Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
File: gQacCVUbP-O6LJpuVdjgWbugsYY.mft (raw, json)
Hash identifier: JwDBR4DLPkV5cH966wSRy8TZGLa59R4NKKG/AoxqNqo=
Subject key identifier: 69:1C:FC:1B:59:DA:EA:1B:98:02:AC:F2:77:57:85:3F:37:BF:4E:9C
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0194BC3BCE430EBF76CB83A8A5045DC47FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 4S3I8iOH8dvNeoUdpR8F6wiHfZk.roa (hash: mxQZp2Bj9hP1TKo3JR4nFN0+5PMHR5qVix0IQ02MR/w=)
2: gQacCVUbP-O6LJpuVdjgWbugsYY.crl (hash: sqLaMjn4YPOfciaL8gH8BmJ4+Sl0AglCSrL6eM7Qxkg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:43:0e:bf:76:cb:83:a8:a5:04:5d:c4:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=691cfc1b59daea1b9802acf27757853f37bf4e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:0b:4d:14:40:76:de:67:e6:2d:5e:06:e8:
bf:9f:56:5f:69:c9:41:20:e7:6b:76:f6:94:09:b4:
ae:e8:e6:67:f8:08:81:d7:76:a3:c5:38:7b:5e:ac:
ab:f7:2e:f3:99:90:b2:48:ec:df:38:1b:97:5f:35:
ac:82:fb:f9:fd:2c:b2:4f:7f:a7:e7:6e:d3:1d:3e:
8f:5c:d9:ec:bb:95:b0:f8:55:78:a5:f1:1e:d6:b0:
d5:0e:e2:1e:8b:e0:15:fa:97:c9:a8:55:94:6c:20:
a7:23:13:95:11:26:27:f4:6c:50:04:d0:ec:64:aa:
fb:c3:f9:b4:8a:de:f5:da:6a:3c:91:d6:48:aa:ca:
55:85:03:93:60:d4:91:24:d4:53:f8:10:f4:a0:f4:
3e:f2:cf:50:0b:3f:ab:89:93:56:7d:a8:a2:2e:39:
db:e1:c1:27:a5:e1:73:60:fb:d2:63:98:d6:1d:ce:
d3:47:63:ea:3a:85:07:b0:88:c2:5f:12:00:7e:3e:
61:9f:68:97:f7:39:06:67:74:a2:f8:e7:1f:81:94:
7c:8c:8b:dd:e6:78:ae:b7:5f:dd:98:62:dd:60:47:
dd:f1:42:4f:12:c4:e2:48:fc:d6:eb:e0:e2:cb:32:
ef:0a:8f:52:57:e6:38:8a:5a:06:72:a2:c6:50:49:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1C:FC:1B:59:DA:EA:1B:98:02:AC:F2:77:57:85:3F:37:BF:4E:9C
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:01:88:9c:de:2e:7e:8b:cf:28:fb:11:68:63:c2:19:b6:40:
37:2d:16:4a:e5:8f:f4:00:59:79:fe:1e:54:e0:3d:e3:62:9e:
27:23:f7:be:2a:ff:0f:12:28:7e:5c:77:34:41:bb:9b:a6:ce:
76:4c:2f:e9:9a:de:28:2f:b2:a0:6e:73:37:f3:d9:ec:e4:58:
d9:47:5f:ea:ce:59:50:e3:89:f2:cc:e8:76:12:98:bd:c2:02:
83:1e:cc:ee:80:71:c1:45:4c:20:33:85:e5:9f:9e:b1:63:38:
38:21:eb:fa:18:dd:54:0a:c5:9a:66:40:2f:53:e5:df:14:8a:
5f:2e:d6:8a:6e:a8:bc:92:27:0e:2b:d1:b8:53:93:33:74:8b:
ce:aa:26:5b:8e:04:07:7b:30:7a:88:83:4c:82:ce:f4:0d:9f:
5e:36:1e:0a:07:d1:b0:00:55:68:8c:bd:e1:a0:fb:79:53:5c:
d8:67:46:9f:79:da:ae:08:0b:03:a6:7a:69:64:9f:e7:fc:7e:
14:c7:36:25:eb:b3:7c:24:a7:05:3e:89:b1:57:da:91:24:74:
ec:d2:1b:5f:ec:30:a1:2e:09:2c:e6:bc:cb:ba:12:5d:20:af:
d7:a7:6c:96:65:fb:35:e0:1c:b7:a3:87:51:6d:48:9a:7e:9b:
c9:69:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:12 2025 by rpki-client