Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
File: gmkF0cEWiypmBwmtsg80xuTAPX8.mft (raw, json)
Hash identifier: o4x/6nBs1CZYsomzgadSFJdiXNCcLLFvpGcSj5MSkTQ=
Subject key identifier: FF:4C:64:40:AE:AF:2C:A8:83:7D:32:F7:3C:F3:A5:3D:03:96:F2:2D
Authority key identifier: 82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
Certificate issuer: /CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Certificate serial: 0194BD856F1CC2792EC0275ABC6FD0B00546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: YsPCa2LhHTzsReR9IeNzv5T3mos.roa (hash: LDFsTcsV1AxqY+xNyJv9Hm+hGyPSKYS1sTcP7lh9G1w=)
2: gmkF0cEWiypmBwmtsg80xuTAPX8.crl (hash: M/fHvFQmjF8oi9358/6UB7fLL8g5WNw7OHvLXeB/4FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6f:1c:c2:79:2e:c0:27:5a:bc:6f:d0:b0:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826905d1c1168b2a660709adb20f34c6e4c03d7f
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=ff4c6440aeaf2ca8837d32f73cf3a53d0396f22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:1b:e0:b2:23:24:84:f3:28:5a:07:47:a3:
7c:8e:e0:29:7d:d3:3e:9a:d9:99:f3:de:52:af:83:
8c:34:12:a6:f4:ca:ab:66:96:d7:0f:50:85:04:f5:
8c:01:c6:c8:dd:c6:49:04:5d:68:8c:6c:f8:3a:b9:
54:58:95:af:4f:39:fb:68:b5:cd:4d:7d:64:b1:f0:
3d:fc:a2:5f:a5:ac:42:7d:4e:11:35:7a:5e:9f:25:
5c:28:8c:18:e6:6a:d8:4d:29:95:6f:fb:17:08:e9:
a5:60:37:b4:a5:e4:eb:e4:13:e5:50:e4:04:a7:a3:
01:12:87:e6:47:1d:d6:1c:df:85:07:c6:04:62:b2:
70:7c:3d:78:32:70:55:35:7e:a1:5f:a8:e6:bf:ad:
22:d6:70:26:96:86:a5:bd:dd:f9:31:04:c6:32:9f:
2a:f2:aa:ae:41:f5:9d:36:5f:e0:74:4b:98:e6:aa:
d6:63:fc:b7:d7:55:fd:86:a5:37:c2:28:db:14:cf:
b0:0e:39:a0:1e:c8:59:91:5c:26:3f:0a:3e:a0:78:
10:4d:83:78:17:92:65:0f:17:c7:a6:cb:c1:e1:4f:
31:40:36:54:7a:1b:64:0d:2a:89:68:c6:80:5c:ed:
a3:98:c4:38:5f:b2:39:0b:a8:fc:17:4b:91:fc:c7:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:64:40:AE:AF:2C:A8:83:7D:32:F7:3C:F3:A5:3D:03:96:F2:2D
X509v3 Authority Key Identifier:
keyid:82:69:05:D1:C1:16:8B:2A:66:07:09:AD:B2:0F:34:C6:E4:C0:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmkF0cEWiypmBwmtsg80xuTAPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fc282c-cd7c-435a-aab4-b25e9dcb466e/1/gmkF0cEWiypmBwmtsg80xuTAPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:32:c1:ab:0b:cb:23:e8:44:a5:e1:57:1d:b0:68:72:69:f2:
27:24:2b:ae:85:c4:86:3a:ba:a7:a3:f7:d3:a5:28:43:97:74:
18:56:ff:b7:fc:4a:f4:8b:4a:d0:77:54:09:65:2d:df:d6:23:
0d:45:73:3c:40:b7:70:b5:bf:7b:b5:7d:b4:78:ce:73:9f:39:
05:dc:39:52:3f:2a:af:6e:a7:25:6c:a5:6f:4d:d8:9d:0b:df:
f8:a0:ca:74:77:da:7c:7d:10:2b:d8:04:ca:9c:51:4d:44:09:
78:69:c1:d4:8c:08:ae:90:5a:cd:c1:7b:e1:b3:6d:6d:0c:c3:
a9:8b:c4:45:41:a7:4a:48:31:3e:25:61:26:4f:95:86:3e:00:
60:a6:fe:e9:20:24:a8:4d:05:c8:9e:cc:df:94:5a:a7:f3:6e:
7b:7c:8b:60:7c:5d:13:6e:65:5f:a5:28:d4:7e:a9:16:93:ec:
4b:5d:7a:6b:7f:4a:6f:0b:66:1b:68:aa:ba:aa:04:a1:25:ab:
e6:4d:36:7c:09:2d:c2:96:6f:e6:f2:fb:8f:8f:17:43:8a:0e:
18:4a:8f:43:1a:44:e4:c6:80:4e:00:a9:91:eb:21:77:53:de:
24:9e:b5:b4:34:89:5b:50:a1:78:84:e9:e3:ab:30:eb:d2:44:
2d:16:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:24 2025 by rpki-client