Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: xNkTXVPtjMx/QJgiW18cOP1igZIwQz2UACbKAQyWia8=
Subject key identifier: 8D:EB:6B:85:63:9B:7C:97:BC:4B:31:E7:14:64:FF:53:DF:F8:98:15
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 0194BD17C6DD58B9E394E5625FC6303DD51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: mKE5y/0ttt4T5/Da6iaf5P7+UXAXGSMt5LYFjTRCczQ=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:dd:58:b9:e3:94:e5:62:5f:c6:30:3d:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=8deb6b85639b7c97bc4b31e71464ff53dff89815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:07:47:7e:29:7c:90:11:61:4b:53:81:8e:
a1:91:69:ff:4d:a6:40:6d:d8:da:5f:a2:ff:70:fe:
14:25:dc:c8:f6:4c:51:60:11:a5:59:bb:6d:1d:10:
fa:c2:aa:42:3d:64:e8:cb:2d:fb:c6:88:94:51:f6:
31:f6:1a:cd:18:97:62:d8:5e:12:99:8c:f9:1f:ba:
e7:c9:2d:ff:40:59:de:73:61:ba:5a:47:61:71:59:
52:22:fd:ec:0a:dc:34:64:27:b5:20:84:6a:86:ba:
1a:94:ec:26:d4:59:86:70:7e:c9:72:36:7e:97:dc:
36:90:b0:7a:34:e0:3f:58:00:37:3a:22:a2:c7:5f:
1c:71:47:45:f9:9c:d8:cb:36:80:94:b1:55:c2:cb:
e5:ec:f3:bf:80:b7:d5:fe:da:29:b5:58:e2:99:5d:
32:23:f3:50:96:49:74:d5:37:c7:91:b4:83:03:d0:
8e:66:d5:e4:d5:fb:d3:b8:87:d5:71:72:c5:06:b6:
79:aa:2d:44:0d:5a:18:78:f9:f2:9e:fd:94:4e:8b:
2f:92:34:9f:32:77:d7:55:d7:53:97:31:05:62:44:
bc:13:36:e1:d2:41:fd:69:24:4a:cb:0b:3d:5d:a0:
24:5c:db:cc:99:52:57:03:7d:47:98:4b:cb:fb:9f:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:6B:85:63:9B:7C:97:BC:4B:31:E7:14:64:FF:53:DF:F8:98:15
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cd:2f:8e:8f:d7:bc:71:24:a7:1e:96:ab:84:4f:bf:0c:d4:
93:e4:8e:bf:aa:79:19:05:f7:70:b9:f9:a8:97:d2:78:c8:81:
33:1c:f2:4c:71:2a:24:59:f4:e7:18:27:59:de:ce:0a:cb:e6:
13:7c:49:98:8c:92:1f:b4:5e:e3:2d:09:a2:fb:3e:76:ff:d2:
a3:cf:8c:1b:f1:ef:49:7f:f4:46:4a:6e:1a:71:90:da:41:be:
d4:fe:a4:39:de:a1:da:33:b9:13:1c:99:22:b8:63:43:24:c1:
11:8f:3c:00:ee:a6:05:36:bc:2f:6f:45:02:9b:ad:bc:81:53:
b0:75:91:8e:b7:b3:4c:8a:36:61:c3:f5:c3:cb:58:63:c8:c0:
2d:e5:24:5b:a5:2f:9a:14:e7:a7:54:b6:6f:7e:29:a6:36:36:
6d:f4:75:da:62:df:2f:be:4a:44:da:1d:07:e4:bb:c3:2a:d3:
fb:62:1e:8e:aa:aa:48:62:42:0b:30:28:ba:06:45:8d:d3:8d:
25:45:00:aa:3c:9d:3e:e1:0f:ca:2f:07:f5:aa:78:42:6e:77:
0d:c8:c2:92:e3:b8:4c:5f:d4:58:cd:95:2c:d1:0c:67:a8:d7:
07:0c:71:9a:b0:e4:98:e1:c1:e0:78:eb:52:8c:9e:bf:bb:4e:
09:b9:a4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client