Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
File: gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft (raw, json)
Hash identifier: GD95LYLyeDPTuiRniA2H6VfLPYHEBkxM20l+sHfa02o=
Subject key identifier: 4E:55:4C:CD:D8:3F:D2:BF:77:17:F9:45:44:27:A4:5B:25:ED:86:5C
Authority key identifier: 81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
Certificate issuer: /CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Certificate serial: 0194BBCDBA656B18AFFE963CAF5343996C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
Manifest number: 0CB0
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl (hash: rWzr5t978MH+gm/f5y5LhHM1L9UhrTMYIZ+DeGUupeQ=)
2: iB5EOpTCIaiDbH4uVUFoFKlmWPs.roa (hash: ZYWC197VLTfAladRXdWqQQYMFzoq9Qadj+kNALRDTVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ba:65:6b:18:af:fe:96:3c:af:53:43:99:6c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81df1fe520354dd3bb3e9264a76cf53eb07db072
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=4e554ccdd83fd2bf7717f9454427a45b25ed865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:df:ba:52:35:c8:93:1f:26:2a:71:f8:60:
81:5e:50:84:90:1e:33:82:f6:57:52:ab:82:e9:6a:
e8:f8:2e:bc:86:1f:f1:92:3a:a1:00:14:9f:d5:bc:
49:e0:f3:e6:83:85:d7:dc:bc:f4:42:c7:1e:06:55:
ad:cf:6c:1f:43:db:69:58:13:e0:20:96:12:19:7c:
32:ee:dc:06:dc:5c:fb:12:e2:d9:2d:09:a0:e3:69:
f2:0e:39:0f:c2:8e:95:c2:57:78:36:57:e1:56:f3:
d8:d1:ef:66:de:9b:2f:ef:e1:bb:a2:36:d8:e0:aa:
e9:93:b4:e7:36:02:29:67:a5:bd:f0:df:13:3e:a9:
e9:8c:40:a1:06:d9:28:f5:03:4c:a7:45:4c:d5:3c:
8f:2c:65:ec:bd:84:49:78:f8:77:c0:12:c6:22:0b:
a8:0c:63:1b:df:a9:c4:f6:55:c2:9d:62:f3:b1:0a:
ea:b5:ab:09:6b:87:0c:ed:ee:f8:ba:4a:eb:e8:7d:
9b:0f:38:e8:80:32:a7:0a:8b:09:2b:a6:aa:e4:8d:
2e:07:47:bc:05:ed:91:f4:b4:2b:10:6d:4b:28:cf:
24:73:66:9e:70:40:b0:96:91:69:bf:26:0f:c8:ca:
94:16:82:8f:2c:c3:84:96:88:f6:e6:c4:83:8c:c5:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:4C:CD:D8:3F:D2:BF:77:17:F9:45:44:27:A4:5B:25:ED:86:5C
X509v3 Authority Key Identifier:
keyid:81:DF:1F:E5:20:35:4D:D3:BB:3E:92:64:A7:6C:F5:3E:B0:7D:B0:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gd8f5SA1TdO7PpJkp2z1PrB9sHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ad975c-2011-4b9c-ad3e-53f07b1f621e/1/gd8f5SA1TdO7PpJkp2z1PrB9sHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:95:d2:04:17:3f:1d:c0:84:2d:7c:f2:6e:30:63:39:bb:14:
e1:b7:4b:c3:d9:b5:a3:cf:6d:09:a4:52:10:b8:bf:ff:46:e9:
92:e2:c9:68:be:8a:56:26:98:f9:f8:a0:35:f0:23:e2:bb:83:
03:57:f2:d4:b7:6c:27:4e:7f:ef:b1:75:b3:e6:60:d9:74:90:
6a:e7:8f:21:45:75:5c:15:49:d2:f6:22:a6:94:df:78:10:b5:
49:ab:52:0e:28:d3:f0:15:2d:07:3b:49:25:4b:3a:ff:d8:b0:
81:0e:b1:93:b4:30:12:3a:6c:9c:70:bb:59:81:29:7a:36:e9:
e9:d8:11:08:78:3a:55:1a:f8:e5:65:b3:94:b4:4a:be:ac:c8:
21:0a:37:28:3c:38:6a:db:62:71:87:be:2a:40:07:21:3f:ac:
ee:29:be:34:1c:c9:df:00:b1:53:bc:19:f5:5b:89:a5:dd:f7:
a8:4f:27:46:7f:1e:a8:74:63:87:75:4d:6c:41:ad:f2:ea:d7:
33:5a:f8:a5:e3:13:fb:c1:91:92:be:e9:4a:e6:89:b4:2a:d6:
1a:e1:6e:29:60:e8:c2:57:53:48:9a:a6:94:c3:be:4a:7f:17:
eb:25:d0:75:de:c1:18:a6:5f:62:e9:68:4c:25:a7:ca:b8:17:
19:4f:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:53:14 2025 by rpki-client