Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
File: Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft (raw, json)
Hash identifier: jbRySjTkCDsu7JGmoAmEVwCh4vCK5GdNc7qLMJHSMf4=
Subject key identifier: 60:7B:8E:EC:6A:A1:45:0F:6A:CA:63:4A:C6:03:4A:62:95:AB:E8:EE
Authority key identifier: 1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
Certificate issuer: /CN=1a9b70ef99760a0659deaefa660345a0e6115423
Certificate serial: 0194BC73249E6E44E12F41E8E444F8DCE429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: AI-SjUNk27UlWzeJbfub1LMpR_c.roa (hash: n1P92aXpjrqVVtgYbgV1MuvoAPU8jvz1Hn4J2/+sFwE=)
2: Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl (hash: a5mSRnbLE6UDbCPGO+IutHbm3USn97Jn2ltkWmRgkQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:9e:6e:44:e1:2f:41:e8:e4:44:f8:dc:e4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9b70ef99760a0659deaefa660345a0e6115423
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=607b8eec6aa1450f6aca634ac6034a6295abe8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:33:cf:78:a5:12:22:0b:4a:65:44:40:fe:
50:02:9a:8e:5e:16:9f:b8:b4:cc:ba:03:cd:c8:a7:
f9:94:95:b5:c8:40:78:fa:0a:2b:b7:d3:85:9e:b1:
e5:5d:58:ab:54:af:da:d7:73:65:f4:fd:e7:89:7d:
e0:19:1d:0a:a4:fc:06:13:60:8c:ab:14:11:6e:0e:
f6:b1:96:db:9a:3d:7c:00:ed:03:ee:e4:40:e3:0e:
7c:e8:78:bd:ad:47:6f:42:3a:a0:4a:86:2b:bf:da:
e2:34:2e:bd:c4:b7:c9:b6:a5:e4:34:81:d2:36:03:
bd:17:4d:44:aa:fd:84:41:af:66:98:3f:3a:0d:d0:
b4:89:1d:19:c1:1f:30:28:da:14:d7:70:7c:e4:66:
2f:02:63:7a:5e:25:9d:82:af:1e:51:8e:9b:b1:f1:
07:17:6a:56:84:69:b9:11:ff:b5:0d:47:dd:e2:aa:
06:d4:b3:fb:a2:9e:0a:ac:51:3f:0b:df:36:f8:d1:
70:63:f3:e7:93:cb:f0:4f:f3:07:92:f1:c9:21:46:
95:8e:66:58:d9:69:48:c7:64:ef:1f:da:49:e3:42:
fc:ee:e0:55:c8:1d:5c:77:95:f1:99:7f:84:25:b4:
b7:21:6b:b4:79:7a:75:dc:d6:e5:d6:7d:7c:62:ef:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7B:8E:EC:6A:A1:45:0F:6A:CA:63:4A:C6:03:4A:62:95:AB:E8:EE
X509v3 Authority Key Identifier:
keyid:1A:9B:70:EF:99:76:0A:06:59:DE:AE:FA:66:03:45:A0:E6:11:54:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gptw75l2CgZZ3q76ZgNFoOYRVCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c89a46-7911-4fdb-a93b-29922b2d291b/1/Gptw75l2CgZZ3q76ZgNFoOYRVCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:ab:51:07:64:b5:c2:32:92:7f:7e:14:78:e0:fb:b5:ce:
0c:fb:8b:51:88:24:e8:14:da:9f:b5:69:f2:98:29:48:35:9b:
7b:f9:0b:a3:3c:1c:16:68:cb:e9:99:dd:92:9a:45:4b:26:bf:
c5:00:67:64:15:b0:d1:bc:f6:7d:64:3d:d5:5f:09:5c:10:61:
6c:37:d0:37:89:3e:30:84:05:93:07:b5:4c:02:19:81:27:d7:
96:84:ba:b5:31:83:95:01:e8:0c:28:bc:8d:51:b9:19:5a:93:
40:49:f7:bc:73:9a:3e:71:93:73:d6:b1:d1:90:90:65:e7:86:
d5:c4:d1:ba:6f:ad:f5:86:28:71:39:9d:a5:90:a1:59:34:61:
49:a6:5f:dc:d2:2e:fc:21:65:35:d8:3e:92:e8:68:ac:ff:b1:
2c:5a:6a:d6:2f:e2:26:a2:ee:b7:4d:61:b3:e3:ba:56:04:2d:
ad:d3:12:74:1c:8b:16:be:1e:91:f1:1e:cb:9e:e4:63:44:0e:
47:d8:f8:68:5d:50:56:b7:ea:55:6f:43:ba:eb:b0:17:20:c7:
7e:3e:1c:4f:6c:2e:0e:37:d0:55:95:e3:2b:09:62:f2:5b:08:
3e:4b:90:cd:c7:8b:a3:ac:10:d3:f6:a5:48:97:29:29:e1:a6:
23:40:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:17 2025 by rpki-client