Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier: 31qsjWIXoPDTRiwAopHjeNICqPiSUP7Meys6wWM+9Bg=
Subject key identifier: 17:90:9C:B8:A6:3E:63:6C:CE:D5:0F:D6:28:29:CD:27:F5:90:AD:11
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 0194BD4E4619DBD72F81E71EE10F641A1D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: HxP0p-FaT4vxGhomxvuRmWYB788.roa (hash: F6iZh+wJSfrbzlHzCqzaLbWcjR9R/AJVXsvelepyJI0=)
2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: 6M4BjmaQpQgUwTHqXYrjBQon49/SAL2mNL9FBvc6DR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:19:db:d7:2f:81:e7:1e:e1:0f:64:1a:1d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=17909cb8a63e636cced50fd62829cd27f590ad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:83:b3:36:c9:01:08:98:7f:78:06:23:eb:
7b:54:90:a4:16:da:55:7d:3e:18:da:73:17:87:76:
9a:77:e5:02:da:ca:c9:3d:7b:46:60:1e:71:15:0c:
5f:bc:76:4b:3c:f1:2b:73:30:fc:34:41:86:cf:1b:
31:42:12:fe:21:d9:96:d8:c5:ea:61:4b:46:4d:3f:
39:e9:28:45:fc:da:11:6d:6b:ad:4e:e4:d2:cd:30:
c4:23:fb:49:7a:f2:d2:a4:8b:66:0a:6b:cb:0d:7f:
c4:ef:20:aa:e7:d8:36:3d:db:f8:bf:6e:58:39:10:
90:38:b1:6c:3d:9f:d1:34:44:91:80:48:35:05:76:
05:05:f1:45:40:5d:39:9c:8b:0c:e7:e5:ce:0a:07:
57:29:33:cf:12:7c:39:9d:60:22:7e:f2:94:c5:0f:
95:f4:1b:9d:d4:65:e9:57:a4:5b:11:85:92:f7:7f:
dd:58:a9:8e:f2:48:66:78:bf:d0:49:cc:c2:96:db:
37:d5:df:6a:96:d1:0c:5c:48:4c:c4:f7:27:12:dd:
5b:17:95:c8:3f:5e:a0:9a:2f:bd:6d:e8:ed:50:39:
53:42:1d:2a:ab:ef:d8:26:42:d3:07:e4:0a:da:ea:
17:e2:85:da:80:c3:98:e3:02:13:fe:ba:8b:27:c1:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:90:9C:B8:A6:3E:63:6C:CE:D5:0F:D6:28:29:CD:27:F5:90:AD:11
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5e:e5:85:64:19:6e:65:48:09:63:be:24:49:45:94:9a:3b:
79:99:6e:86:d6:78:e8:5a:ef:56:1c:eb:28:26:7a:6c:ba:cd:
78:00:ec:a3:eb:85:1f:75:61:bf:ba:de:94:34:44:9b:bd:ad:
09:e8:6a:06:36:fe:7a:4c:23:3d:2a:33:dd:88:57:4a:2e:7d:
bb:b2:d7:2f:cd:63:0f:61:f8:ab:1d:f4:66:9b:25:0b:a2:0f:
ec:5c:93:fe:86:39:a5:8a:6f:0c:65:70:16:67:06:b2:0f:26:
6c:29:d9:bd:d9:7e:8c:51:f0:87:a0:00:3b:a3:3c:c2:21:8a:
4c:33:58:c0:42:c5:43:d2:33:60:3b:f3:29:33:0d:8d:8c:8a:
7a:65:81:0a:a9:db:c1:e7:90:7e:f0:27:8e:4d:73:79:43:dd:
97:5f:cc:9f:08:02:f1:54:2c:55:33:9f:c9:53:4a:2e:e6:04:
d7:15:8e:2d:65:e5:e8:60:82:99:22:e6:19:e7:f4:67:a7:ce:
1c:5c:ab:0e:73:3b:ff:8e:15:b7:9e:66:51:8d:c5:50:01:24:
59:3c:f6:4a:08:82:ab:cf:0c:76:94:c1:ac:78:54:59:ea:eb:
87:7f:59:f9:77:17:99:98:94:3b:f2:f9:55:50:40:c6:9c:5b:
7b:52:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:21 2025 by rpki-client