Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
File: GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft (raw, json)
Hash identifier: xuMz8Wyw1xgSo69AdrBpZeamd/vCfVmJS/gFq1yAgVw=
Subject key identifier: 86:01:E3:5E:13:97:5F:3C:FA:75:15:B3:17:2D:09:84:0B:DF:DD:07
Authority key identifier: 1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
Certificate issuer: /CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Certificate serial: 0194BD4E66FF23C9F2527AF51B99B0676C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 9VHnso7HKhi305msO0E0LZUPW1k.roa (hash: 04hjZ5ZRGMkvxF1mWUhoObmyRw38T7L084gMoET9a40=)
2: GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl (hash: c7y2qrHXoz5/aq95ea3FaN0Wnlmj9lGhOOZLSR9jBXw=)
3: Njf2TltOZrdEvD_qof8H0kAWoWg.roa (hash: DfC/KigNnFzfWnrZ4fHRxNqUPwLlnRYcAsAhEzE9YoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:66:ff:23:c9:f2:52:7a:f5:1b:99:b0:67:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9db29aa9308e1751b03d0d6999bb868805886
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=8601e35e13975f3cfa7515b3172d09840bdfdd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:43:28:77:9a:0c:b2:44:b8:d1:23:30:55:
80:76:be:31:b7:8f:dc:a7:f8:2b:17:5d:a4:12:96:
88:b0:b3:a8:7b:61:0e:2c:6a:5b:ec:91:35:d5:f1:
6e:ae:36:a4:d9:d2:4a:2a:c1:33:59:be:a3:40:67:
c3:36:3e:e7:d7:e6:aa:7c:76:9e:dd:82:d4:b0:71:
6d:d1:47:e2:0c:80:c9:0f:ba:2a:29:e9:ef:ac:b4:
12:14:02:e5:9e:87:a7:e4:cf:bb:2c:7e:05:f3:40:
01:36:1e:9f:07:1b:03:49:9f:35:9c:85:a2:70:0c:
e2:8c:12:23:07:a3:d6:57:c7:b1:29:73:08:d3:06:
00:7b:44:0d:b7:60:7d:ae:d1:25:59:01:b4:70:01:
4e:c1:7e:c4:7c:71:22:b4:3e:96:71:02:c1:88:ba:
fa:fb:b9:52:99:ba:20:a9:4a:61:5c:a5:83:54:87:
1c:6e:61:3b:4c:11:86:8d:5d:51:db:5a:4e:7c:16:
e0:d1:28:3d:c7:e1:0b:75:0e:a3:4a:12:29:23:1b:
c0:42:8b:ba:9c:56:2a:57:64:b2:67:f9:1a:1d:be:
5e:f4:4f:6d:b5:92:78:9b:b2:51:57:91:60:2e:29:
75:59:b4:02:21:8d:46:13:7e:2a:a4:5c:3b:e1:dd:
a2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:01:E3:5E:13:97:5F:3C:FA:75:15:B3:17:2D:09:84:0B:DF:DD:07
X509v3 Authority Key Identifier:
keyid:1A:E9:DB:29:AA:93:08:E1:75:1B:03:D0:D6:99:9B:B8:68:80:58:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GunbKaqTCOF1GwPQ1pmbuGiAWIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eb7835-d364-4e28-9a82-ed9231fbaed1/1/GunbKaqTCOF1GwPQ1pmbuGiAWIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d8:25:1b:06:8d:80:f0:dd:2d:33:12:de:3f:2c:40:a8:38:
03:22:19:14:80:0a:50:f6:9e:c8:7c:66:90:af:dd:9c:5e:2b:
4a:81:ca:da:b0:ae:28:44:39:3d:36:c3:c0:d8:6e:38:da:74:
6d:2e:89:2d:40:50:11:b6:b3:74:78:16:b6:b2:5a:5e:19:d8:
9c:f6:7a:a0:ae:f7:e4:c5:b5:0c:19:10:12:4d:9d:fe:35:65:
50:c3:51:ae:db:ed:11:00:3d:76:46:01:ef:f0:2e:fe:26:61:
95:ad:d8:f1:43:1c:4a:7e:dc:de:d4:ac:fb:a2:82:79:0d:fc:
c7:82:31:72:f3:06:d5:53:ca:eb:c9:ec:60:b3:15:85:10:77:
bc:e0:25:4b:90:2c:91:54:89:b0:9e:0f:0b:51:9b:fa:76:cc:
4d:ec:6c:d3:bf:06:2d:4c:ac:49:c4:32:f1:23:89:ce:f2:d0:
78:a6:bb:d3:63:66:d5:08:b7:b1:47:e5:c4:6f:e3:25:df:a5:
89:78:70:33:63:00:a0:4a:38:86:d7:40:36:21:dd:68:5f:1c:
e0:63:12:e7:79:c3:4a:69:d9:c1:b3:23:8c:79:06:82:57:39:
ab:16:41:2f:8c:ab:91:38:ea:da:65:93:80:36:5c:a7:05:91:
5a:08:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client