Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File: gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier: qnd5QshLA7gjDqGnwonlt6MWgPVQhedAn9v3yziEjoQ=
Subject key identifier: FE:A7:C1:38:E2:7A:04:55:5C:B5:B7:74:AE:3F:AB:A2:1F:16:E2:BE
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer: /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial: 0194BC72E0D56BB57A7EBD223F17B27E589F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number: 06C8
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: 7Cq1X2gwajdEvUTr+N2jvWBgrPSQwoSYqO0AND7y/So=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e0:d5:6b:b5:7a:7e:bd:22:3f:17:b2:7e:58:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=fea7c138e27a04555cb5b774ae3faba21f16e2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:3a:79:9f:17:67:f1:ad:be:dd:13:d1:1a:
6c:5b:ed:86:a4:e1:f9:e0:4c:8b:8c:3d:86:a8:a0:
fe:1c:66:cc:5c:a4:fc:a7:a3:72:29:6f:c7:ce:2c:
18:52:1a:b9:85:5c:a8:8b:a5:aa:f7:33:12:ab:d9:
24:27:f7:91:5e:b1:d7:74:93:00:b4:2c:dd:78:ee:
18:9c:29:ca:c5:3b:58:d7:dc:8b:b6:43:7c:e2:a0:
d9:06:1f:8d:51:50:a9:ac:52:b4:38:a7:e4:ec:85:
bb:30:5b:ce:7e:0f:f7:68:0e:8a:2a:28:4c:41:d9:
d8:99:d4:6f:fc:bf:07:dc:a0:83:7c:d8:e4:c2:a0:
41:3e:3f:fd:53:64:c3:26:13:f0:6f:5b:5c:69:c9:
71:d4:ea:92:1a:b8:e8:bb:f3:3f:18:28:4a:61:22:
d3:07:e0:23:30:eb:bf:4b:6f:3d:e5:a9:98:49:79:
c9:3a:d6:04:08:7b:57:5a:9c:65:e9:e6:60:f2:a3:
0b:bc:32:fa:8d:88:e9:19:39:0a:56:89:e7:b4:aa:
f1:c6:49:88:90:cd:e7:7c:c0:ff:56:2f:53:e7:fd:
49:9c:50:9a:2d:04:f9:cc:e0:6c:b6:a8:e0:01:d5:
e8:6e:37:aa:75:7c:16:c7:6f:89:d6:4a:7f:7d:30:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A7:C1:38:E2:7A:04:55:5C:B5:B7:74:AE:3F:AB:A2:1F:16:E2:BE
X509v3 Authority Key Identifier:
keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:13:3b:57:c7:c3:19:87:9f:1b:b9:d1:46:e9:ea:ec:29:da:
58:ba:90:3a:2e:c1:dc:fb:b9:9c:6e:f8:5c:f1:88:6c:9c:68:
5a:c0:61:3f:03:e2:07:b2:20:56:10:f6:19:e0:62:2b:54:f4:
f5:6d:01:fd:7e:bc:02:e8:ac:e3:e1:eb:e2:d1:b5:37:11:63:
09:ef:65:0f:f6:31:0c:44:d6:1e:e5:3d:86:27:23:eb:43:de:
6b:72:e4:95:5e:9a:80:23:c2:b5:a3:b4:91:ce:2d:67:4d:58:
29:ac:92:78:84:a9:ee:9c:bf:18:a5:f3:74:88:aa:77:91:89:
a8:e2:12:88:b3:e9:e8:23:38:39:3a:30:df:e4:48:29:04:7a:
d7:fa:fb:3a:9c:4f:4b:3e:8c:c2:fc:3f:2f:21:26:41:64:86:
a5:6d:8f:fc:3e:17:01:48:35:0c:75:57:33:cb:f2:9a:95:6a:
d8:d5:e5:0b:54:56:46:e4:28:cf:0f:08:eb:06:f0:5a:ea:4b:
b7:fc:ee:29:e9:08:77:75:33:50:53:09:6e:66:72:0d:5b:7c:
45:2f:f9:33:ed:ac:84:28:88:03:ed:60:13:0d:e2:93:ec:0f:
05:3d:d3:eb:33:11:13:c4:41:33:a3:7e:75:1d:2c:f7:ea:e4:
ec:bc:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client