Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
File: GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft (raw, json)
Hash identifier: r5EhFy2fwfeYw0G1SBoKpTJJNcevEo9VKgDF/w1vV2g=
Subject key identifier: 16:0D:03:15:A8:0C:F2:1C:E8:B7:AA:6C:B7:09:EB:C2:DF:B3:A5:C1
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 0194BD4E79A013E9220F02223283CB66AE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
Manifest number: 0628
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (hash: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=)
2: GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl (hash: Gyp/Zq++ruW6HzkjobdLDQUvZ2owx5xbhWBoYOj2/wU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:a0:13:e9:22:0f:02:22:32:83:cb:66:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=160d0315a80cf21ce8b7aa6cb709ebc2dfb3a5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:23:fc:85:05:a8:3e:e4:03:5a:a7:20:e2:
55:5f:8d:96:46:63:3b:89:c9:9f:d4:1b:4c:dc:87:
ae:41:87:da:33:37:10:a9:af:11:f5:f7:61:0c:de:
4d:e7:7f:e6:43:93:99:00:d3:3c:51:da:51:2c:67:
46:fa:50:e3:d0:1d:50:53:90:92:56:d3:36:57:8d:
cb:2d:bf:45:9b:b2:ab:84:61:fd:81:0b:2e:1c:3a:
1f:92:55:e7:fe:ef:80:0b:3e:1f:fe:11:58:d7:f4:
ab:c0:c7:01:a8:41:c5:b0:5d:24:51:61:69:d9:8d:
3a:8c:67:66:fd:f9:da:d0:a2:0a:57:78:02:ad:23:
b9:d9:2e:d8:61:0f:92:ca:e7:1a:2d:76:29:79:bf:
a1:9d:50:c1:f8:dc:db:42:bc:56:9f:b5:4f:2a:f2:
4e:22:4a:e3:24:52:bb:79:d1:17:b4:00:9a:57:c6:
fa:c2:f0:a8:a4:ab:c4:19:e3:0e:bc:8a:88:8a:23:
df:dd:cd:79:c8:6f:2a:a0:77:ae:74:31:23:b0:36:
8b:49:7b:cc:7c:ba:25:a1:5e:8f:dd:55:b7:eb:9a:
b4:a6:2e:ca:06:19:23:71:fb:76:eb:9c:2e:0b:e9:
7b:12:f4:06:18:33:81:ed:8f:5c:20:50:2c:bc:51:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:03:15:A8:0C:F2:1C:E8:B7:AA:6C:B7:09:EB:C2:DF:B3:A5:C1
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b8:21:7a:5f:e1:7a:25:02:c4:f6:cd:2e:ef:4a:d1:98:3d:
d5:b3:dc:98:bd:e3:d6:ea:a5:72:4b:d5:30:4c:f2:10:5f:25:
6b:31:ce:0d:8d:87:0b:c0:53:24:74:ff:a8:c3:98:f0:e8:8a:
df:64:50:ea:d0:92:87:14:c8:e5:7f:24:db:aa:6b:8e:1f:eb:
eb:ea:c0:50:31:47:cd:3e:e6:4a:2b:8a:cf:1e:90:81:1f:e8:
a3:f4:64:7a:d0:8f:3a:87:ef:81:49:c9:d5:97:6b:ed:3f:4b:
69:e2:e9:b5:5a:ac:ae:4e:f4:eb:9c:9d:c3:17:39:fc:f4:2a:
1c:12:40:90:e7:b9:5b:bb:57:f7:05:90:9f:bc:80:f3:c4:94:
9f:a9:ba:6e:da:9c:84:d9:55:b7:93:be:ea:ac:1d:91:3a:c2:
9e:e6:fb:3b:79:15:29:60:ef:ff:04:0d:55:ea:4b:fd:a2:d5:
fa:92:43:e8:25:70:15:7a:ab:b2:f6:ff:41:01:f4:27:47:fd:
55:2a:6f:fd:e2:e4:87:7f:dd:b1:d2:60:9a:f8:96:da:ca:7a:
2c:8c:5b:e4:07:b5:e8:fa:84:d8:8c:5a:37:6d:52:9b:73:38:
3f:2d:6d:e8:17:f5:d3:2e:3e:8f:a7:84:d5:56:2d:cd:5f:da:
e3:75:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:47 2025 by rpki-client