Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
File: gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft (raw, json)
Hash identifier: rNkgDytHSLjjZMZLfn15sPEqUGFrJFWt/exbDJW31/Q=
Subject key identifier: 89:3F:8D:83:63:A5:95:61:F6:9B:B0:F9:53:F3:6B:D9:E9:D6:EC:77
Authority key identifier: 81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
Certificate issuer: /CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Certificate serial: 0194BC72C1B15C62B88C029935F216AD1E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
Manifest number: 0BB7
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: YTi5kVsPsdj_lVOXlLvthRcyZYk.roa (hash: yclAP/FevQD565z0O5X4lV8O1DrwrH9X8Lbd0rW1rtQ=)
2: gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl (hash: AzLr7U4y0jx3HkgA0iiTOYdq5K7EZ54lyQbsWSBRkBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:b1:5c:62:b8:8c:02:99:35:f2:16:ad:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81523888eed5311f92a16615ef2cf0175c6fe41e
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=893f8d8363a59561f69bb0f953f36bd9e9d6ec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:1d:54:83:46:9a:6a:d7:bd:38:a9:20:a1:
93:91:0e:29:6c:15:a4:ac:f8:7d:9e:87:ae:36:86:
aa:3b:8f:15:1a:f0:10:48:69:f1:03:26:a6:13:3c:
19:70:f7:f1:8a:3a:07:c0:bd:3a:d0:07:06:0e:15:
4c:af:2d:2e:8f:f0:82:d3:3c:6a:31:26:e0:1f:b2:
02:c5:b9:c7:77:c1:ae:bd:0a:4b:a9:57:20:83:3f:
fe:6d:55:97:66:a2:04:90:e1:52:f2:57:a9:c5:57:
62:59:b9:7b:1e:47:ef:df:dc:ba:ee:78:07:29:a8:
69:b2:35:17:15:ba:5e:cf:92:55:87:cb:7a:c0:8d:
28:70:a3:99:43:fd:0f:24:55:df:7b:44:5f:38:a4:
b9:24:5d:37:63:cd:fb:45:26:3d:05:29:76:c3:f0:
30:29:00:09:51:4c:49:fd:f9:19:d2:b9:bb:9c:6b:
b7:06:ae:a3:43:85:76:4d:8c:2a:8e:4b:5e:f0:f4:
18:2c:eb:da:63:a8:ca:ea:f8:2c:e6:ea:b2:2d:2f:
ba:2b:a1:2b:b8:fc:da:5b:9e:f0:16:b1:6e:42:5b:
6f:4f:4d:46:81:df:bc:17:f2:a3:7f:c7:e6:4a:23:
a8:32:7e:1b:41:8c:5b:bd:d3:df:5a:2e:c9:5a:25:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:8D:83:63:A5:95:61:F6:9B:B0:F9:53:F3:6B:D9:E9:D6:EC:77
X509v3 Authority Key Identifier:
keyid:81:52:38:88:EE:D5:31:1F:92:A1:66:15:EF:2C:F0:17:5C:6F:E4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVI4iO7VMR-SoWYV7yzwF1xv5B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/880b00-58ab-47de-9728-0cad6ca7ecd7/1/gVI4iO7VMR-SoWYV7yzwF1xv5B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:72:c1:5b:ce:a9:64:66:8b:72:1e:7d:31:cb:c3:19:5c:29:
66:96:5f:dc:f4:2a:ec:a8:48:3e:8e:25:12:b5:93:17:30:b4:
a7:6f:c0:87:0c:54:7a:a5:9b:9a:33:fd:72:90:87:b4:6d:7e:
da:87:90:68:63:08:03:42:e8:7c:04:7f:95:28:b9:ae:c2:4b:
b7:9b:a1:c1:5b:d6:38:25:2f:5b:82:51:0c:db:23:14:e6:84:
28:9a:cf:5f:79:e1:fa:19:20:63:39:c8:3d:80:f0:53:7a:68:
92:9e:13:81:87:a4:c8:9d:af:f1:fe:96:30:4c:36:b3:9e:34:
93:3f:2a:00:81:b3:33:66:da:43:b5:aa:31:db:22:e7:fc:46:
10:2d:a8:90:28:c6:8d:7e:22:75:07:ec:af:7d:6a:5a:1f:d9:
e5:f5:f8:27:a8:25:48:eb:72:f1:a9:a6:85:b5:00:47:fd:49:
1e:52:c9:98:fb:de:a0:52:86:3f:f0:9f:6d:fc:04:2b:a1:21:
18:ac:7c:e3:2c:bf:fa:ce:90:3d:35:0b:1d:4d:67:53:8c:05:
52:7c:3a:eb:23:96:7c:b8:31:0f:1a:89:bf:bb:36:3e:36:f5:
d3:e2:7e:a6:01:97:d5:f1:6d:b6:4b:20:f4:1e:93:b7:b4:5f:
55:e1:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client