Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
File: gPPzEUyqjpJigXJfcn1gjZM5URg.mft (raw, json)
Hash identifier: CjG+5Kn8eQzbvz/1/PS5PL6ROYBE3GUyr+CbJHMC7Fs=
Subject key identifier: 20:C1:6C:8C:96:F4:D9:5B:D4:6E:3D:38:CC:AD:93:15:5E:5B:31:65
Authority key identifier: 80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
Certificate issuer: /CN=80f3f3114caa8e926281725f727d608d93395118
Certificate serial: 0194BC04DF1CB60A2F341DD06B005F2F5A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
Manifest number: 75
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: gPPzEUyqjpJigXJfcn1gjZM5URg.crl (hash: UaXWRN2AFeTOKoxuaRg4kjPU5EW5A40Egeo2dCNWXHU=)
2: qQBsyu_cVKZnC2YtWnBhQBpOfUQ.roa (hash: TjgATufRss8r1iBf8Y/PyScO/pIDEQWkrsAtyOXWrVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:1c:b6:0a:2f:34:1d:d0:6b:00:5f:2f:5a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f3f3114caa8e926281725f727d608d93395118
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=20c16c8c96f4d95bd46e3d38ccad93155e5b3165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:24:6f:e7:45:18:64:d7:20:1a:49:4c:07:
a3:01:df:45:e6:83:b9:3f:cf:2b:fc:11:ff:ef:04:
0b:07:c4:74:c9:25:11:e5:43:ef:f3:76:fd:cf:18:
64:2d:a5:b9:a0:24:77:87:65:75:31:e8:89:69:51:
14:f5:28:41:f6:e3:93:b1:2b:c7:02:97:be:fe:3e:
34:46:fd:39:67:06:09:27:ac:27:70:fd:39:e8:b1:
c0:0f:52:7b:ad:61:45:bc:04:ca:6e:51:74:c7:86:
0e:78:09:7c:e7:d9:9b:01:b5:61:54:5b:5a:2b:48:
3e:8e:93:8d:32:2d:5e:68:19:4a:1c:62:80:bb:19:
c4:af:b8:42:ec:b3:cb:db:a1:90:3a:2d:fb:2d:d7:
20:ab:31:33:46:9a:1e:61:3f:0b:e3:d3:e8:0e:15:
02:e3:15:f0:c8:e8:c5:47:e3:5f:e2:e5:c8:c1:58:
13:d2:93:7e:37:73:ee:d7:e4:2f:4f:00:15:59:b3:
a8:a7:01:92:b8:97:b3:fb:47:e4:48:2c:f3:f8:90:
dd:76:5f:c4:f9:64:e7:e1:2b:d4:e2:b4:f4:58:da:
48:c6:6a:86:4d:57:b1:38:e3:11:a6:13:a7:ea:67:
8a:61:14:f4:17:c7:1e:cb:2f:1d:f1:ab:8e:c7:38:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:6C:8C:96:F4:D9:5B:D4:6E:3D:38:CC:AD:93:15:5E:5B:31:65
X509v3 Authority Key Identifier:
keyid:80:F3:F3:11:4C:AA:8E:92:62:81:72:5F:72:7D:60:8D:93:39:51:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPPzEUyqjpJigXJfcn1gjZM5URg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fe7b79-1568-4eb6-bc0f-5489e22cab81/1/gPPzEUyqjpJigXJfcn1gjZM5URg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:41:a0:99:6a:82:5e:db:2a:4d:d0:0f:f5:6f:10:91:0a:
04:e6:60:1e:00:15:10:04:df:55:56:c1:c8:35:d7:06:03:ec:
61:2c:53:7c:38:ad:de:85:75:a1:e3:b5:cd:c3:39:80:79:cf:
2c:0e:3d:88:17:52:fb:f3:cd:ca:e1:5d:59:88:91:8f:94:c5:
95:9f:3c:ec:8e:b1:39:c6:7a:c4:69:67:4f:04:b7:db:cf:e0:
0d:81:15:52:fb:25:5d:c9:62:02:95:09:ae:9d:73:2b:1b:5a:
b3:ef:ec:2b:9a:94:04:5f:8e:28:79:0d:03:c8:57:3e:ae:32:
fe:ec:6c:2d:bc:d6:cc:71:e0:c2:51:20:b3:5d:d9:a7:28:90:
1f:02:36:3c:68:eb:97:6a:77:c2:aa:2f:ac:70:cf:18:1e:9c:
05:cc:da:01:ea:bd:be:40:fa:ac:d8:12:c7:2e:a6:87:8f:00:
65:9f:95:9e:9c:77:2d:08:04:9d:45:a0:58:34:8c:24:31:eb:
bf:e2:bb:8e:1d:83:05:a6:7a:12:d2:d5:9c:7b:e2:32:05:6c:
4c:10:62:24:b5:9e:ad:02:8d:ad:48:41:dd:05:da:19:dd:e5:
d8:e9:97:65:d7:2d:69:81:42:cc:32:c7:53:70:92:d9:8f:f4:
9e:2c:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:00 2025 by rpki-client