Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
File: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft (raw, json)
Hash identifier: 8Mafyl7FwLZZEqgaRABr+eQGJRvO43DBYcKl11aWjss=
Subject key identifier: 0C:E2:2C:02:1F:AD:DC:E6:1A:02:A7:4F:5F:33:30:FE:70:47:1A:97
Authority key identifier: 82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
Certificate issuer: /CN=827313247c486fe434833c09087a00a900301840
Certificate serial: 0194BD17AE184BDFFB542558AD6F84A731F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl (hash: YmN3np1zWM/TSWv95iLpQ5dmo8MlI8B9FUsRMCxUn3A=)
2: v5RCvCqHry4pLvPzMJDwat4R8VA.roa (hash: Nc/262spRPspG2StfvRWMrFBeCURy94KpD9ocUGZ6Ic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ae:18:4b:df:fb:54:25:58:ad:6f:84:a7:31:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827313247c486fe434833c09087a00a900301840
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=0ce22c021faddce61a02a74f5f3330fe70471a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:8a:d0:9b:63:92:81:c3:32:51:7f:20:29:
8c:44:02:42:90:99:6f:df:56:74:59:43:0d:00:86:
8a:6f:7c:9a:9e:7e:8d:75:d3:c3:27:3d:0e:ac:18:
33:1b:3b:88:34:34:82:a9:ff:ab:e4:ff:f9:e2:6e:
e2:13:d5:ce:97:b5:db:3e:36:c3:c9:78:b4:ab:08:
f3:be:03:74:74:11:6e:ef:ab:73:23:f7:c6:d4:0e:
14:99:d7:72:41:3f:26:60:1e:e4:0e:cf:06:cc:d4:
fe:0a:f6:04:c1:bb:de:6d:5e:26:47:10:2e:ef:c1:
11:5e:9b:b1:cb:68:04:09:0a:47:a3:09:9c:03:79:
43:70:ec:88:d4:b8:90:67:ab:2e:fe:af:bc:d1:70:
df:3e:d6:be:91:ca:4d:82:65:d6:fc:67:c0:14:49:
6b:6c:fb:d4:a5:3c:98:43:e0:3f:e8:29:b1:a8:12:
8c:46:a9:73:a8:be:bd:76:32:e4:f0:86:29:5c:6e:
9f:87:fb:38:fc:ad:36:f4:6c:f8:65:df:1c:64:1a:
61:d5:a7:82:63:53:14:c4:64:14:2b:cd:70:d6:9f:
6a:c2:d2:bf:18:24:70:a0:e9:98:f9:a4:76:9b:2c:
35:ac:c8:ee:be:86:e7:c5:6a:2a:89:6f:38:01:28:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E2:2C:02:1F:AD:DC:E6:1A:02:A7:4F:5F:33:30:FE:70:47:1A:97
X509v3 Authority Key Identifier:
keyid:82:73:13:24:7C:48:6F:E4:34:83:3C:09:08:7A:00:A9:00:30:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/85b043-36d8-4136-9835-8d477259839b/1/gnMTJHxIb-Q0gzwJCHoAqQAwGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:97:f5:fb:c1:21:ba:72:65:03:2c:43:63:01:78:34:17:
b9:19:d9:d7:1c:1a:82:21:87:84:f0:4a:79:b8:5f:2e:2d:4c:
fb:e0:f6:02:8c:94:29:e6:34:48:b4:7f:2c:77:59:85:bb:d1:
fc:85:e7:2f:45:d6:61:5a:fe:34:7c:9f:ea:a0:5a:be:2b:92:
87:96:95:4a:53:e0:92:9d:d2:4d:e8:3b:72:5f:27:c8:2e:d5:
b2:f0:e1:58:13:e0:08:7c:58:90:40:16:8f:e7:8f:6c:76:a7:
ae:6e:6c:9a:c5:00:2f:23:5b:71:ac:7d:8e:59:76:9c:e8:23:
a4:58:cb:b2:90:2c:2c:4a:df:9f:55:50:ce:84:8e:64:f1:9f:
6d:95:99:88:97:e9:31:0d:37:97:c5:b5:ea:52:11:b5:5d:81:
d6:57:3e:f3:13:5a:12:ca:17:68:e8:b5:28:e2:00:63:27:62:
16:1c:2f:17:36:3b:5a:ee:4f:29:33:9f:de:f1:31:e0:e8:43:
d3:89:28:92:78:9e:05:55:1f:13:19:97:f8:8f:57:8f:68:a5:
26:8a:73:71:b9:0a:52:48:c1:8b:4a:23:0d:3a:4e:30:98:7d:
0f:34:94:07:ca:a6:2e:b8:86:63:ad:27:cd:b5:71:4a:98:2f:
37:b5:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:57 2025 by rpki-client