Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File: gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier: 9U9ji4dXu49VccgOSTOe2TAWG0ktfhay0bLvExaNneQ=
Subject key identifier: 65:D7:DB:1E:29:F8:28:CA:74:CD:0D:29:CA:1B:01:34:BA:83:D3:78
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial: 0194BD17A2944DF144975E02B938CF7B3E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: JPOXmys2L1owgsNIRiK7Q7i5r2GJPZY41VGWPYoHays=)
3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:94:4d:f1:44:97:5e:02:b9:38:cf:7b:3e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=65d7db1e29f828ca74cd0d29ca1b0134ba83d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:26:db:7d:55:ba:68:6d:24:a2:0d:b4:0c:
39:d9:7b:87:85:eb:e7:31:2b:00:b6:94:0a:0b:67:
75:55:89:e6:fc:d9:34:69:5c:3f:a5:3b:ec:cc:2d:
d2:c5:a8:96:b5:eb:0b:e4:df:dd:9c:70:f9:02:07:
56:f7:b5:37:88:a1:36:bb:28:55:ea:47:65:f4:78:
2d:81:92:ef:d2:97:ae:74:3a:8a:cd:99:47:e0:c8:
1a:21:ad:90:98:31:54:36:19:a4:da:01:8d:af:7f:
07:e3:3a:39:39:90:54:c0:92:04:91:b7:75:9f:0d:
12:c4:01:34:55:af:a7:7e:50:9f:39:35:db:32:96:
13:62:1c:57:1a:3d:aa:8b:0c:00:34:89:53:98:9f:
21:89:e8:8e:24:47:15:e4:14:9f:00:c7:01:af:ee:
fe:71:a9:a1:96:6a:79:c9:5a:cc:5e:c8:f3:f3:c3:
c3:cb:a9:0b:97:48:69:41:15:55:80:a9:08:c5:80:
91:12:71:94:4e:6c:49:ac:30:88:6b:a9:d0:d5:ff:
52:b1:41:ec:f5:ad:d1:c1:34:b7:13:37:da:5e:01:
79:3d:ff:1c:18:82:d1:35:b1:9e:1e:76:76:30:62:
6d:24:28:88:35:e9:af:02:d4:da:7f:16:48:60:9c:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:DB:1E:29:F8:28:CA:74:CD:0D:29:CA:1B:01:34:BA:83:D3:78
X509v3 Authority Key Identifier:
keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:2f:08:a7:11:a5:ea:56:9b:c0:01:bc:9c:1c:a0:9c:44:
7e:10:d8:87:ac:1c:10:7e:7e:ee:15:e5:65:76:9f:a8:52:13:
fc:4e:a8:3a:0e:1d:f5:9f:fe:19:6c:26:53:d6:65:64:47:6c:
19:3c:db:d2:8a:0d:cf:e0:c0:b5:d7:6b:a8:bf:06:7f:99:aa:
09:de:76:0e:1b:4c:06:54:8a:6b:f3:9f:e6:54:bd:6d:f4:15:
16:95:62:fb:96:89:ab:1b:00:66:64:7e:2e:7c:d9:1c:d8:8b:
d4:7c:2b:91:e2:9c:c0:58:db:2c:87:69:f4:aa:f8:23:41:eb:
7b:af:d8:6c:e8:d6:71:fa:82:e1:03:b6:2c:f0:07:aa:df:8d:
c6:db:f3:7b:43:71:2d:a7:7f:35:ca:36:bc:8f:0d:57:e4:35:
da:19:a7:99:c6:8a:6f:a4:1a:a7:c9:93:7e:f6:29:19:2e:29:
d9:37:6d:cb:3e:38:bf:2e:8f:b6:2d:d8:9c:9f:b8:a3:fb:0c:
97:68:30:51:a3:d2:6a:23:02:a3:3a:4e:f0:db:4a:ae:31:ea:
86:b8:f7:8e:01:28:85:d4:f7:f5:3e:97:91:72:0d:7b:5b:ac:
4c:10:fe:bb:b7:03:df:10:cc:b4:e2:7c:a8:e8:0e:a8:7d:e8:
b5:60:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:41 2025 by rpki-client