Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
File: gO9no9w9cYRemxVVz_WtMbtCOpQ.mft (raw, json)
Hash identifier: yfhxGh0+H3n0IXG2BuJ+KvkOGSiihXxtIsXMdeCrYSo=
Subject key identifier: 9B:4D:87:4D:C8:51:1F:30:35:C5:9E:45:8A:AC:0F:99:47:CD:29:5B
Authority key identifier: 80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
Certificate issuer: /CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Certificate serial: 0194BD4E3719E0B06FDBF3731F94BAB47954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 725G7dybLbuQKpUr5VC2q0wDs8E.roa (hash: OC0qz7BZ0oC6fOW2Sqogh+LE8Hr7cjZ2nPkrOk5rs7g=)
2: gO9no9w9cYRemxVVz_WtMbtCOpQ.crl (hash: GZ3cqL0qeRiqmTurQaqZd91varByUBVXqT+/IcLyFUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:37:19:e0:b0:6f:db:f3:73:1f:94:ba:b4:79:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ef67a3dc3d71845e9b1555cff5ad31bb423a94
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=9b4d874dc8511f3035c59e458aac0f9947cd295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:d4:52:1f:0c:79:37:54:6c:37:56:9a:70:
bb:37:2b:6a:db:55:c6:7b:c2:e5:62:18:46:93:8b:
37:91:ba:25:c8:e7:c8:84:85:85:f5:49:64:96:cd:
fd:74:74:1f:6f:06:b1:62:5f:ca:70:70:91:ef:d7:
b1:8c:f9:9d:44:92:77:c0:1b:7e:40:b6:3b:fe:6b:
87:80:b7:b3:ee:5f:e6:36:96:21:28:44:58:56:a3:
9a:38:75:64:5d:e3:6d:7f:b2:f2:80:43:f6:d8:f8:
a2:21:3b:b4:95:ae:60:9b:10:d4:46:08:41:05:8c:
30:5f:04:db:ee:31:04:4f:01:62:c9:8a:41:78:ae:
41:76:f5:52:5a:98:3c:1c:49:2a:e8:de:32:4d:71:
fb:e4:57:46:6f:c5:e4:c1:a9:09:90:4b:b7:1e:56:
f8:0f:c9:2e:cb:f8:ad:17:6a:12:2b:45:2b:84:2b:
f9:3e:b6:59:b0:32:41:de:b7:01:4c:87:c4:79:80:
41:59:a5:96:b7:61:fb:21:48:94:7a:bf:5f:19:a1:
19:4d:25:0d:76:57:7b:74:82:51:b8:1f:6a:05:9b:
02:bc:aa:9d:dd:07:44:a3:46:95:28:10:ae:4d:dc:
70:66:08:3b:c2:77:18:16:41:41:88:f7:e1:52:02:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:87:4D:C8:51:1F:30:35:C5:9E:45:8A:AC:0F:99:47:CD:29:5B
X509v3 Authority Key Identifier:
keyid:80:EF:67:A3:DC:3D:71:84:5E:9B:15:55:CF:F5:AD:31:BB:42:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gO9no9w9cYRemxVVz_WtMbtCOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e0184d-64d0-4a15-a277-7ce809353b18/1/gO9no9w9cYRemxVVz_WtMbtCOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:a8:41:e0:0d:4e:91:cb:cf:f5:11:c3:96:8a:b9:4a:9f:
72:2e:7c:b1:75:76:f8:3d:7c:24:e3:83:4d:93:8e:84:da:65:
d4:7b:7b:54:03:5a:47:b1:74:10:81:b7:70:6c:b4:d5:79:23:
28:22:5c:44:db:a2:03:9d:a8:a5:a8:30:f7:43:e4:ec:17:45:
8c:2d:40:03:79:09:6e:5e:56:c0:97:21:9c:3d:87:fa:4a:c3:
75:2d:97:b1:ec:b4:f7:cb:db:88:58:0a:c1:c5:69:c2:39:39:
d1:f5:1f:90:ea:71:dd:44:e6:55:51:c5:cf:02:e6:21:88:48:
04:0c:73:a8:6b:d6:b7:88:25:78:e3:6c:cd:fd:9c:a0:72:f3:
b4:da:1d:ec:27:8b:05:0c:d9:79:29:37:5c:03:e1:43:4c:98:
85:86:33:d8:e0:67:88:76:fa:9f:1d:69:79:ef:3e:f5:2e:db:
24:7d:e0:50:12:4f:cb:68:0d:5c:a3:64:c0:c0:eb:53:73:e2:
b9:57:80:37:c3:42:b1:c5:b7:4e:94:b4:a5:d2:aa:83:d9:be:
f0:4a:f0:a8:83:90:23:b9:79:f8:f4:fa:18:68:f9:e3:dd:be:
87:33:e0:b0:6a:34:a8:e4:78:f8:3f:99:0f:0f:1b:84:95:0a:
00:ab:80:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:46 2025 by rpki-client