Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: Kbza0ZUORPZVH6lycgN/mUppb3k9Xt80VXDQCJzKU3k=
Subject key identifier: 3E:E0:39:40:1C:98:21:53:2B:76:1F:7C:D2:84:B6:05:64:57:4C:9E
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 0194BC3BF99BE24F3DC98F877B58C6250097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: mRWVLtAjcRxdItpDIybDWaOo8+toKfsuj7u1Yls/lHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:9b:e2:4f:3d:c9:8f:87:7b:58:c6:25:00:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=3ee039401c9821532b761f7cd284b60564574c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:28:98:65:c6:86:96:62:4f:f6:81:7e:f0:
db:1e:1d:68:86:49:37:b6:e1:6d:54:53:4b:d7:65:
bc:80:a7:7a:05:11:2c:6b:d9:1e:bb:ae:5a:58:90:
a5:52:6d:97:bd:1d:99:88:8e:a9:a2:6b:98:bf:6a:
5c:8a:fb:ad:e1:e7:41:95:88:04:b0:7f:e4:45:8e:
40:4c:2b:0c:a8:50:4b:20:cd:03:59:99:7a:36:0b:
d6:df:8c:51:c9:98:e8:b7:73:b9:9d:57:fd:23:ee:
41:d3:d9:4b:b2:bc:63:ae:30:30:79:8d:59:94:b7:
6f:4e:dc:eb:06:22:e2:ee:87:3b:c0:cd:9c:06:42:
34:15:52:24:93:10:53:f9:45:62:26:4a:5c:5d:f0:
6d:c3:e5:cc:6b:b7:d7:e5:4b:b2:80:08:61:44:16:
e2:d0:bf:5b:b7:5c:19:c4:04:e1:78:82:09:4a:bc:
23:6f:ab:5c:70:b4:25:e8:c7:6f:7a:da:b1:14:ae:
d7:1c:ba:79:b2:5d:d0:32:65:03:8e:9d:02:10:ee:
41:7e:09:eb:dc:26:cd:53:56:7e:0c:f6:4f:95:6e:
83:12:ef:2b:e9:f6:9f:44:11:c7:7f:9c:d1:80:56:
e3:be:88:9e:83:c7:17:8d:55:00:02:44:ee:31:1c:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E0:39:40:1C:98:21:53:2B:76:1F:7C:D2:84:B6:05:64:57:4C:9E
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:73:71:86:4c:20:c6:d3:53:a9:f5:bb:95:3e:32:ef:b8:
a1:a7:6e:de:c2:95:1a:9e:dd:67:d0:c4:33:07:da:a4:fa:09:
3a:e4:6e:8f:9e:a2:42:7d:c5:ad:8f:0f:df:fe:f8:86:e9:71:
52:21:26:de:0e:6c:b9:40:81:81:d2:92:7f:df:0c:b6:f3:d3:
5c:9f:7e:70:da:16:ac:02:74:51:42:99:2e:f9:d1:b7:2a:a6:
4a:ea:85:1f:96:42:94:8c:7a:ab:d7:34:ce:88:24:ec:b5:f9:
60:3c:e3:64:aa:95:7f:c8:fb:cc:55:15:4d:c2:70:f4:7a:4c:
f2:cb:27:e1:2c:83:b6:99:bb:d3:1f:2b:bb:bd:5e:19:0b:bf:
a8:33:2f:d5:0d:95:52:47:3e:fd:65:c6:3b:b2:87:8e:f4:62:
6d:a6:b9:43:66:8b:06:9f:3d:3a:d4:66:14:ba:7e:12:98:0d:
64:d0:3a:57:8d:d9:80:45:ea:8b:5c:56:c2:8a:e3:63:b3:0c:
72:07:ad:65:73:20:94:0b:3c:40:ba:1c:b0:8e:fc:2b:c4:3c:
8c:cf:f1:b2:e8:87:cc:d7:26:0e:8c:bb:c3:6f:2b:ec:1a:41:
31:d5:c3:67:10:ff:3b:ca:2a:65:03:98:70:0e:9e:f7:66:c7:
d7:fb:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:34 2025 by rpki-client