Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
File: GFovZ9JFy6lRiwFwYacWku555_8.mft (raw, json)
Hash identifier: IySoKQkEohyUVzOq/USMoWxRBSIGcvdjhUQgp812Z78=
Subject key identifier: 2C:41:B1:DE:D7:56:51:71:61:4F:3A:BE:DE:1B:C4:C7:3F:F9:E0:31
Authority key identifier: 18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
Certificate issuer: /CN=185a2f67d245cba9518b017061a71692ee79e7ff
Certificate serial: 0194BBCDB61CAF730899DBC95B8858B6B43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
Manifest number: 064D
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: GFovZ9JFy6lRiwFwYacWku555_8.crl (hash: r+nbeNJ0Wz4fAsRqCYCEba5fNXc49qlaPgwTOYTiayw=)
2: RO9l6hoPRiEk5kvu-1wGIx3JVQs.roa (hash: z3IHW9wPnoAAyV5Yp5JV/XIyxcaRpjPHnzXPpTc3PGc=)
3: zPmRtHrWAHHMjTbZqQxb_k1QEE0.roa (hash: b0+r/Py1tsQMqZ9+iwYrxYKeaOWfr9BHfO+bAPyD5ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:1c:af:73:08:99:db:c9:5b:88:58:b6:b4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185a2f67d245cba9518b017061a71692ee79e7ff
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=2c41b1ded7565171614f3abede1bc4c73ff9e031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:11:3b:2c:67:6b:cf:30:b4:19:25:24:cf:
92:30:73:93:c8:ee:6d:6b:b5:98:e4:dc:a3:b7:26:
c8:46:3d:32:6b:ba:51:f9:80:97:bb:81:56:43:ec:
2b:17:79:fc:45:cc:a7:d5:8d:04:e8:59:d2:4a:bc:
45:a1:40:52:16:fc:1a:75:33:d3:c4:cd:a8:aa:df:
9a:e0:d4:93:72:3c:2d:4d:58:e9:8e:7b:6b:ea:43:
e2:e4:48:f2:81:bd:35:da:a6:f2:a2:73:61:ba:5c:
38:82:da:8b:6d:83:a2:c4:12:b9:76:71:97:be:46:
ab:e8:cc:f4:19:d2:17:75:ee:43:f3:36:76:b9:6f:
fc:86:dd:ce:b4:3f:f7:2f:e8:f7:9f:e1:18:49:7e:
13:66:4c:04:f7:16:45:86:25:05:48:86:c2:b5:59:
6f:db:b2:34:d1:5d:04:a4:00:41:72:9e:63:6b:e7:
e4:92:df:61:c1:ca:c3:c5:23:59:e0:78:ba:ca:80:
5f:cd:40:2b:d3:f4:5b:53:ae:17:bf:18:49:d0:f8:
9d:52:cd:25:2b:3b:86:31:bd:77:e8:ce:bc:ee:87:
de:62:1d:56:e7:e1:fc:0b:b3:e8:54:a3:89:4f:eb:
60:78:ad:d4:73:de:17:d4:bd:27:bb:10:84:a4:03:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:B1:DE:D7:56:51:71:61:4F:3A:BE:DE:1B:C4:C7:3F:F9:E0:31
X509v3 Authority Key Identifier:
keyid:18:5A:2F:67:D2:45:CB:A9:51:8B:01:70:61:A7:16:92:EE:79:E7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFovZ9JFy6lRiwFwYacWku555_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d55988-42d2-4206-95a9-bb018cfbeaa2/1/GFovZ9JFy6lRiwFwYacWku555_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:85:81:11:0c:5d:80:29:dc:ff:9b:59:28:c0:44:6d:2f:12:
80:98:a1:b6:4c:c0:cd:a3:ad:8c:e2:3c:f0:26:fb:df:c0:af:
30:bc:c8:23:09:fe:e9:ee:65:15:01:2c:d7:f3:c2:8b:a0:f0:
29:ba:60:33:d8:63:88:bb:ea:6a:93:b7:3c:ab:79:89:24:e2:
77:b8:34:a9:0b:3b:5e:c1:a7:b8:df:54:d8:31:30:84:3e:33:
29:5b:f4:f1:88:2a:5d:cb:bd:b2:d4:d3:88:53:7e:09:cb:31:
16:17:d3:94:5d:40:36:f0:e3:ff:38:f5:75:2e:9c:fc:17:b4:
df:e0:61:d6:fb:00:ec:85:58:6d:73:3f:2c:63:a4:91:2e:c4:
a5:8e:cc:63:cf:5f:c7:ba:cb:67:18:3f:a6:c3:33:8a:57:0b:
88:65:d9:37:30:b3:f9:fd:56:7e:ef:53:be:0a:2c:d0:c3:7b:
1a:13:25:af:1c:3c:05:34:1d:94:c0:9c:69:dd:b4:9a:8c:f2:
ca:1d:61:a4:4a:fe:0e:97:97:c7:82:6f:c5:15:09:3b:68:10:
04:28:3e:44:ce:5d:b0:98:70:5d:fe:24:f1:c8:3a:b3:6d:50:
f4:6a:09:05:63:0d:bc:94:68:d1:a5:db:31:4d:46:07:da:99:
2c:7f:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:36 2025 by rpki-client