Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File: gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier: nonhGSyBW4nJeN3qsHe97Jr2hTTnOG2rjwXMpUmQpN0=
Subject key identifier: 87:87:C7:7F:42:A7:84:23:71:5E:AF:C7:DC:61:98:D7:CD:B0:48:18
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 0194BCA9F4939A41A9E368E8A89ABAAF8364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: OpKceeLTaqKwVF+6w+3hHnm8UhDbIwmm5Fnf+uXh/7k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:93:9a:41:a9:e3:68:e8:a8:9a:ba:af:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=8787c77f42a78423715eafc7dc6198d7cdb04818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:e9:05:c0:ca:48:44:20:4e:8d:87:24:fb:
14:60:22:59:0a:b2:3b:61:2b:66:89:0a:34:55:d7:
18:99:81:32:34:40:8e:02:34:3b:c1:29:71:01:f8:
a1:e6:f5:db:17:db:a9:6b:b7:ae:bc:3e:c1:8b:6f:
b1:32:99:06:bd:21:00:7a:ac:33:ee:0a:91:df:3b:
b6:97:61:27:01:20:c5:73:8b:25:d1:14:d8:47:bc:
cc:42:3f:82:04:a0:ed:9a:60:0e:e3:24:f7:71:f5:
49:0e:8e:9a:73:e7:a4:a7:8e:65:10:dc:b8:c5:0b:
7b:a2:aa:f1:cc:d3:47:e3:c0:02:c2:d4:5e:ec:92:
1f:cc:81:6b:5b:3f:90:4a:d5:27:af:f4:81:6e:4d:
53:9b:54:f2:d8:2a:19:f1:8b:6c:dd:0b:dd:34:3b:
54:d7:03:ad:ee:7e:2c:a4:96:6e:d5:69:79:50:27:
46:2f:36:b5:8e:04:9a:6c:82:11:0d:2b:ab:52:5e:
2b:3f:7e:53:44:27:54:e3:0d:03:fc:60:b5:7c:d2:
a5:bd:5a:c5:2b:c5:78:dd:ff:db:9c:9a:db:1d:5b:
64:46:fa:13:44:10:e1:43:16:9a:22:0e:b2:07:52:
ff:1a:61:e2:49:96:97:f4:93:fe:ea:31:73:8f:45:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:C7:7F:42:A7:84:23:71:5E:AF:C7:DC:61:98:D7:CD:B0:48:18
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ab:73:f6:68:3a:f7:99:62:d2:58:4c:77:16:cf:82:91:f7:
5e:4e:f2:62:4a:87:a4:34:a4:4e:18:66:7d:a2:b7:6c:80:2a:
ad:da:ff:3a:7b:04:91:ca:9b:77:20:05:07:7c:cd:8e:66:bb:
56:ee:aa:e4:14:0d:cb:cb:34:15:fd:4e:e0:67:a2:c8:5d:f6:
b5:25:18:d5:9a:1c:b6:4d:41:d2:14:3c:4b:2c:c8:d1:3e:58:
a5:e5:5f:ea:f0:fe:b1:38:c1:bf:7a:79:52:af:23:1f:53:5f:
59:a9:96:3f:b2:d1:a2:1d:1f:c5:1b:97:4a:ba:a7:a4:ff:9c:
08:a7:7b:cc:7c:f0:41:d8:7d:31:d6:01:63:c0:49:44:a1:1b:
e4:f0:c9:3a:55:e3:12:34:99:d0:df:99:b0:a6:6c:b9:36:b3:
39:d3:d1:15:d1:4b:b2:69:ab:90:5b:c1:59:50:10:76:7f:a6:
56:fb:56:d2:5e:a9:5b:ed:d7:7a:a4:30:6b:cd:91:b9:9a:06:
ed:57:c3:dc:ca:94:10:65:2f:20:ed:8a:9b:28:68:8a:e2:f4:
26:fc:22:57:a1:28:27:e3:d5:f7:08:61:f2:ef:b1:e4:c5:56:
d0:5d:87:0c:7f:de:81:44:ad:4b:04:4a:a1:51:35:cc:6c:3f:
1e:bf:dd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:54:08 2025 by rpki-client