Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: BfiZYesgc5V97GGWK7O3pI7hha36RhXms95GEzI8OmY=
Subject key identifier: ED:0C:79:2C:F6:CC:1C:7E:6D:24:F6:B6:26:95:13:4A:22:EC:AE:76
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 0194BC3C86CDF2594E74084AF3661ED43AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: cea0OnMlpGUHd2gt+Qy0uO7YiOw0MwusNAqj6Msfmbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:cd:f2:59:4e:74:08:4a:f3:66:1e:d4:3a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=ed0c792cf6cc1c7e6d24f6b62695134a22ecae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:1d:6e:33:08:5e:8e:be:26:7a:d1:d6:ee:
1e:f0:67:51:0d:7c:76:dc:ff:c7:13:33:8d:1e:0e:
31:1e:f5:e9:61:55:0a:2b:2a:c1:a0:3e:1b:25:13:
20:d5:26:80:b4:6a:04:90:b0:06:82:17:79:3d:81:
42:29:c2:ea:98:29:cb:5e:b2:4d:1d:b1:f9:bb:2f:
dd:95:d7:94:0f:f8:04:3e:88:97:c9:e9:4e:76:37:
d3:4e:6b:85:02:15:ea:b8:9f:1e:8a:61:9e:bb:bb:
b3:17:59:14:22:40:c5:cf:0f:61:8c:cf:be:c4:46:
85:c6:93:fa:14:bf:b7:25:0f:78:c0:ed:0b:31:96:
80:11:19:3b:e5:38:44:7f:4c:c6:d6:f7:d4:75:62:
2a:d7:86:8c:ca:b7:4d:86:3f:ed:6b:ee:58:64:f2:
4c:44:bf:d5:17:08:55:c6:59:3d:5a:81:a5:2d:26:
09:5c:60:77:1c:9d:7f:d9:bf:66:0d:e0:97:18:4b:
01:fd:37:6f:b1:5e:50:c3:e3:27:6c:c3:2e:b3:7a:
df:ff:43:25:4e:de:65:32:6c:85:04:c8:c1:ad:3d:
c2:dc:e4:32:61:ed:85:6f:0a:33:39:73:e3:9c:ff:
47:27:7d:75:22:7d:ba:bf:3f:c5:c1:87:8e:d0:fe:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:79:2C:F6:CC:1C:7E:6D:24:F6:B6:26:95:13:4A:22:EC:AE:76
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:e7:97:b1:61:1f:4b:ef:01:68:21:c5:96:56:ef:92:44:
89:6d:fb:80:5d:3e:f6:29:61:3c:2e:3e:92:07:39:51:bf:38:
e9:cf:d6:ab:52:f7:46:e1:98:fa:2d:fe:e5:6e:7f:19:fb:cf:
3e:cf:13:53:ce:e7:8d:78:43:cd:f2:16:58:8d:46:9e:a6:be:
c2:4d:9f:cf:39:e8:a3:06:98:b4:b4:3f:7c:f3:f1:b5:b0:a9:
0a:18:5b:13:df:6a:65:db:3c:fc:b0:1d:f4:d0:c3:5b:93:0d:
f1:aa:5f:02:16:06:d6:b6:5d:2e:01:f7:05:e0:58:cf:07:37:
60:10:7c:50:0d:7d:26:23:8e:20:9c:09:ad:ab:93:cb:ea:94:
da:64:27:c9:f7:02:c6:c3:f8:73:87:eb:00:99:4e:3e:3d:1d:
0e:5d:f5:4a:df:0b:4d:65:a0:c6:2f:f7:e6:3c:ad:46:63:e0:
87:63:9d:78:3f:a7:92:73:7b:e7:7c:c7:1f:51:d5:9e:bf:bd:
fc:75:50:04:5e:85:7e:43:e8:36:88:1c:59:6c:28:fe:ac:93:
ac:87:7c:4d:c8:ab:53:d3:16:af:7b:c2:b5:72:70:72:0e:50:
12:a3:1c:ea:13:82:52:49:9e:98:03:0e:cf:2b:4f:e5:39:5f:
98:a3:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client