Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
File: gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft (raw, json)
Hash identifier: 3W7S86RIe+J52u4E99YUGWEqpEXs3arBCt9j1h3RK6o=
Subject key identifier: B0:64:5B:6A:39:C3:87:CB:FA:41:3B:1B:77:17:71:2E:CC:55:48:E5
Authority key identifier: 81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
Certificate issuer: /CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Certificate serial: 0194BC72A2D7690B05E9D302F19042DA083F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
Manifest number: 03E2
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: FS82XW-k77zMqGngn5r7_Yo2ofY.roa (hash: HKhziiZ0vfYbPizRPboCVEcmyagdxZmch8FNJ52Iiys=)
2: gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl (hash: Ww2qzaFuecRp7XBLfyGHIJl3eLlnsQHn86DWyxSJc0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a2:d7:69:0b:05:e9:d3:02:f1:90:42:da:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8107dc036d9d6c28f1d87ab64e78ee485a96fd81
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=b0645b6a39c387cbfa413b1b7717712ecc5548e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:a3:28:c0:78:4c:33:79:31:cf:06:81:44:
52:c3:94:1d:1d:cf:45:74:15:7e:e6:1b:c0:37:79:
b8:bb:96:f4:50:d4:49:4f:6e:1d:0a:cd:17:57:c3:
ca:7e:08:b6:ad:c3:05:62:b6:6d:79:30:ab:c5:af:
49:4b:1e:b6:5f:4b:dd:71:e1:68:c8:95:23:0b:80:
ff:a2:69:ea:7c:6b:7e:ba:3c:0d:df:9f:66:13:39:
24:3f:64:a4:e0:6a:89:aa:69:90:61:94:d0:d0:80:
56:d7:1b:f3:62:ff:38:95:cc:d1:01:30:ee:63:d9:
10:84:9e:51:32:ea:4d:dc:19:dc:36:a7:ad:5a:06:
24:d9:f1:7e:a1:7c:9b:41:8c:ec:d6:7b:43:fc:5b:
1a:dc:a4:df:08:e0:57:8f:0d:b0:c1:5c:8b:0f:ee:
bb:81:09:c0:85:24:e6:91:92:43:8a:3b:ee:34:7c:
55:ae:0a:ff:eb:49:15:92:78:d8:06:bc:3b:55:b7:
5f:7d:f6:25:54:56:42:13:da:2f:f1:b6:6d:8e:f0:
2c:81:ea:1d:76:c6:b4:03:03:cd:f9:d4:a7:e2:e4:
a6:4d:df:db:ac:3c:34:67:d0:e7:b8:be:fe:1b:e7:
41:ac:d9:15:f2:7e:19:09:a9:1e:bd:bd:3e:9a:37:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:5B:6A:39:C3:87:CB:FA:41:3B:1B:77:17:71:2E:CC:55:48:E5
X509v3 Authority Key Identifier:
keyid:81:07:DC:03:6D:9D:6C:28:F1:D8:7A:B6:4E:78:EE:48:5A:96:FD:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQfcA22dbCjx2Hq2TnjuSFqW_YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/159860-f832-438a-9e6f-76a141cdd41f/1/gQfcA22dbCjx2Hq2TnjuSFqW_YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fd:65:7d:26:f6:80:97:9f:46:78:1b:8b:40:cf:05:58:a7:
68:85:6f:ba:3a:b0:64:f8:34:a3:ce:93:76:01:59:a7:a3:f3:
97:41:80:e1:0d:34:5c:a8:e5:86:f1:ce:39:da:09:10:6a:01:
06:de:14:0a:32:c8:16:cd:09:fd:db:f6:f1:17:7d:48:9f:35:
78:cf:cf:9e:de:8b:ab:b1:4b:54:58:6e:d6:26:ce:27:81:b8:
70:fd:9c:c4:f1:60:6f:32:f5:e3:2a:24:27:b1:0e:df:7a:09:
a7:e1:17:2c:e0:bc:22:0c:6c:ae:56:a6:04:af:14:d6:08:7c:
7a:97:9b:79:7d:c9:ce:11:fd:38:27:92:da:23:67:8d:34:3b:
51:bd:4a:1c:c9:20:19:4d:69:9a:c5:2d:ad:08:9f:2a:2e:18:
82:0f:cc:9c:b0:49:64:68:72:18:0b:1f:53:f2:04:c0:f9:20:
78:e6:d4:03:48:f4:9d:86:5f:42:33:66:8a:50:7a:ce:b6:45:
9b:79:18:9e:14:45:7e:c0:a6:3a:6d:bd:20:96:26:96:b6:70:
62:17:bb:b0:b3:14:ff:0a:2d:51:d7:29:48:7c:cc:e5:5e:b0:
66:f3:08:60:1a:b4:e6:69:57:9b:3e:8b:3a:fe:e1:6c:e3:f8:
3f:ab:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:38 2025 by rpki-client