Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File: gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier: k9JG1EuvfQJE8M1F/WVIJMzijx7uqgiTTXjaZ+kM0PM=
Subject key identifier: E6:E1:61:B1:A0:55:44:08:9E:68:72:14:E4:26:14:56:26:5F:04:16
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer: /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial: 0194BC7321F2A2378E5CAAB51379B70F3C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number: 094E
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: dXrsVVz9Z/QoVC0f+R40FFEfGJUGsSqU3eVSXmeVNas=)
3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:f2:a2:37:8e:5c:aa:b5:13:79:b7:0f:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=e6e161b1a05544089e687214e4261456265f0416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d9:5f:da:75:b4:08:19:12:e2:bc:9e:49:75:
be:cb:31:31:71:2b:ea:53:71:a0:af:7d:c7:29:36:
63:20:75:4b:3b:b8:5b:18:d5:8b:c2:8a:05:1b:7e:
82:06:41:f3:9b:1a:f1:74:cd:25:59:2a:1e:7f:37:
21:f5:52:70:0c:11:2b:8f:e6:0f:81:b0:9b:31:9c:
90:25:dc:c7:48:a1:6f:0b:ee:e8:75:0d:a8:6b:6b:
4f:87:9a:1a:42:c7:8f:68:6c:99:8d:b2:de:45:4c:
ad:c9:83:73:a3:95:a4:f4:58:ef:00:26:ce:1f:b4:
cf:5f:d6:bd:37:77:f4:66:91:92:84:5e:48:3e:28:
81:cb:94:59:90:8e:21:f3:9f:01:19:17:6b:a1:99:
76:cd:8f:de:86:45:49:33:de:1f:95:c9:71:62:29:
00:e8:36:c0:8f:6d:53:d2:20:81:e0:b9:f1:be:70:
7b:0c:0d:73:79:04:e3:c2:fa:db:1a:5e:78:a8:37:
5f:2c:13:cf:3b:43:f4:89:53:c6:75:bd:8e:f0:44:
cc:17:6d:a1:4e:3c:7f:1d:aa:46:15:39:ba:fb:3b:
2b:a9:59:37:6f:bf:a7:6d:b0:3a:fc:25:1a:fa:fa:
5c:66:48:d7:2f:72:8a:0f:a2:b6:96:5b:63:7b:c8:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:61:B1:A0:55:44:08:9E:68:72:14:E4:26:14:56:26:5F:04:16
X509v3 Authority Key Identifier:
keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1f:a0:16:dd:22:e5:2f:31:34:da:48:a5:55:79:2a:98:48:
8e:ca:be:35:a1:de:08:50:db:b5:5a:11:c0:c0:db:3f:8e:7b:
3b:c7:1b:7d:ee:95:38:a1:5d:2b:92:1e:43:e3:24:d6:dc:23:
da:d2:cd:28:17:46:87:2a:21:b3:ca:ad:ae:0b:03:a8:82:61:
73:ec:fa:a6:d6:97:92:14:85:30:71:72:b6:8a:6f:47:97:30:
9c:8f:fb:21:33:4d:14:2c:3b:aa:1b:30:97:db:10:4b:a5:ca:
b1:dc:54:22:fd:6b:c3:5a:22:fd:51:54:97:9d:a6:bb:1f:d4:
fc:7f:a2:ef:2c:3f:4e:fa:10:00:3c:9a:c9:0d:cf:fa:d5:0d:
3b:d7:9a:a4:1d:57:b6:66:92:ef:a9:c3:43:94:a9:9a:34:5e:
17:e0:2a:5b:2b:60:90:bf:05:f2:74:d6:63:3f:5c:56:d3:20:
1d:17:5e:ac:83:f5:dc:8b:ba:01:b6:5e:4d:4d:a6:b5:59:59:
09:ff:ca:00:4c:50:e8:80:3d:24:d4:72:81:5d:82:0b:7b:7a:
f5:33:36:8a:f1:b9:06:26:1c:5d:76:a4:f1:40:4e:95:37:6f:
8a:d5:eb:d7:4c:98:78:31:f9:32:66:d8:85:4e:a7:b6:6a:2e:
f4:ce:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:06 2025 by rpki-client