Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
File: _gdsTrghmCibE_9ShZOQfTIU1kg.mft (raw, json)
Hash identifier: Xwqt31LgxG5TYrpVL6jj6NMrE8CsppOszBaaV2dnruY=
Subject key identifier: BD:97:7C:3A:40:41:C2:EA:16:9E:2F:34:C5:31:0B:AF:8E:64:9A:B4
Authority key identifier: FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
Certificate issuer: /CN=fe076c4eb82198289b13ff528593907d3214d648
Certificate serial: 0194BC3C707BA5D7BC509A53D402CB2AB136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
Manifest number: 0775
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: VfeIgjz0AxDDzTkQTX5oI6SFRHA.roa (hash: DxNlqxJB1dj664CEq4HV8OObj2p+8QssDiaq98KmVj4=)
2: _gdsTrghmCibE_9ShZOQfTIU1kg.crl (hash: DU3ZObPAXEvwdbh3zMUyUGcqtJW/gr808za1bTb9w1U=)
3: kf6StMkwG23V9ls9smnXkUH-c_U.roa (hash: 2gWZsR5gKC4c6paVczIP5ldxDt0ZMc2sEfNeECKiQpI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:70:7b:a5:d7:bc:50:9a:53:d4:02:cb:2a:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe076c4eb82198289b13ff528593907d3214d648
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=bd977c3a4041c2ea169e2f34c5310baf8e649ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:4a:a3:e7:74:7b:f4:2e:0b:c6:83:45:6b:
28:37:cb:04:9e:a1:02:80:39:56:97:49:4f:73:80:
19:15:48:6f:67:c2:3d:17:2f:f0:83:2e:7e:7e:91:
3f:69:98:fe:3f:18:9f:4b:4f:71:05:e4:e9:07:41:
54:34:cd:ca:73:fe:71:ea:fa:bb:c7:08:f3:04:84:
75:49:08:ee:52:85:69:c8:c8:66:38:97:72:34:97:
3a:77:7e:cd:36:8e:8a:50:43:cc:3d:27:2a:29:fd:
06:3f:a0:d0:37:aa:0c:c6:7e:db:c1:4b:72:6a:c1:
55:47:67:8b:d1:6a:49:cb:71:58:48:c2:83:47:43:
15:a6:14:7d:b3:53:bd:0b:d6:be:ed:60:06:9d:4e:
29:a2:1a:06:77:30:b0:ab:bf:9d:56:dc:08:41:52:
80:58:2e:fd:a2:1b:81:47:34:71:de:12:9f:f1:87:
fa:31:e8:dc:dd:6c:f8:a8:18:05:ef:0e:c2:54:08:
00:68:e7:ab:82:a3:2d:70:cf:db:96:00:56:fb:53:
22:05:4c:a1:c7:4c:cc:51:7a:65:19:eb:76:69:08:
25:66:7d:37:b1:5d:a1:e0:c1:35:6a:aa:16:4e:43:
94:e9:11:b9:ea:ee:5a:dd:de:35:04:85:fa:f3:e0:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:7C:3A:40:41:C2:EA:16:9E:2F:34:C5:31:0B:AF:8E:64:9A:B4
X509v3 Authority Key Identifier:
keyid:FE:07:6C:4E:B8:21:98:28:9B:13:FF:52:85:93:90:7D:32:14:D6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gdsTrghmCibE_9ShZOQfTIU1kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e47b7d-360a-4a41-b76b-367a411f9ec6/1/_gdsTrghmCibE_9ShZOQfTIU1kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:33:e8:d9:39:75:c3:c1:cd:91:e3:3f:0a:be:d8:e2:4c:0d:
18:06:a2:38:b6:28:b6:0e:1a:3b:34:be:af:46:93:46:bb:b6:
76:7d:87:ab:21:0c:a3:7e:39:85:05:dc:8c:8f:48:4b:61:f8:
8c:08:87:58:ef:59:c0:fd:a7:87:1f:89:ab:56:7b:d0:3f:b5:
0a:32:1f:6e:39:85:f4:e5:52:8b:80:85:ea:86:5c:ea:0c:80:
b5:f0:d6:b5:f4:31:aa:b1:dd:bb:58:d5:1f:fd:1d:7f:fe:da:
f0:5e:70:83:87:86:f6:f1:41:ff:a9:a4:4a:8b:32:74:6d:74:
79:c5:fb:3b:a2:08:e7:a8:c4:99:91:0a:c0:93:6f:0b:06:07:
9c:69:c1:1a:8f:9f:29:69:34:74:42:22:6a:0f:6d:ae:56:06:
c1:64:5f:18:e4:1c:f9:4b:e4:24:22:ac:28:d5:ca:13:d8:f9:
1b:8f:ba:b8:f5:71:9e:47:41:19:f4:5f:68:a1:ac:66:d1:ff:
f4:14:0e:bd:0d:d3:be:5c:b6:82:b3:83:63:f0:cb:61:44:7f:
af:4e:c2:7b:60:3f:4e:f6:10:7c:63:b7:c1:21:75:5e:0b:df:
a2:b3:2a:f5:0f:5a:3d:12:02:4c:fa:76:d0:0d:b1:6f:0e:05:
1f:6f:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:14 2025 by rpki-client