Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: fWrqIc+mqYhoacC2L+UU3qlCVXCjgXTcsRwrYKB0K2U=
Subject key identifier: D5:E7:A8:6D:60:11:FC:0B:C2:B3:47:5B:57:AE:14:E8:31:E6:0F:25
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 0194BD8556707D16A0F10AAA5619C5000A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 1160
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: 7vr4Bae+ong+9c5VLAIxRDKYqMDJZSiyIxAfGPVF3lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:70:7d:16:a0:f1:0a:aa:56:19:c5:00:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=d5e7a86d6011fc0bc2b3475b57ae14e831e60f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:04:44:9b:b1:d3:42:43:af:f5:12:90:41:
40:c9:6b:6e:45:1e:83:21:a3:8e:38:c9:19:96:7b:
c7:09:68:ec:59:24:14:34:c3:48:39:02:70:e0:eb:
28:f6:f8:07:e4:97:02:ad:52:c2:f0:f1:47:da:8a:
25:c9:0b:10:51:5a:45:67:4a:56:39:89:56:d0:8d:
c5:1d:eb:fb:12:ff:70:9e:55:2d:ee:72:dd:d4:09:
bd:0a:eb:df:41:c9:5b:97:cc:59:5d:5c:7d:b9:ba:
08:77:d0:c4:ab:18:55:ae:9e:52:92:be:10:3e:31:
5a:4a:c1:07:7c:67:53:48:5f:01:1c:b8:bc:3c:d9:
3e:f3:02:d9:bc:e5:b7:a5:37:95:3f:4f:cc:2e:d1:
8c:93:80:85:c8:4b:9e:5c:89:9f:ab:4a:65:29:08:
46:94:af:0c:59:56:26:66:28:96:27:51:0e:66:e0:
70:38:f6:47:5e:5c:27:f2:bb:bb:4d:72:30:f0:30:
3a:55:9c:e0:39:71:51:b4:24:4d:e5:76:f7:17:c6:
c0:7a:23:ab:db:a5:bb:65:dc:de:23:e5:5e:0b:a3:
02:c0:53:ca:e5:4b:4f:8b:26:ea:bd:97:ed:7d:be:
81:24:d8:3f:7a:06:71:68:0d:26:78:97:66:d7:57:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:A8:6D:60:11:FC:0B:C2:B3:47:5B:57:AE:14:E8:31:E6:0F:25
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bf:91:dd:3d:da:52:c4:5f:2f:50:81:c6:43:05:b9:4d:11:
eb:f6:07:d8:1c:a0:e5:4c:fa:72:b2:bc:0c:da:1d:f9:8c:3f:
12:cc:5b:ee:cd:22:3f:57:0c:28:20:b3:52:a5:06:3e:76:0c:
b1:8c:44:c0:bf:70:c0:42:af:74:99:b1:58:7f:5f:e8:97:c6:
58:57:cf:07:1c:2d:a9:06:95:b3:91:32:95:03:bb:d2:d3:be:
8d:e6:24:2f:8c:84:27:96:af:03:55:e3:10:26:ef:b6:b3:68:
1d:d6:a1:0b:6a:32:d0:11:1c:9b:6b:73:d1:8e:63:39:40:24:
4c:d2:40:6e:5f:25:bf:ee:35:17:e5:8b:cd:74:23:15:7b:2b:
72:0b:0e:93:a9:10:8e:ca:24:e8:17:b0:94:6f:00:ce:f3:8f:
dc:6a:b0:ff:7f:b0:ee:13:b1:1f:32:60:bf:8d:f0:e6:54:70:
27:38:10:b2:80:de:18:6a:39:7e:41:06:4d:0c:85:6b:cc:1a:
5c:55:31:74:bc:c4:46:a8:c7:5a:1d:ec:59:34:d4:25:c6:f2:
a9:d4:82:c6:a8:b4:a8:67:2b:65:8c:ab:0b:81:d7:dc:d2:8d:
38:a3:b4:77:d8:3b:8e:1f:18:42:5d:f3:7b:d9:36:55:75:64:
d2:bb:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:45 2025 by rpki-client