Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
File: pS_GDTbii7jfFFyErKsZz6U7Alo.mft (raw, json)
Hash identifier: hZBqFMpUxQkcNcBibCdYHcy/cH3eMWhyLaOAvofmGOE=
Subject key identifier: B6:6B:91:6C:F5:8C:5C:5F:72:1B:F9:05:5D:D9:95:7B:B3:F3:FC:F3
Authority key identifier: A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
Certificate issuer: /CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Certificate serial: 0194BCE08CCC320194FE4B3C562D378699C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 1-KYSj48sD3jE1Gzvv9kFu9QJGtY.roa (hash: H4x96iKua2b3UDRaB1WSf9rakbeSZ8QQwLawXzA3kBc=)
2: kroCcDuLJiEm7WFd8GtQQzKukrk.roa (hash: C4/C9Nc89baYiSQf8o8T95z101LyK5Fm6SS+L143NqQ=)
3: oWikPPO3V0QeY0v8vBGwReraGUs.roa (hash: xHZgaltZECGHYZXkWizrY9iMMJdCdaYUNGOTHUNFxDM=)
4: pS_GDTbii7jfFFyErKsZz6U7Alo.crl (hash: eleo+xoZy7ubs/WNBbbQQOLiI07zgzkTJFFrJl5TZqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:cc:32:01:94:fe:4b:3c:56:2d:37:86:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52fc60d36e28bb8df145c84acab19cfa53b025a
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=b66b916cf58c5c5f721bf9055dd9957bb3f3fcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:67:34:32:3b:e4:9a:f3:ef:ad:73:cb:9a:
5d:7a:1a:1b:09:09:b7:d5:99:f5:8e:dc:4b:0f:85:
1e:d7:46:07:f0:38:ae:83:09:76:77:39:df:f8:73:
36:fb:c6:da:41:e0:e0:ee:25:19:dd:53:e4:a1:8a:
a6:60:22:7e:32:8a:19:2f:3f:58:05:cd:d4:bb:0b:
fa:c3:55:34:cf:32:ae:68:76:53:a4:b2:4f:58:c0:
44:fc:6b:ae:68:49:8e:8d:a3:70:1e:c1:b1:36:8f:
a5:25:d9:e2:86:9f:6a:e0:b8:7c:72:14:d7:5e:a8:
84:08:be:04:c2:0c:cc:06:81:66:6b:60:f3:b8:4a:
7d:d3:f1:52:11:6f:17:71:71:1c:1a:d5:f8:5f:a1:
93:ac:94:eb:a9:8f:dd:e2:ef:75:1f:6a:6c:f5:b4:
b9:a8:3e:a5:36:aa:1c:b0:ce:3b:f4:ca:b6:1b:7b:
03:8a:54:56:e9:ca:a7:f2:85:cc:8d:f2:b4:56:3d:
9c:d7:60:b8:65:f0:55:56:76:74:9e:e6:e4:eb:2d:
b1:34:93:a1:b7:64:2f:56:27:04:13:00:d5:b6:88:
1c:b0:fb:c0:8b:c3:74:56:13:ae:21:74:ff:32:fd:
c6:8e:71:ce:11:ff:d8:cc:da:d6:4a:82:65:db:a1:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:91:6C:F5:8C:5C:5F:72:1B:F9:05:5D:D9:95:7B:B3:F3:FC:F3
X509v3 Authority Key Identifier:
keyid:A5:2F:C6:0D:36:E2:8B:B8:DF:14:5C:84:AC:AB:19:CF:A5:3B:02:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS_GDTbii7jfFFyErKsZz6U7Alo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f0b960-86d8-4062-a597-9b4a2d5f3a76/1/pS_GDTbii7jfFFyErKsZz6U7Alo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dd:74:a6:61:e8:6f:b0:8d:19:9e:87:18:fb:28:35:d7:ca:
0a:a9:b7:66:25:39:87:4d:af:6f:18:09:71:93:a4:10:e5:94:
9a:a4:b0:15:6f:80:77:de:99:52:37:15:78:7b:6c:4d:fe:29:
19:f8:66:6a:2f:d1:a5:bf:79:98:dc:07:88:8d:e2:f9:67:9a:
d1:bc:ef:b8:42:86:c9:0a:97:d6:c5:72:50:c4:3a:66:2d:2b:
4e:dd:74:ca:d5:51:48:45:a2:47:db:bd:2f:46:67:52:4a:9a:
bd:de:37:e4:8a:41:77:ef:88:28:0d:2f:03:0b:b5:3b:db:91:
02:04:74:f3:99:b1:be:23:09:f9:5a:31:1c:f2:d9:15:9e:d7:
d0:4e:ef:c6:bf:db:ed:94:be:82:34:4c:d6:22:92:8f:c3:e9:
a6:c2:a9:2f:17:09:7c:7c:69:c5:9a:bb:aa:a3:a6:31:c9:52:
c4:1a:d9:e1:0f:71:93:e5:3a:78:6d:b1:24:cc:03:e0:b4:b7:
a5:c3:0c:e9:ba:3f:4b:63:02:8b:cc:3d:fb:96:1e:99:23:0a:
0e:4c:13:81:3d:15:62:bc:94:96:b1:c0:7c:bd:40:94:35:c8:
12:23:30:79:07:db:60:cc:a9:58:dd:f7:7c:0f:9f:0c:02:78:
b7:6c:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:19:13 2025 by rpki-client