Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
File: gFwMnyN2PAN71ohHRc-EZNLbZj4.mft (raw, json)
Hash identifier: /anI4Em31j3CMCmbVhLatid654wdVCkeun5ouyalWHE=
Subject key identifier: 03:97:7E:64:EE:C0:B5:9C:DB:61:DA:81:56:F4:40:DD:5F:BE:11:32
Authority key identifier: 80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
Certificate issuer: /CN=805c0c9f23763c037bd6884745cf8464d2db663e
Certificate serial: 0194BC3BFD0DA9FDFE473E9047695AC5DEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 3BCTdWPdAwRCl8UX_2fwNUPfXDk.roa (hash: auwwYg2jmDefujiM9dhtcg3qGUezv1eAv9OXRPuNl5Q=)
2: gFwMnyN2PAN71ohHRc-EZNLbZj4.crl (hash: zQUrOUm4gOP1mBuxkLboXXNFhjiELJ7tTOqzGK///xc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:0d:a9:fd:fe:47:3e:90:47:69:5a:c5:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805c0c9f23763c037bd6884745cf8464d2db663e
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=03977e64eec0b59cdb61da8156f440dd5fbe1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:66:05:5e:8f:d5:a3:ec:a2:fd:a2:e3:0a:
9b:51:09:61:d4:39:43:5c:41:54:e6:5a:00:fb:10:
27:58:6a:f8:3c:32:43:26:b4:df:91:59:c0:9d:74:
9c:3d:72:5b:9f:8d:0b:8c:9b:d0:a5:b1:07:16:e8:
b8:11:83:85:c5:8e:9e:72:02:50:8a:3d:64:45:77:
20:3e:9b:d5:c7:03:a0:7e:40:c3:17:9d:34:af:65:
da:e9:ff:49:56:b4:eb:51:30:06:76:42:94:fc:76:
9d:35:59:76:7b:0f:39:cf:5a:f9:74:d8:0a:5d:19:
42:fa:60:36:b0:c0:80:19:5b:97:73:e8:16:4b:2a:
f4:57:5f:6e:eb:9e:14:75:6b:49:cb:1b:9f:b8:40:
20:7c:93:11:8e:67:3a:3a:f6:a5:b1:4f:0f:51:05:
73:d1:af:c4:b0:a1:d0:6b:a4:ba:d0:1d:44:c9:82:
d3:e2:f5:b3:18:c8:9d:3f:10:39:e6:10:a8:d9:25:
cf:af:c9:e4:0b:81:2a:40:6c:00:2c:0b:ae:61:4f:
86:6f:b9:34:13:44:f6:11:0a:7a:a4:88:dc:02:ef:
34:de:5f:36:0f:c2:43:57:e9:e2:41:cc:3b:33:5d:
51:d1:cd:ba:88:e3:b6:3c:a5:98:5a:1d:27:da:67:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:7E:64:EE:C0:B5:9C:DB:61:DA:81:56:F4:40:DD:5F:BE:11:32
X509v3 Authority Key Identifier:
keyid:80:5C:0C:9F:23:76:3C:03:7B:D6:88:47:45:CF:84:64:D2:DB:66:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFwMnyN2PAN71ohHRc-EZNLbZj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7247d5-e283-4b29-acfd-82e1e200504e/1/gFwMnyN2PAN71ohHRc-EZNLbZj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e0:eb:7f:be:b8:22:99:50:83:dc:41:30:d4:08:9d:4a:c5:
26:47:e2:8d:50:88:13:a9:61:28:ab:a2:60:2a:7a:87:65:48:
f0:3a:79:f0:31:ff:be:7d:e3:1b:97:67:ad:64:f5:59:75:49:
2d:0d:9f:65:56:37:64:6d:bb:6e:66:90:a1:4b:43:01:19:f1:
ce:24:65:4c:08:6c:bc:d1:6e:60:90:aa:88:cf:b3:fb:45:91:
b7:a3:e9:35:25:d8:13:e2:c0:c8:bc:84:e1:34:be:e1:fe:95:
18:a5:21:a0:11:30:f2:e9:a4:15:e8:79:02:66:c5:28:2b:3c:
76:c4:c4:ae:21:97:a1:4c:1e:1c:f7:79:e4:6b:11:85:7c:48:
cd:02:b8:0d:0c:b8:00:8d:a5:17:26:c8:6b:fa:d4:72:17:13:
f8:c1:db:49:64:0f:5e:94:90:d2:d8:b3:d7:f8:a1:66:3a:b8:
47:71:f9:73:de:cc:59:31:1b:2f:58:7f:ca:30:ff:a8:c3:b9:
ff:e4:a2:9c:40:46:73:93:9a:02:eb:83:a3:c4:20:34:40:fa:
be:ca:ce:d2:8b:59:12:c7:1c:7d:29:30:19:5f:be:5e:a1:94:
68:a9:e7:2c:a0:e5:c8:69:84:4f:4a:0d:fc:d7:00:7d:e3:00:
4e:81:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:47 2025 by rpki-client