Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier: YsXlmwuBDwDgfYxYNlr4+wxtMu53UJuVYQXMRix/k0c=
Subject key identifier: 43:48:B5:20:44:B4:88:92:6A:A8:44:54:71:F4:86:33:8F:52:EB:12
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer: /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial: 0194BC04DB2BFE5C160ED4FE96C319C7CF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number: 0F4B
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: 0jR76MpCYjy4Ln/PxRPA6MN9ezKiiM4HXjL6Lg+hGK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:2b:fe:5c:16:0e:d4:fe:96:c3:19:c7:cf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=4348b52044b488926aa8445471f486338f52eb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:16:6a:f1:47:ee:60:d1:cf:60:da:68:dd:
7d:b8:92:e8:ef:b8:be:db:ae:3c:0d:7e:90:d2:f5:
6d:88:c2:57:46:da:c3:1e:b6:bb:eb:33:33:84:73:
08:dc:f7:1e:f6:c5:92:1a:45:60:2d:56:c3:79:5b:
ec:37:ce:f8:32:f1:06:ee:24:42:b9:39:f0:e4:2d:
7f:9c:d5:b0:7a:bd:9a:a9:01:97:e6:df:e8:6f:9f:
4d:bd:26:4b:57:e4:5a:e3:42:9f:e6:31:4a:9f:73:
2d:b1:4d:d7:51:fa:85:dc:b4:c9:f2:64:b5:02:db:
fa:0c:a2:79:1b:41:29:67:0a:24:0e:85:d0:a1:63:
99:db:b0:75:4d:ff:0c:02:c3:3c:0e:0a:19:f7:f8:
05:6c:6a:56:44:60:d3:3c:ec:8d:75:81:0a:05:2a:
cd:38:66:17:2b:a9:23:cd:88:7f:0a:8c:58:94:51:
20:3e:e4:4d:98:7c:5e:2d:95:1a:45:ea:5b:69:fb:
b6:32:84:3d:de:0a:11:e8:ec:ca:9d:d5:92:b5:3f:
a6:23:67:39:ad:d8:5e:6f:1f:7d:76:aa:62:a1:3a:
94:bd:7d:c1:fe:9a:b1:47:2e:05:15:22:68:c2:3e:
2f:50:82:da:d1:ae:a3:cf:14:e3:95:20:29:2e:95:
18:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:B5:20:44:B4:88:92:6A:A8:44:54:71:F4:86:33:8F:52:EB:12
X509v3 Authority Key Identifier:
keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:40:dc:b6:88:9c:7d:c2:9e:a0:e5:14:59:03:30:29:c2:cc:
2c:54:72:ca:0c:15:a7:31:ad:84:6a:f1:a1:a0:9c:a2:aa:2d:
29:b8:f3:c2:e9:06:17:61:52:f6:77:39:92:16:27:b5:7f:99:
dd:50:7f:0b:3c:e2:41:fa:c5:65:e9:b8:7a:c4:f2:cc:53:ce:
d1:9e:dd:4a:44:37:76:11:5c:9d:6a:aa:5e:04:d0:b8:c4:13:
b1:bd:08:55:30:12:f2:2e:7a:47:e0:b5:46:21:69:fb:82:fb:
e0:14:94:5f:54:dd:72:ba:98:40:2c:d4:71:fa:81:af:d9:c1:
37:1d:01:f0:a4:3b:13:1c:07:88:20:5d:56:8f:68:f6:19:e2:
2a:79:10:3d:62:e0:f2:79:48:4a:a8:48:8d:3f:9e:33:98:cd:
0b:c6:ce:ed:47:eb:47:96:a8:67:61:79:aa:e3:57:b8:f2:cd:
56:bf:5a:5c:2f:e1:ef:aa:8f:37:90:15:00:58:12:93:b2:e9:
ef:46:18:b5:5d:ef:cf:85:a5:65:b7:23:54:b6:40:84:dd:e5:
a5:fb:ea:4a:e3:a2:37:ec:23:60:65:f0:23:c5:84:da:c1:41:
cf:c5:39:bd:3f:2f:7f:4e:5a:95:e8:b3:a0:ad:7d:45:ef:5b:
80:5a:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:18 2025 by rpki-client