Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
File: gmAVLt1HazFwhARFKVhhW2Xdywo.mft (raw, json)
Hash identifier: +LuG8A45B7kiEbIprPhATb2McUDKM+Tf2PlN2rDfwh4=
Subject key identifier: 39:C2:F6:FB:E9:02:8E:57:C4:0E:FB:3F:EF:47:B9:04:FE:0C:DB:0E
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 0194BC731EDA6D6EB1DC48238B605755EE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: ABnX77DVikk7gn2fQ6SCyXZp5CY.roa (hash: tGweD2UyMDN3jg0C7H8c7WDDk9iUdxSAoQTdTpfDf5g=)
2: gmAVLt1HazFwhARFKVhhW2Xdywo.crl (hash: RKK2472PCfuikNbOYjgmHJYFhSxA8D3ewFo85k/W0Ck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:da:6d:6e:b1:dc:48:23:8b:60:57:55:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=39c2f6fbe9028e57c40efb3fef47b904fe0cdb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:da:f5:4e:1f:61:9f:66:22:d7:27:1e:7b:
12:d9:c5:11:3a:3a:4f:50:3a:d4:a0:da:63:65:06:
49:37:9a:a4:5b:65:2d:33:78:3f:38:22:1b:e3:3a:
64:cc:5d:bc:c2:87:70:2a:87:08:b6:75:06:4d:d8:
a2:61:04:7c:e4:fc:1d:a6:98:0d:02:6b:90:03:95:
96:96:4f:45:58:ad:14:06:a2:05:02:9e:69:95:13:
3b:8d:19:77:5f:3c:cf:40:fa:d4:06:52:b3:ed:40:
87:d1:bb:7e:8f:69:6d:e8:8d:03:70:36:df:b7:6b:
b9:2d:36:79:cf:c2:c0:bf:04:31:7d:2d:79:e3:87:
b0:a0:b5:2f:f2:f1:00:b9:97:94:5a:88:30:8a:55:
6e:26:89:db:23:67:f2:66:cc:2e:36:63:68:db:86:
1d:aa:f8:ec:c7:4a:87:8d:95:85:47:5a:56:0a:83:
ff:fe:e5:cf:22:14:1d:c3:45:8c:d0:b2:0e:d6:1e:
84:8c:9e:5f:e2:4c:2a:3d:d0:66:56:ac:8f:ec:1f:
db:1e:a8:10:a6:13:21:46:75:18:68:06:a4:d6:0e:
ad:e1:fe:a0:1d:74:cd:01:3e:33:40:53:de:6b:d1:
37:83:5d:73:69:50:fc:44:6f:8b:3f:3e:24:bc:69:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C2:F6:FB:E9:02:8E:57:C4:0E:FB:3F:EF:47:B9:04:FE:0C:DB:0E
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8c:8d:34:f9:a9:81:d8:ac:97:3c:61:e2:72:8c:18:a8:60:
f8:22:ca:17:77:50:ac:6f:6d:8d:cd:5a:f2:5a:aa:f5:28:2d:
9a:c3:e8:cb:57:b6:26:22:02:9f:7d:47:c3:ac:64:7b:73:4e:
6e:60:97:e2:78:14:90:ec:be:09:19:25:d1:f3:b1:b7:3e:f2:
2b:64:16:7b:20:cb:62:5e:17:91:3c:d0:ef:2e:f7:ea:a7:93:
fa:da:fe:f3:f5:bb:fe:c1:40:de:b0:85:44:8a:66:b3:d9:2e:
fb:b8:ae:4a:9b:62:a6:b0:9b:fc:9e:4b:b6:f5:6c:4d:5b:f3:
25:46:7c:6b:0a:05:c0:cc:25:8d:6b:a4:09:0e:8f:3c:18:16:
35:50:af:d5:9d:ef:7c:71:0b:26:80:45:ce:4a:e9:b6:40:a0:
74:9e:52:a0:6b:7a:30:bb:bc:e5:85:aa:98:bd:b2:60:93:22:
a3:af:23:6c:2b:28:59:39:4b:7f:48:05:5b:0e:08:b0:97:35:
cb:d3:89:aa:ad:bb:9b:a8:16:2f:62:8d:c5:31:19:aa:3e:46:
99:eb:44:ff:c7:f9:73:b5:36:b2:08:03:f7:3a:02:26:67:bc:
9b:a1:5c:77:0f:43:49:22:f2:97:69:22:77:2c:c2:ad:64:be:
71:3d:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client