Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: YEGWDMj1+Uq2k9srhATx32UNiJ9lHBcHKK8AG92djR0=
Subject key identifier: CB:F6:23:5A:0F:87:07:E1:D9:F2:61:91:8C:37:7C:F3:21:7A:4F:93
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 0194BC72F0327E6102D1B6175E328B1EB975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0AD7
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: F-U-cDtSSag2W1wAvfbUo3fdaQs.roa (hash: 2Ga8t3NnP1c8+shLsR913ttQ8XGLyvFZpunmc/03AyI=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: tUzfkrzg++uDEeIFwzDBzpxAF2MPpC3o9alL+YSxKVE=)
3: nLBB4UJx1LuKjpaUgbczrVtaJpg.roa (hash: HXuz+8NQ2/TBmo59S3LgADHI/PGw+l4NTTu2zBVfaVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:32:7e:61:02:d1:b6:17:5e:32:8b:1e:b9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=cbf6235a0f8707e1d9f261918c377cf3217a4f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:bd:4b:e1:87:d2:29:59:83:d5:8c:da:ef:
01:e5:f6:57:13:dd:b5:d1:53:9c:8b:3b:d0:71:70:
9f:01:f6:64:f4:7e:ce:2b:d3:b5:44:fa:37:17:06:
da:f0:04:8a:07:af:3b:9d:07:3e:fa:8f:99:22:b2:
55:60:1d:35:44:24:58:94:d8:fe:e7:4e:63:ac:c2:
33:59:0c:94:2a:0f:54:4a:e7:ac:32:ce:e7:d7:ce:
2e:8b:be:ba:75:fe:6a:9d:d3:c1:a2:52:91:26:c7:
99:da:c1:3e:8c:bf:3b:49:fb:65:27:42:e2:75:e1:
8c:eb:46:a3:2b:9e:67:b5:8b:e3:79:54:14:50:45:
57:21:7c:9f:87:1c:ed:42:b3:15:28:3f:c4:01:bc:
aa:6b:20:d1:bc:f9:2b:b7:20:49:4c:e9:a6:33:42:
73:88:9c:1b:5d:50:1f:29:80:ad:86:11:4c:eb:f0:
cd:87:f3:48:cc:ce:41:c1:08:58:7e:62:08:1f:54:
50:e0:db:6d:9d:20:82:87:88:8b:03:3c:a2:16:8e:
78:0e:04:87:61:ee:f2:a1:7f:05:ab:a1:f1:0b:c3:
a9:1d:63:ff:73:db:70:20:79:73:d8:42:b9:3e:9e:
60:95:65:c6:18:61:fd:99:d8:db:2d:da:b2:6f:7a:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:23:5A:0F:87:07:E1:D9:F2:61:91:8C:37:7C:F3:21:7A:4F:93
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:56:d9:5d:10:1a:63:02:54:40:fd:fa:70:ae:9c:8c:5a:
b9:d0:6b:b5:bc:03:83:26:3a:36:29:95:39:58:af:68:1d:02:
d4:d3:38:2b:f6:b1:af:8f:78:5d:dc:75:09:fb:0d:58:be:14:
19:1f:6b:d3:3a:3e:12:e7:7e:e2:34:cc:a5:8b:a0:0e:3f:70:
eb:44:49:04:18:c2:8d:35:5b:74:84:f8:a4:16:0a:db:b7:50:
0d:b5:a1:0c:83:d5:a0:1d:1e:cc:3e:17:52:05:de:e8:7d:46:
79:9a:f6:57:fa:69:5f:3d:d6:94:c5:8c:66:e6:5d:a3:94:c2:
77:2b:a6:42:87:97:3c:ce:c4:3a:f7:e1:07:cb:f8:66:29:c4:
7e:1d:b0:a7:4f:fb:a4:bc:80:e0:5e:8f:ca:e7:09:1f:1c:db:
8b:96:2e:28:26:fd:ba:72:10:8f:f5:11:53:b7:48:01:81:3c:
96:66:cc:98:74:a8:53:80:99:b5:1d:b8:54:c4:10:9a:c0:15:
cd:41:33:ae:4b:0a:73:74:c0:1c:8c:3c:b6:58:9d:0d:37:8b:
87:01:6e:40:66:cb:b0:75:fd:d6:cb:11:ae:f2:47:2d:b3:03:
f8:30:d9:e4:6c:c4:40:c2:c0:05:d6:34:f7:0f:b8:b8:f4:8d:
93:87:24:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:50:52 2025 by rpki-client