Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
File: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft (raw, json)
Hash identifier: sGkg4Rj7RD0TDgRxkcekkaigwHKwTE2sRIctoPql63s=
Subject key identifier: 8A:28:D3:B6:3C:CC:4E:D2:48:81:E2:E4:FE:12:C7:E8:B7:8E:CD:EE
Authority key identifier: 82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
Certificate issuer: /CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Certificate serial: 0194BD4EA0F3C263E0FB12A50E58B8BFCF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: BX1QEArFlodqmaLywnr1dRzJ5Uc.roa (hash: kKzlkpnYRDUEMTdKdAcgkbHriGGxFSkfVVWtck+oICw=)
2: gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl (hash: r6sxlJd1nFRlCgvrydv50Zccp6+4dQislUDjo+CkY4M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a0:f3:c2:63:e0:fb:12:a5:0e:58:b8:bf:cf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f08f263c37459b5fd6fc06fd9f0e5f6d622759
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=8a28d3b63ccc4ed24881e2e4fe12c7e8b78ecdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:4f:4a:c8:44:ff:bd:01:fb:dd:f6:38:b8:
cc:54:de:bf:b7:34:c0:b1:06:83:eb:2a:7f:47:32:
fd:27:32:e8:13:83:04:62:8d:47:da:55:9b:9d:35:
b6:93:c2:9a:34:19:3c:6a:56:bc:6f:e9:9b:7e:b7:
87:e4:97:10:f4:da:86:50:e0:66:b8:af:e9:16:81:
85:5d:45:50:d0:a8:bc:d4:7c:fb:68:be:bd:35:d5:
05:db:c3:6e:b1:6e:c1:5e:33:0a:29:70:65:21:ab:
20:5d:71:30:5a:69:6d:b8:24:ef:e9:53:de:7b:6e:
2e:ed:e8:ad:ff:a0:b3:1f:75:22:f0:3f:5e:20:7b:
94:9d:33:3c:9c:6e:30:19:53:91:26:bc:8e:5c:ad:
3c:4b:9f:f8:15:b5:16:1f:e7:a1:51:e4:99:ea:5b:
b0:c5:26:cd:19:e6:fb:aa:6b:d6:3c:a9:ec:6d:75:
62:c1:b5:5e:c3:a6:f7:55:c2:46:55:10:d5:43:9c:
4c:1b:35:74:4a:97:e4:0d:a0:41:bc:96:ba:fe:bd:
0c:b8:b0:2a:c4:ed:ee:d1:c9:2e:ec:27:fc:3c:db:
eb:8a:bd:e6:b3:92:b7:c1:52:fc:a1:87:43:41:5f:
f1:b1:f2:52:b6:7e:a6:b5:1a:28:b9:47:f4:23:f2:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:28:D3:B6:3C:CC:4E:D2:48:81:E2:E4:FE:12:C7:E8:B7:8E:CD:EE
X509v3 Authority Key Identifier:
keyid:82:F0:8F:26:3C:37:45:9B:5F:D6:FC:06:FD:9F:0E:5F:6D:62:27:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ccf93b-8ff9-4eb6-8c34-4aa3c3dd4d6b/1/gvCPJjw3RZtf1vwG_Z8OX21iJ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8e:b4:7a:34:f0:04:35:da:80:79:5d:b9:42:22:f5:cc:80:
24:df:22:9c:23:ec:92:b3:5f:60:77:93:1a:e7:d6:1d:88:17:
8d:26:a8:2a:01:fa:95:89:fc:1f:4e:f3:07:61:e4:40:16:ea:
9f:7f:98:7f:00:66:8a:41:d1:57:9e:d2:d9:9e:0c:98:33:62:
11:d1:23:03:5e:c2:77:a0:e8:51:e6:2a:f1:9f:f9:10:0c:9a:
11:a6:5a:58:97:8d:67:2f:31:57:1e:ff:d4:d7:b3:5f:9d:a5:
c1:69:97:b5:aa:64:c2:c2:ba:cb:a7:e0:b9:b4:fe:3f:ed:4f:
16:e5:a0:f6:8c:66:aa:c6:b5:35:d2:68:11:6a:c0:67:47:0f:
27:43:f1:47:f1:79:f0:90:5a:d0:38:3b:a3:02:c1:2e:25:77:
62:29:ae:93:4a:ee:b9:87:12:6f:b7:ba:9a:e0:1e:dd:0b:62:
a9:1d:9f:e8:aa:69:51:35:df:17:6d:54:79:68:82:eb:52:88:
e0:bb:45:ca:03:73:ac:d9:76:d0:ba:98:7e:01:d8:2b:4f:f2:
84:3a:96:e4:f1:03:9a:1d:c3:cb:a8:ee:89:5c:e1:3d:dd:51:
17:0c:a2:56:a9:ab:25:3c:cb:a7:4f:f8:93:3a:b5:cc:c3:e8:
d5:1a:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:20 2025 by rpki-client