Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
File: gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft (raw, json)
Hash identifier: 0l9SYClpvaYrxf8oH4/iXiwLT0J9khrFnmXQQsYLqWk=
Subject key identifier: 6E:DC:AD:E7:26:6E:79:F9:9A:96:61:5D:DB:5F:95:4C:3E:CC:CC:DE
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0194BBCDEEBC9951A92A38657ADD1E59493D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
Manifest number: 1074
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: S4RJSJ4i1MYPTUUxtCmA5ZX4Czc.roa (hash: dO0JekyTej4OeFDJ56mfA43cKJlW68IvyEqWkG9TsF0=)
2: gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl (hash: BhOZVkXJ3HMwHXbySTFE32v2Fz3ShHL40E1PO1SdsVQ=)
3: oICpP-Q_PLyVnvdAV2VhmetD0KU.roa (hash: m1kg9eS0Gm6DACbj0bQUXbsWOvls/kNIhGkM6VQRNuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:bc:99:51:a9:2a:38:65:7a:dd:1e:59:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=6edcade7266e79f99a96615ddb5f954c3eccccde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:55:76:9e:65:ba:32:64:c9:40:21:95:f6:
49:da:66:9d:d3:50:58:09:ec:55:0b:d9:08:93:7e:
1b:b3:64:89:75:fc:c0:ff:5c:46:22:d3:bf:d9:bf:
01:74:61:2b:ce:dc:2f:e2:3f:49:c8:2e:80:4c:19:
91:96:f9:ac:e3:b1:04:fc:7c:d3:ce:ed:4c:c9:30:
aa:85:10:0d:71:6b:c5:2a:7b:99:c5:32:5b:77:dc:
96:ec:c7:e4:aa:2b:e6:f9:78:7b:da:20:3a:d1:54:
59:1e:80:04:2e:1a:a9:d7:41:6a:ac:77:a4:3d:ce:
05:be:06:8a:cb:7c:ba:ab:c1:d2:29:0e:cb:f7:78:
d7:84:44:dd:cb:b6:77:fd:45:62:fe:88:24:7e:65:
17:73:55:15:35:4a:43:9d:c3:e1:70:6e:be:be:da:
77:0a:e0:27:16:44:62:b1:34:26:ca:53:7f:9b:ba:
48:24:e9:3c:ca:e7:ab:22:46:af:22:fb:5b:a4:cf:
17:b3:b5:c7:b8:d2:88:52:46:00:e7:1a:8b:b7:2f:
70:6c:0a:94:c2:b5:02:fa:7f:ff:5c:d8:4e:80:55:
7c:94:7c:cc:24:ae:75:6a:63:e7:e2:53:06:4c:c6:
14:24:ae:8e:f8:3d:27:7b:5b:e0:ce:2c:71:ac:27:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:AD:E7:26:6E:79:F9:9A:96:61:5D:DB:5F:95:4C:3E:CC:CC:DE
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e2:87:f6:0a:f6:c8:cd:d5:38:ae:0c:24:e7:b5:ce:fa:9f:
4e:de:25:fc:01:49:a7:62:41:83:b8:f1:62:bd:8a:49:3a:f2:
53:9d:3d:a0:1c:58:fb:03:2e:54:f5:e9:85:12:88:c9:69:85:
11:35:6f:d9:44:01:02:7d:5d:1c:92:d0:4d:72:63:9b:46:e8:
f2:38:5b:a5:f5:a1:ba:d7:8e:f5:18:ec:11:8c:20:ef:79:4a:
21:1c:21:75:a4:20:19:35:81:f5:c4:40:d7:05:b8:00:44:0f:
6b:8c:7c:6d:ae:90:f5:f2:15:9f:5f:af:38:11:c2:e6:a1:10:
5e:67:f4:14:fd:52:d7:86:a1:2d:82:16:01:eb:a7:51:05:f9:
ee:4b:df:ec:69:e5:b7:2e:3c:03:19:c7:6c:74:71:d0:ed:05:
f7:18:e7:d0:9f:ed:a3:2d:9b:61:e7:ac:70:a0:20:d9:b0:e7:
4f:ff:32:e1:5d:96:61:58:a6:86:f9:d1:a2:7d:34:aa:b6:39:
4e:fd:8f:cf:83:a0:45:d0:2f:48:87:94:16:d3:0a:35:30:6d:
a9:7f:83:8d:38:1b:7f:35:e4:7c:23:b8:9c:60:ff:23:47:64:
f9:b5:9f:b7:f8:d3:47:e2:f6:35:41:03:e7:72:67:d5:29:37:
3b:aa:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:30:58 2025 by rpki-client