Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: IBUFEa8eyJMCoF86ZEHRAaPcBypCtv1tQrM8vE/sAkE=
Subject key identifier: A1:93:68:2D:A6:42:54:C0:74:61:A0:A6:C7:3A:7F:D6:B1:C0:A6:79
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 0194BC04B04475FA03FC05A069E54808A3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0365
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: Q8iIFORrHQ7CVyF0u573RC5AZpM.roa (hash: Ui1Waa5hGdzZs2TY0/Jb8NUdFKitTzOn1OfpI/V2JIY=)
2: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: afpfdwWCnDp2LWe9ClDNXJQgeHSng7QKRBpBsZgMB14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b0:44:75:fa:03:fc:05:a0:69:e5:48:08:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=a193682da64254c07461a0a6c73a7fd6b1c0a679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:16:14:9b:b3:38:85:bf:1c:20:48:94:88:
3f:2f:28:2a:0f:60:40:a4:6a:32:0b:3c:bc:ae:95:
01:d8:c3:a0:a0:6e:27:3b:85:f0:17:f0:7a:61:0b:
9f:a2:ab:48:d3:3f:21:2d:80:9f:b5:23:93:ab:d8:
75:1d:6a:56:e9:40:f0:17:73:40:b2:6f:ea:ab:28:
f6:d5:38:b1:6c:07:2b:ea:84:6a:60:d7:db:31:12:
4b:b3:fd:c2:49:63:b0:85:7d:ee:0b:26:09:2f:28:
b4:95:fe:35:43:c7:85:70:36:a2:fa:ac:bd:2c:cf:
a9:1f:80:f6:3e:48:08:c9:fb:23:b4:78:96:60:1d:
b3:c9:34:ec:d1:4c:a4:00:1d:ff:75:2a:a8:f1:99:
dd:37:63:5f:cf:40:d0:c0:fc:33:f3:fd:2b:1c:b8:
0c:5c:a5:bd:91:21:2f:21:5f:f2:b8:36:77:04:f8:
4e:b5:cc:75:56:34:8c:7d:40:b5:fb:6b:27:07:c2:
a8:e8:71:c4:d3:fd:e6:3f:e2:1f:2c:11:f1:1e:1e:
b6:c2:5b:fe:be:8d:0f:14:6d:6a:13:e6:5f:48:93:
33:81:ee:db:f8:57:97:c5:b4:5f:92:c2:14:59:3c:
1d:f9:bb:14:8e:c2:41:e7:e6:da:8f:bc:ea:13:20:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:68:2D:A6:42:54:C0:74:61:A0:A6:C7:3A:7F:D6:B1:C0:A6:79
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:f3:7c:a0:35:3a:42:ea:91:68:e3:1c:a2:92:f0:9f:5f:
80:8f:36:50:db:c5:17:1a:ca:b1:11:7a:34:a0:d1:55:f5:0d:
09:b0:83:15:57:1b:df:b8:5c:e8:d0:ea:ef:87:ea:6d:01:9b:
d6:6c:e9:fe:8b:e5:41:e1:05:6f:c8:38:b7:bd:fc:af:4b:a5:
28:ee:00:db:ce:83:b6:e0:fc:53:31:5b:bd:d3:da:e0:c1:fb:
d7:ae:56:f2:59:7d:8f:de:42:70:fa:b7:4f:6b:1c:c9:57:22:
26:87:86:ed:56:2f:cd:cc:ff:7d:1e:49:40:af:82:c2:40:85:
22:1c:a2:8d:37:f6:2e:ee:d4:f2:5c:95:04:9d:1a:01:03:4e:
3c:11:d3:f1:54:fd:c2:8e:d5:cb:5c:f4:e6:42:4e:39:fa:8b:
7b:14:b9:05:6f:2b:a0:45:31:dd:b3:44:39:cb:30:b6:6f:16:
27:85:b3:46:a9:a4:13:47:ba:26:62:e9:57:de:97:80:9e:d4:
b1:8e:48:6d:8c:56:ba:f0:95:f7:2d:e6:a6:8d:43:b7:b8:7b:
39:aa:be:ca:2f:05:42:12:af:a2:17:f0:25:2c:ef:70:9d:b5:
20:c2:08:4b:7a:e5:f9:2d:0b:3d:30:1b:ba:f2:40:0d:95:f9:
5a:aa:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:28 2025 by rpki-client