Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
File: gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft (raw, json)
Hash identifier: iXrz9REWhALgwH9zzl5TPx9nWS3U96Y2u2z66bBW+QA=
Subject key identifier: 08:B4:77:10:B6:B0:F8:A9:4B:26:44:87:4C:46:E2:D2:2A:61:B6:9C
Authority key identifier: 83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
Certificate issuer: /CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Certificate serial: 0194BC728064F56ECCAEC6C219D671571B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: C5Qw-UH6XV_4ro5rbdk-3jWZdWA.roa (hash: aPq4TUMBz8klCiNKwnIuLbD4QdlJvKpZ22r6ylx0Jvs=)
2: gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl (hash: RvEB6y/IuKMbrWIzv26K5I5isFE0xidq05b8027p3Wo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:80:64:f5:6e:cc:ae:c6:c2:19:d6:71:57:1b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83076f3ab3efaa6328f0a38fcf4a7f963004b777
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=08b47710b6b0f8a94b2644874c46e2d22a61b69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:4d:8a:17:b1:56:c9:03:77:cc:6b:fc:69:
ee:1d:4c:8c:ba:4f:3d:d3:9b:75:9a:90:b9:59:d1:
c8:b5:0c:09:3d:d1:74:53:7f:e5:00:ff:00:e3:fc:
68:2a:29:d7:a6:a6:26:1d:6f:76:b7:f9:30:be:ce:
60:47:19:bd:88:49:79:07:09:d4:10:7b:50:59:7a:
32:c5:83:f0:df:78:7c:6e:9d:e9:ec:a0:19:05:ce:
79:a7:79:23:b7:48:7e:bc:5b:ea:c2:d8:31:2d:f6:
3f:01:81:f8:93:be:70:08:d4:b5:60:4d:89:53:5d:
e5:28:6d:cc:41:be:b9:cb:bf:06:64:91:51:ed:48:
74:98:1e:52:21:af:97:b7:2c:64:82:d3:51:23:d9:
a2:33:b0:d9:e0:a5:a6:1a:f2:b6:1b:4f:e4:b8:77:
3b:0e:e7:ed:d5:40:fa:0e:a1:54:72:ec:2d:1c:d0:
20:3f:ca:90:ca:74:ed:38:2a:a0:74:76:9a:48:27:
f4:23:af:8a:f7:ee:1b:b5:9a:e2:96:3d:32:c1:1d:
77:0f:ab:d3:ff:0c:f3:bc:2f:0b:51:d3:d8:1c:76:
37:d8:2f:c7:17:dc:47:9f:66:01:bd:d9:0b:ea:85:
c5:31:fe:ed:4f:ee:a1:a3:2b:d1:8d:8d:87:49:ed:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B4:77:10:B6:B0:F8:A9:4B:26:44:87:4C:46:E2:D2:2A:61:B6:9C
X509v3 Authority Key Identifier:
keyid:83:07:6F:3A:B3:EF:AA:63:28:F0:A3:8F:CF:4A:7F:96:30:04:B7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwdvOrPvqmMo8KOPz0p_ljAEt3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b88e0c-24cf-4fec-b118-9a6df39592c7/1/gwdvOrPvqmMo8KOPz0p_ljAEt3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:79:90:10:4e:43:e6:7a:ff:fa:e1:aa:27:d3:ef:b7:24:db:
3b:9c:7c:f1:b5:1b:a9:91:62:8f:40:41:a2:73:a3:96:c0:27:
e0:f0:4e:87:42:28:bd:18:6a:76:a3:c3:82:96:28:84:13:dd:
80:82:fe:b4:90:df:41:84:43:cc:53:d5:9b:2a:c4:8e:8c:29:
05:8d:05:7f:be:7b:1b:f9:a4:d3:2e:12:14:11:06:34:08:db:
c0:1a:f4:c9:fa:0a:0a:a3:15:c9:f3:4d:58:c4:c3:6c:81:78:
ff:38:d9:31:72:7f:3f:ac:aa:90:35:63:a7:2c:9c:f7:e5:70:
33:b9:ac:93:1e:97:ea:cb:6d:cf:eb:35:10:a1:c1:0c:53:fc:
18:44:90:19:02:46:10:56:98:3f:5f:bb:9a:b3:e5:f4:af:cf:
e4:a5:6b:7a:9f:74:57:07:56:5d:ac:d5:54:0b:b7:f0:3f:81:
01:19:23:4b:b5:71:c1:f0:7b:dd:ed:39:be:1d:30:b0:f5:2b:
47:6c:c5:83:63:a4:f9:c0:8c:a7:42:23:79:c2:e2:b2:41:6a:
9e:38:8f:d9:8d:03:68:24:c2:f0:c2:a7:52:ff:ae:6d:de:ad:
6d:fd:9c:8d:6d:c2:89:57:f2:24:9c:c7:e6:d1:74:2a:e0:2a:
27:70:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:45 2025 by rpki-client