:63:BC:F6:81:7B:BF:0B:CA:29
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 0194BCA9C8CCA3B57A32A022DE8AA67A19B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: C4-MBE7Oi8TgkqpOUxKhQVXkxzA.roa (hash: 7Q2JdX8Sk5ec7oQfahOu2+Hx1b1UUmWGaNbADZbL4l4=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: 6yJopGGAZOWoAGZrAxv/Ds+Sn88Es0PFBK3/dv0GZLc=)
3: _ChMMh8gYkXb1ChgfB5-UeARN_8.roa (hash: IW3EVws4BqaOmIjFWi9xL7gifbvJ4hpYd+I96mfohIg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c8:cc:a3:b5:7a:32:a0:22:de:8a:a6:7a:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=910403e9f92de1134b1bf063bcf6817bbf0bca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:60:2c:e9:35:1d:ea:c5:b0:6a:cb:3b:33:
9e:9b:fc:f8:63:1b:7c:05:1f:e9:3b:b3:8b:2e:f3:
73:d7:78:3e:d4:15:37:04:f3:67:6c:3c:f8:08:12:
28:bc:ea:34:f2:38:d4:74:9b:2a:60:30:2f:37:b0:
c4:34:f9:1b:ff:5f:f9:47:37:db:49:5d:ad:e3:a2:
97:8b:12:00:38:37:21:89:6c:b6:70:d7:2b:34:f5:
7f:01:5a:75:75:30:2b:ed:ba:79:16:fe:59:5a:a6:
8c:b2:0f:dd:24:3e:c2:4a:60:2e:b0:52:1a:53:cf:
e2:4d:97:c7:d3:d2:1a:7b:1f:e9:43:7d:90:e0:b4:
35:bf:9b:dd:0d:4d:22:48:1e:7a:2f:c0:35:4d:2a:
45:9f:14:8a:78:76:b6:21:ae:0f:e4:a1:98:75:97:
19:36:8d:9a:c4:9d:d8:dc:bb:a4:5a:88:46:04:72:
62:47:5d:d7:73:24:58:aa:52:01:4a:7a:39:c5:df:
e1:f5:d8:a1:c7:01:23:55:7b:4c:41:09:f5:9d:11:
85:c9:92:89:8e:a8:7e:e0:93:21:56:85:2b:3b:7b:
1c:88:b5:ef:1d:ae:95:23:7b:97:4a:cb:cc:3a:ae:
aa:54:e5:cd:09:b1:d2:1b:41:9f:48:96:ba:7c:4a:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:03:E9:F9:2D:E1:13:4B:1B:F0:63:BC:F6:81:7B:BF:0B:CA:29
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:56:83:c9:7e:f8:8d:6b:01:26:7f:cf:cc:7b:3c:39:0e:38:
09:4e:e5:74:e4:20:8e:e3:8e:b4:4c:d4:09:63:ab:2a:0e:d6:
91:40:79:88:fb:ea:f5:c6:2b:db:dd:dd:52:87:b7:38:41:3d:
9b:8e:89:09:27:7f:8c:d7:a0:6e:e3:a3:46:45:a6:74:21:7d:
a9:69:e0:83:b1:65:fc:71:c4:d9:14:9e:fe:7b:ff:be:27:08:
84:76:9b:24:dc:d4:5e:cc:da:70:48:96:a6:8a:00:56:99:43:
55:ea:fa:d1:8c:b6:09:42:ab:db:1d:76:94:a9:e2:6d:be:c5:
0f:49:83:37:67:c9:05:86:ed:9e:30:59:b9:93:e6:fb:cc:0e:
31:3c:ef:8f:d9:d8:f4:cd:bd:30:76:1d:23:f4:5e:8e:0d:1c:
8d:06:13:67:ae:d0:2f:b3:d9:e1:63:9a:a7:0f:8e:e9:b1:68:
ff:66:5e:dd:fc:40:19:ea:78:68:a4:25:7b:4b:fd:1f:49:74:
83:bf:4c:fe:de:0f:75:85:b6:d1:b7:58:6c:18:3a:24:79:74:
01:0a:07:d5:98:7f:a3:ad:c2:09:3f:8b:48:bb:0e:03:f6:f0:
8a:0b:0e:88:6a:da:87:32:35:72:c3:61:74:0e:9a:4e:86:6e:
99:6c:f7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:29 2025 by rpki-client