Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
File: GNwjUhF2AjItdBxRNoyouN0aPqo.mft (raw, json)
Hash identifier: Yb4C3JlllTVMLq503Nb2qlhYj3C98FQikP1sdEKmAHY=
Subject key identifier: 80:E0:0A:42:87:37:E6:E6:BB:D6:4D:BC:22:6F:02:F8:33:D0:AA:CD
Authority key identifier: 18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
Certificate issuer: /CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Certificate serial: 0194BD85946E71EC5EDAED3B8EB1B45F772D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
Manifest number: 05D1
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: GNwjUhF2AjItdBxRNoyouN0aPqo.crl (hash: MEx2pIrNmClClbUBSZWFQx2O/yqxT+/1oCZ14tJ71AY=)
2: ch1KpBgRu3ljafWy2V7pY_YI2M4.roa (hash: ms8ZB4OSeZ322kYbRZpkd1MuHt48+zlVIWdiu6MuxZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:6e:71:ec:5e:da:ed:3b:8e:b1:b4:5f:77:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18dc2352117602322d741c51368ca8b8dd1a3eaa
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=80e00a428737e6e6bbd64dbc226f02f833d0aacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:75:aa:e1:d6:9e:9f:8a:a3:2d:49:fc:fb:
85:26:38:4d:ac:25:03:9f:44:cf:91:c8:39:26:36:
7a:f3:9a:7d:24:b3:1b:16:f3:ff:0e:23:c4:ed:ba:
50:0b:a1:b3:c3:6c:52:51:ab:cd:eb:d7:c4:e9:47:
09:30:dd:aa:0b:e9:6f:1f:26:a8:76:b9:fd:b9:73:
a5:0e:93:77:eb:58:e1:13:aa:1c:f5:6f:04:d7:87:
3b:73:88:c4:0d:41:01:a9:7d:cf:6d:1e:15:d9:41:
89:00:50:6d:40:0f:b0:22:d6:ba:b1:fb:6f:55:6e:
05:7a:02:3a:b1:cb:53:68:41:dc:03:c6:99:a5:47:
03:ab:96:58:81:46:d3:9f:06:55:31:e4:3b:0a:ac:
b5:a0:54:82:38:e9:44:9e:29:e5:3b:1f:a0:b1:f0:
be:ec:bf:fc:9b:68:10:d4:88:04:7a:3b:06:c0:66:
c4:c1:2e:27:bc:4e:99:93:dd:7a:e3:7e:6f:e9:35:
92:58:8b:fe:15:bb:33:e8:4f:15:e5:16:69:42:c0:
80:0e:eb:03:c6:08:d1:bf:e0:13:dd:5c:69:6c:3a:
4d:a5:eb:b4:dd:7b:5a:5e:31:74:63:74:4a:b4:41:
8f:51:d7:bb:a7:c9:27:34:ff:f9:01:4a:21:7e:b8:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E0:0A:42:87:37:E6:E6:BB:D6:4D:BC:22:6F:02:F8:33:D0:AA:CD
X509v3 Authority Key Identifier:
keyid:18:DC:23:52:11:76:02:32:2D:74:1C:51:36:8C:A8:B8:DD:1A:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNwjUhF2AjItdBxRNoyouN0aPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0143cd-a814-4d48-a87c-d7c0e9393ea0/1/GNwjUhF2AjItdBxRNoyouN0aPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:ce:d2:8c:ab:e3:98:9a:6b:89:70:81:e3:f9:a8:36:aa:
48:c4:16:4a:1f:b9:01:b4:bd:43:dc:52:6f:7a:fa:47:16:af:
57:c1:5c:91:81:f5:03:60:77:cb:a6:fa:37:28:b1:2d:7c:a9:
6d:e1:29:bb:89:56:b9:d8:f5:1b:0c:a5:3e:95:54:78:9b:78:
2e:c8:7e:b4:c9:f6:91:5c:bb:76:83:b6:2a:54:51:07:8a:a1:
ce:a6:aa:6d:76:18:51:6e:92:4c:d3:37:5c:f5:00:84:37:60:
34:51:7b:81:08:ff:66:1c:1a:75:6d:bb:42:60:e8:97:43:b8:
a6:39:40:da:1e:54:bf:c7:01:2c:3a:4b:88:9c:0d:fa:f5:b9:
9c:2a:53:8b:d8:4e:50:d4:43:d4:bd:4d:ae:1c:a7:91:c5:b8:
63:65:cf:56:66:a1:06:00:de:af:9b:4b:91:f9:24:a1:63:35:
64:28:0c:c7:4b:d2:db:5d:ce:82:4e:fa:ce:b4:5d:e6:b8:2a:
21:67:fb:42:5c:e4:6f:fc:66:e8:2a:60:21:33:9f:e5:40:65:
62:3f:8b:3c:98:09:49:bc:a8:85:94:ec:07:3c:ef:9b:d3:5f:
f7:fe:7a:f4:6d:ed:52:e3:b3:c4:be:f9:7a:3f:54:a0:4e:ab:
3b:79:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:24 2025 by rpki-client