Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File: gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier: nWA6ZBueJS3bwF+HZ8fMPG9pRmEeURtifTJQryYFEuY=
Subject key identifier: 37:E8:7E:9A:BD:CB:E6:CB:5B:5B:2C:CB:7C:C7:30:7C:74:73:B4:E6
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer: /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial: 0194BD17DE5CA3A8CB11E3266DE4377EF576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number: 0A81
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: _f2qtSqsuNVRAf2aMYbbvbg8ymw.roa (hash: 4sGopdLUwHqj2GkqogChdlm5xcViRd2S6Xz6oo4SiLA=)
2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: n1/Dez7pBjim04AZWaOakMLq5AAgS6yJHdhoE+fffuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:5c:a3:a8:cb:11:e3:26:6d:e4:37:7e:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=37e87e9abdcbe6cb5b5b2ccb7cc7307c7473b4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:ad:6c:14:ca:1d:00:cc:17:94:e6:28:69:
2a:b5:cc:0f:6e:90:c8:6d:ff:95:34:db:72:cd:a7:
0c:d3:be:5e:c0:fe:6a:ff:27:7c:b2:dc:d7:f7:13:
2b:58:69:9e:3d:67:d4:0b:7b:27:a9:57:b6:00:5d:
4a:b2:9b:27:e2:52:da:3e:db:07:3c:0c:0e:aa:02:
9c:3c:05:e7:0c:6e:f7:43:7c:90:1e:97:c5:40:03:
ee:c9:4c:c0:e8:1a:fa:ee:96:a2:46:04:a7:39:2e:
62:84:0e:ba:30:52:8c:03:fe:48:7c:25:11:a9:16:
b8:7b:bc:e2:b5:68:87:f6:4a:5b:c6:b6:c6:8a:b4:
0a:57:c9:f8:13:ac:a9:8a:bc:c9:f9:8d:3c:5c:98:
8a:34:3a:34:45:71:f7:10:6a:d7:53:b7:1f:61:15:
c8:8b:bd:46:ad:44:39:9e:e3:88:69:a8:c4:0c:06:
df:12:59:aa:45:e5:bb:42:9d:34:a8:bc:9c:46:13:
f5:0c:77:69:cf:71:48:68:de:11:11:6e:87:bb:8f:
73:18:d8:90:e0:f9:0b:3d:1e:e6:57:9f:c3:a9:df:
f0:4f:92:58:ba:1a:55:a4:ce:6e:97:d2:0c:c7:2f:
69:5f:6c:92:bb:59:e6:57:b0:59:b7:0f:86:4e:fb:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E8:7E:9A:BD:CB:E6:CB:5B:5B:2C:CB:7C:C7:30:7C:74:73:B4:E6
X509v3 Authority Key Identifier:
keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:a5:6c:69:38:f5:74:fc:e0:33:63:8d:29:a8:b4:96:cf:
5a:c8:bd:3c:b9:72:05:06:65:c8:18:d2:ad:20:4a:23:a4:dc:
20:b0:8e:56:7d:4a:3e:23:82:b2:ba:bb:ae:fb:d4:e6:56:26:
d6:d4:8c:db:ba:2f:b1:6a:d5:f0:28:1a:be:e7:e2:63:44:f2:
50:7a:38:46:dd:24:1b:6a:f5:82:90:64:13:20:77:0c:70:6c:
64:f6:11:77:65:19:f6:59:13:ec:0c:8e:3b:4b:4b:2f:ef:17:
03:6a:cf:a0:99:c2:ee:d0:ac:0b:df:ce:34:f4:d5:03:7d:d3:
de:0f:30:44:fa:13:ef:05:02:9b:ea:54:7f:5b:8a:68:de:44:
ec:96:9c:83:56:46:06:8a:6b:3f:e6:25:7c:a2:3c:6d:5e:49:
49:11:ab:76:d2:f0:6c:27:d9:d1:c8:b4:11:35:e2:9b:44:1a:
6a:ce:9d:f1:ec:9a:97:da:43:bf:16:58:32:49:5f:94:5e:23:
06:b0:9a:f3:b8:41:c6:8c:93:82:26:b3:7c:f8:38:e7:56:56:
e5:14:2f:e7:75:fe:47:0b:9a:b2:5b:43:1e:93:3b:08:00:eb:
2e:51:35:c2:79:2a:90:69:d5:02:f8:d0:08:86:a6:02:89:2b:
90:09:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:36 2025 by rpki-client