Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
File: gxJNBBGiD9K7VGlw6oARbvJ226s.mft (raw, json)
Hash identifier: KAy/PUDE3FQzrCOyEEdIq+gdq1xAz+FRF+bNGWtJn84=
Subject key identifier: 7B:0D:70:23:CE:A8:EB:B5:04:A9:33:D6:4B:86:B7:1C:C1:24:E8:E4
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 0194BC3BF4714E83D1A6D094C2C67622D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: LjTHS4WiiLbIvDv29J3ieyKf9N4.roa (hash: 0M1gHDPS8KhOTlzfhUcKPBiuX1DLKJxKwDXRimBbw2c=)
2: gxJNBBGiD9K7VGlw6oARbvJ226s.crl (hash: sVAHZqIJ17K6nXS53n4crKr2ezw/fWnqPG36RiVmlpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:71:4e:83:d1:a6:d0:94:c2:c6:76:22:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=7b0d7023cea8ebb504a933d64b86b71cc124e8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ae:6e:75:74:e6:0a:90:3b:03:13:30:07:37:
db:0f:f1:2d:d3:e9:cd:96:4a:3f:dc:18:77:17:31:
b6:52:fa:f0:2a:34:de:5e:1d:c0:92:37:93:c7:6c:
8c:f1:e2:7b:d3:87:5e:d1:99:eb:d0:39:b7:b8:a4:
33:28:a4:c0:ea:3e:73:4f:54:b1:70:c4:22:34:72:
7c:fd:4b:35:82:83:c0:29:fe:7c:aa:5d:78:a2:fa:
e1:e7:d6:5d:29:d8:44:94:9a:44:b6:bd:40:f0:37:
50:6c:67:5d:71:56:ad:19:9a:0e:b8:a4:1b:dc:c1:
8c:16:88:57:e7:56:57:12:b3:ec:6a:05:6e:33:90:
cc:b1:b9:46:68:73:ec:0d:78:64:02:70:42:a0:36:
6e:7c:ce:91:81:14:5f:9b:85:b9:27:64:96:2b:59:
9f:a5:85:63:13:8c:62:49:b0:fe:4b:34:54:9f:f4:
08:d5:18:8f:1a:df:3b:52:88:8f:fd:1d:19:69:f6:
3e:be:a4:db:71:14:a4:a6:26:5a:d8:79:21:ce:de:
30:73:1a:92:83:09:55:fb:38:78:91:4c:e1:41:ea:
33:90:e4:1c:27:64:0c:19:50:b7:68:12:3d:0d:26:
f4:92:36:77:b9:14:ed:a7:0e:2e:b4:e4:d9:39:a5:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:70:23:CE:A8:EB:B5:04:A9:33:D6:4B:86:B7:1C:C1:24:E8:E4
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:32:3b:f0:96:70:be:33:a4:9a:da:de:e1:37:cf:23:90:ae:
e9:da:37:d6:7d:cb:af:50:94:8d:a9:90:d1:83:1d:bc:c5:25:
93:90:fd:bc:61:bc:97:d2:98:1a:10:19:03:52:2f:7d:fa:a1:
7c:40:ff:59:1b:81:9c:86:f6:f3:7e:57:da:8e:06:74:5f:26:
59:a6:18:f6:20:55:6b:11:f6:e4:74:b2:c3:7a:57:7f:32:50:
27:36:a2:3c:39:4c:9a:90:9c:c5:be:9e:70:b5:e6:19:e9:ed:
90:23:50:43:3a:cf:56:12:76:57:61:ce:87:45:56:ea:b4:13:
4d:77:89:ec:76:eb:50:45:50:79:06:98:10:44:17:85:f6:2f:
38:58:11:97:d9:d9:7d:51:68:11:b2:bc:cc:4c:8d:28:15:78:
29:e8:eb:a3:a3:62:d4:73:2a:41:c9:7d:7b:b6:00:3d:0e:be:
b4:d3:8b:97:a3:b7:dc:98:18:25:d6:80:fa:40:24:58:d1:7a:
4c:ab:02:e4:19:67:40:0d:81:5b:8b:19:fc:9b:e0:71:9a:28:
65:2c:91:17:4e:24:39:c3:9a:9e:06:fd:d5:2f:75:9f:c0:a0:
eb:e7:ac:4c:d5:c7:2a:69:62:f6:dd:25:e6:ae:57:66:e6:1d:
09:db:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:01:02 2025 by rpki-client