Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
File: gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft (raw, json)
Hash identifier: /Ze/NiJviZA69mVv0oDJH49zvdMWGK0aYJpdr2H5d7E=
Subject key identifier: 3D:E5:DD:30:F5:71:6C:12:CF:D6:DD:80:6A:37:9B:F7:B6:C2:7D:1D
Authority key identifier: 80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
Certificate issuer: /CN=80ab4c0945b738edda0583a274b63c1b8673a630
Certificate serial: 0194BC72DBB21A2C83A913B7A58DDF5698A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 4E8aKuSUAJGEZx4-_4p226okfIQ.roa (hash: pf8xgGvbWtDjdqLKfY5/LWfzgLwmraxV+sdu2DNs804=)
2: gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl (hash: ms3+6tTFsmvB6ZLypr3L7Mczg6W0Uytj30UUuNg47AY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:b2:1a:2c:83:a9:13:b7:a5:8d:df:56:98:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ab4c0945b738edda0583a274b63c1b8673a630
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=3de5dd30f5716c12cfd6dd806a379bf7b6c27d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:b7:f4:8c:8b:07:96:e8:1d:4f:89:30:1b:
5c:70:c3:83:13:53:3d:d0:16:7c:49:ec:02:10:ef:
a2:4e:f1:b7:53:9f:f8:08:49:b1:75:70:be:7c:53:
ba:26:a3:21:03:31:e9:3d:30:80:57:aa:6e:9c:f5:
6e:f3:aa:02:79:6d:0b:d5:10:c6:1a:49:1a:de:f4:
9c:47:48:f0:f2:99:7e:fd:69:11:86:64:8f:da:1f:
34:13:da:40:2e:bf:ac:81:47:d5:3c:64:bc:af:64:
7b:99:a6:20:2e:10:a0:c5:8a:b8:ca:0d:93:c4:03:
c1:80:24:47:14:ad:82:ad:7f:62:29:ee:ef:45:b7:
ed:15:ad:b0:53:73:b1:48:70:b2:e4:d9:b4:28:e2:
be:4c:2a:00:c8:ab:d6:e5:f7:f4:f3:8a:ec:cc:72:
e7:ac:57:3a:2c:92:b4:d6:16:5c:f9:a9:48:b4:de:
2a:0d:4c:e0:e6:7b:01:4c:93:35:d2:5a:da:cf:9e:
db:f9:2c:5a:74:bb:24:c0:61:50:29:51:f7:d5:84:
20:d0:b8:4a:3c:ba:79:35:6e:23:da:78:c7:d2:29:
f4:ab:06:de:a9:f6:d6:a0:6e:49:b5:0c:8c:b9:6a:
cb:07:ff:68:ba:88:0a:59:b7:fb:a5:19:4a:d0:7c:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E5:DD:30:F5:71:6C:12:CF:D6:DD:80:6A:37:9B:F7:B6:C2:7D:1D
X509v3 Authority Key Identifier:
keyid:80:AB:4C:09:45:B7:38:ED:DA:05:83:A2:74:B6:3C:1B:86:73:A6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKtMCUW3OO3aBYOidLY8G4ZzpjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f6fee6-c0a2-4a03-a981-f5fda0ea300d/1/gKtMCUW3OO3aBYOidLY8G4ZzpjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:de:79:b5:07:e1:3e:fb:d9:a3:60:33:40:eb:23:a0:fa:dd:
9f:5b:47:1e:c9:a0:cc:83:73:51:b8:92:fc:e6:e8:ab:98:ef:
31:83:bc:04:68:98:dc:e0:d6:ea:41:6d:0a:79:8e:bb:08:6c:
44:b0:a9:ce:e3:a8:99:5c:d9:f9:f8:5c:03:6c:a4:0e:7e:45:
7a:43:f8:82:d6:64:42:61:73:c2:76:be:4e:0e:ac:25:fe:d6:
33:7c:79:88:60:22:a8:2a:f7:56:37:ed:19:33:47:b9:a2:c5:
51:0e:0a:ba:89:94:fb:ed:66:3b:5e:bb:30:eb:25:88:af:6e:
85:04:b8:b4:86:57:bd:be:db:31:bc:5b:63:2e:6c:02:e8:2c:
62:33:fa:f5:2b:ac:6b:b7:05:ef:84:bc:e8:58:ce:63:3f:0e:
36:e6:98:06:3e:7c:08:e1:9a:e3:e4:89:0a:96:cb:ed:57:7c:
04:c7:48:d0:bf:00:94:dc:eb:ac:a9:ed:26:b2:d7:8a:b6:09:
89:81:53:b6:c6:a3:77:36:1c:3b:06:d3:35:e7:f4:32:64:f9:
fc:ae:3e:58:02:37:d6:fb:38:3d:88:3d:9d:2c:18:d8:65:96:
b6:1a:1b:bc:13:3b:a2:92:04:49:9c:5a:d0:0f:10:6b:70:28:
e1:9a:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:09 2025 by rpki-client