Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
File: ggBZa784LUmLxewrP9ZTOehbmPI.mft (raw, json)
Hash identifier: 4DldEd/l+Zy4kogCAGjUVfh4NmqVoM8JDLSCy9cyWig=
Subject key identifier: 23:5D:55:DB:CE:92:E9:E0:82:B8:59:49:4C:36:B5:B0:11:48:99:F5
Authority key identifier: 82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
Certificate issuer: /CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Certificate serial: 0194BBCE956810120540A025890FFE0F0E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
Manifest number: 0BC2
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 0nNYMJ2yluQoQ02pe7IRw8NkdfA.roa (hash: GkG/6rDrk9vq7Jp2NvQPyT4My5GzjO9oZQi+bOX75cE=)
2: ggBZa784LUmLxewrP9ZTOehbmPI.crl (hash: /tDXh2/0hwKMPYX50hgiig2A0VXlR9EYcrICfjkGpX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:95:68:10:12:05:40:a0:25:89:0f:fe:0f:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8200596bbf382d498bc5ec2b3fd65339e85b98f2
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=235d55dbce92e9e082b859494c36b5b0114899f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:16:7f:be:85:6e:0f:16:1e:00:02:4e:12:
61:11:03:25:bb:4a:7d:e6:3e:02:6b:6b:4c:f3:ce:
e7:e2:42:53:c4:9b:3c:99:f1:43:6c:d4:65:e9:c7:
e3:65:40:1a:b3:7d:93:ed:26:4a:49:43:e7:f7:14:
39:0c:6b:2e:f5:43:cd:fd:6f:bb:b8:6c:3f:31:06:
82:94:8d:6a:77:2e:49:c2:63:90:8b:7a:f0:3a:2b:
64:cc:1d:82:9c:3f:e2:eb:64:c8:0d:56:6f:53:ee:
6f:a5:c2:75:b9:77:d7:95:25:4f:f5:42:16:29:f0:
33:93:50:e8:fb:7d:76:ee:30:23:78:e0:71:ef:e5:
0e:f1:f4:32:cd:ee:e1:f1:93:4c:16:90:02:f4:8e:
59:b1:56:dc:5a:11:4c:7b:fa:03:8a:d0:a5:2b:2f:
13:c4:8c:a8:d4:57:01:6f:7f:ca:9f:d2:1f:a1:8f:
7e:00:e0:61:5a:81:4e:7b:3e:c6:33:8a:6f:b7:5d:
8b:69:6e:6a:8d:2e:e9:50:ea:df:10:91:3d:b1:19:
cf:ef:36:c7:c6:27:83:1b:4a:a8:da:1e:21:11:4b:
a5:11:76:76:73:16:c0:39:4e:a4:8c:72:0c:2e:0b:
8b:21:27:67:3a:7a:ea:7e:12:ff:c7:ed:28:32:fe:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:55:DB:CE:92:E9:E0:82:B8:59:49:4C:36:B5:B0:11:48:99:F5
X509v3 Authority Key Identifier:
keyid:82:00:59:6B:BF:38:2D:49:8B:C5:EC:2B:3F:D6:53:39:E8:5B:98:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggBZa784LUmLxewrP9ZTOehbmPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/536431-9cbe-43a9-8c1f-68ad2d111bac/1/ggBZa784LUmLxewrP9ZTOehbmPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9a:64:ec:d2:d0:77:e8:f7:00:f9:1a:f5:5a:5d:7a:08:5f:
b3:fd:90:79:24:d6:1e:55:b5:91:1d:4d:b5:a6:8b:ba:b9:45:
c7:a3:8b:bf:f0:b4:e3:c3:a1:75:0d:58:1a:2a:74:db:4b:fd:
97:55:3d:dc:45:d1:d5:c6:bf:ae:d7:3c:80:e6:24:5c:e4:23:
97:31:80:22:c4:87:e7:3d:0e:c9:90:da:63:67:50:38:3f:05:
68:60:c9:6b:6b:24:90:d4:09:ed:d2:dc:55:ec:c6:96:46:a3:
43:fa:89:50:d4:de:b9:75:9d:4e:94:df:1d:06:fc:9a:da:f7:
53:57:ab:52:13:23:e1:21:d5:81:fa:6a:c3:c6:32:9e:1f:a5:
09:78:03:bf:d0:44:8e:ea:4a:83:fc:37:a6:ae:96:5b:17:58:
3e:be:0b:b4:30:54:09:a8:32:b1:45:b0:3e:6d:d4:a2:03:c8:
09:fc:71:89:fa:59:29:40:71:43:a0:27:78:5a:e4:af:c3:20:
32:ba:86:00:0f:eb:24:be:83:a0:7c:3d:fa:3f:06:09:0a:21:
09:d8:b1:81:f7:85:be:42:82:08:7e:6e:75:9d:7e:38:b1:3b:
6f:1f:2a:a4:41:99:d5:57:c1:3f:07:cf:c8:f8:49:b0:85:d2:
27:4d:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:58 2025 by rpki-client