Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File: gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier: gQSTT3hBkNN02Sb7VrahOMGoF+qt8c7q5G9+XA/6iUs=
Subject key identifier: 94:98:4E:82:AD:4D:7A:F8:26:39:B7:23:56:4B:A3:4D:51:F7:C6:74
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0194BD85A0DBCACFB70918CC4CBD634887BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: vpVfc4z4+s8Xp6hPi9GWlqL1Y/SQDDaFeYbWcsYurfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:db:ca:cf:b7:09:18:cc:4c:bd:63:48:87:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=94984e82ad4d7af82639b723564ba34d51f7c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:4b:b9:46:07:b5:bc:bc:a4:d4:4f:97:1e:
b0:ef:57:4a:0c:5f:57:fd:3d:11:e4:b7:22:2b:bd:
a2:31:ee:fd:e5:81:8f:08:4a:70:f5:23:fa:be:f7:
b1:6f:87:40:ef:9f:4c:45:94:8b:d0:50:d3:57:6d:
8c:a5:7f:ed:9d:1d:c3:09:de:07:2b:53:23:c9:2d:
3c:3c:72:68:91:02:9f:34:81:87:52:a1:d2:b6:8d:
13:a4:97:af:8e:23:ac:c0:8f:a7:62:8d:b0:b0:d8:
01:fb:78:48:d4:eb:7d:67:fc:e5:1d:de:74:b6:37:
9b:22:30:a6:04:94:ef:c2:39:09:37:49:cb:55:74:
b1:33:97:de:70:d0:48:d4:90:97:8e:54:89:f0:d5:
cd:05:5c:75:c9:9c:b0:bf:f9:6c:9b:07:49:33:4a:
88:f6:7a:9c:0c:8b:ff:57:c4:b4:7e:f3:c5:62:5d:
b0:f6:cc:db:41:ee:df:99:02:ff:82:46:49:08:2d:
5c:e8:55:04:32:d5:73:64:35:99:c1:59:a7:98:c4:
25:7a:e4:a7:2e:f8:2b:7d:24:cb:f9:59:1b:b4:c1:
c2:d6:39:34:75:b7:86:71:d1:a8:db:50:fc:58:7f:
21:33:de:80:20:fe:3a:fd:95:06:95:71:02:e4:42:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:4E:82:AD:4D:7A:F8:26:39:B7:23:56:4B:A3:4D:51:F7:C6:74
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9d:43:20:70:80:28:84:0d:54:1a:36:20:32:b9:26:11:4d:
82:75:95:30:ca:42:44:76:cb:9e:1c:bc:73:11:db:6e:e9:44:
cf:fd:e7:3a:74:96:68:e8:48:16:a8:31:bd:74:11:50:85:41:
2e:93:e2:e3:2f:a0:07:8e:eb:ab:ab:cc:a8:1f:ec:a7:aa:4d:
6f:65:ec:ba:34:eb:ac:b6:6c:d9:9d:bd:ea:19:33:9e:c5:f7:
7d:a1:95:2a:17:e7:ba:51:46:2d:cf:56:a3:c1:30:30:43:15:
59:21:9b:fd:95:10:b4:44:76:9e:ef:ff:74:e8:b9:1a:fd:da:
23:c4:1d:e0:d2:34:36:93:4a:70:78:54:4f:8a:6b:67:71:89:
98:d2:18:4c:5f:66:67:94:19:a8:14:33:cb:55:6a:2e:46:8b:
ec:b8:56:b9:ea:70:85:49:ec:86:69:4a:11:50:c3:4a:7d:bc:
e7:79:50:5b:c2:44:23:cb:ab:60:a1:3b:80:43:a9:77:1a:0a:
b2:2c:2e:f0:10:cc:1c:79:4a:52:28:74:96:6d:06:c0:a8:be:
3e:28:6e:b3:43:27:49:f0:9a:74:23:3e:0d:5a:99:88:ea:b1:
50:54:17:be:4a:b6:eb:56:5d:a4:dc:cb:b5:ae:85:37:77:65:
e0:74:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:10 2025 by rpki-client