Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File: gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier: H3ULJu2JyyU8M+D4EnvIWD4dhQNvs+jIO5SBRo/7XU4=
Subject key identifier: 74:9F:2C:3D:D2:E1:13:F5:0A:10:E9:EA:A7:0A:B3:45:91:6A:20:12
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer: /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial: 0194BCE085755303325ED1E07B2C2AE80943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number: 145A
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: 27V8sJJwgIzO1qcIVY_-DZZvf_M.roa (hash: exmmu8c+uCsi0tyx4soqeQL+p+Bunr8jhKFYebbB13s=)
2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: ExKSqK+pD81rQHVl6q1Bj7NmFMdJ7f2XKf4HXf7GDh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:75:53:03:32:5e:d1:e0:7b:2c:2a:e8:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=749f2c3dd2e113f50a10e9eaa70ab345916a2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:05:e1:5c:1c:ed:bb:c9:06:25:f2:bc:37:
0b:bf:b2:4a:ab:03:5b:57:80:01:12:28:cb:4c:fb:
1c:09:dc:bf:f9:5e:6d:f2:75:cd:49:f1:43:a2:fe:
cc:ea:0d:8e:6b:87:dd:7d:6f:5b:ec:b2:de:da:cc:
5b:4f:5c:96:9e:17:41:7d:77:7c:82:55:84:46:ad:
b9:2f:a2:29:ee:8f:30:58:6b:ca:31:dc:fd:b9:3c:
9f:15:d7:4e:dd:c1:9f:90:f9:91:3d:19:ca:fb:07:
be:26:04:8f:5a:eb:8a:5f:29:80:20:ef:fc:74:c5:
bf:97:bb:b0:1e:8c:2a:6f:1d:31:db:49:5f:e9:b2:
a8:58:10:01:e2:3c:fc:ae:5b:04:02:bf:62:d4:f0:
f8:e7:c6:21:67:d8:5e:b4:c4:1e:dd:dd:75:01:d5:
af:51:05:41:bc:07:56:a1:6c:ec:66:57:74:ba:92:
7f:1f:1b:d2:19:08:43:2b:4b:39:05:25:33:1c:28:
3c:af:9a:4d:b9:fa:58:13:bf:fc:e1:24:bd:bd:0d:
91:fc:66:17:de:29:b1:d5:d0:e9:c4:18:7b:70:b0:
79:a3:7b:cd:f5:a2:2b:c7:39:19:aa:a4:79:2c:e8:
35:78:ee:1d:a1:ca:f4:6c:4f:02:2d:3e:74:42:3e:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9F:2C:3D:D2:E1:13:F5:0A:10:E9:EA:A7:0A:B3:45:91:6A:20:12
X509v3 Authority Key Identifier:
keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9e:ed:fc:5c:37:77:bd:b6:2b:ab:cc:2b:9f:f7:92:37:c3:
5d:16:b7:5a:6b:e8:1a:dd:69:a9:5d:26:43:fa:77:a0:49:e9:
10:b9:45:68:d2:88:48:74:ca:60:ac:bc:22:52:a6:2c:4c:22:
19:62:cb:9f:38:b1:b2:94:f4:a1:81:98:cc:ea:ce:dc:5d:4b:
6a:32:71:80:69:27:9e:cb:90:cb:d1:45:79:61:2c:d6:71:00:
09:16:e3:2b:b7:44:d4:f2:b9:2a:8d:13:c2:2d:91:0e:44:76:
29:20:2d:29:d3:a2:6c:37:75:24:7b:7c:cb:ed:f0:9f:7b:c1:
be:6a:98:57:9a:74:96:e4:e1:58:78:c4:f8:ab:5c:2b:c1:8a:
00:a5:ce:a1:2a:38:c9:0d:0a:db:87:54:35:0b:f9:18:33:ad:
43:57:04:e1:d0:52:ad:25:7a:13:e2:25:b0:d7:a4:8c:d7:5b:
69:1a:74:20:36:b6:bb:fa:a3:cf:16:95:ae:2d:95:22:71:db:
8a:4d:35:49:36:36:ea:e9:8e:83:52:a7:f1:3e:6f:78:8b:34:
f3:4c:dd:ce:33:80:9b:8c:f4:c9:c4:4a:f1:f4:69:f6:0b:20:
ae:82:fa:fc:76:fe:8e:e1:d4:17:43:1e:01:d6:19:92:db:1b:
0a:23:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:47 2025 by rpki-client