Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft
File: gErnaxl1-0qMurIgcYnu0gIy_18.mft (raw, json)
Hash identifier: Dl77YnFoeFVRgFRGHIVBjUihbk1jWJxOwcD1y+PHSHg=
Subject key identifier: 0F:5B:B9:B4:A4:0B:8E:C8:93:BD:96:FB:D1:F0:68:42:F6:A1:9F:6C
Authority key identifier: 80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F
Certificate issuer: /CN=804ae76b1975fb4a8cbab2207189eed20232ff5f
Certificate serial: 0194BC3BEEAD6787062F6A49D5F45B11EC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft
Manifest number: 026B
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: gErnaxl1-0qMurIgcYnu0gIy_18.crl (hash: PCq6kAU0rol3vVWdxjv0Qm/iLdvC7kMqKGgtNrn8Ie4=)
2: v3oDa-WSUoJp1kuV1a6fLuRGHQ0.roa (hash: Y4h5O4hQh1m1aEWNf7XMnqa6q5Txb+8pJ/1S7VkKt/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ee:ad:67:87:06:2f:6a:49:d5:f4:5b:11:ec:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=804ae76b1975fb4a8cbab2207189eed20232ff5f
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=0f5bb9b4a40b8ec893bd96fbd1f06842f6a19f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:0c:2a:db:ed:b1:4f:28:a3:23:63:4e:d3:
85:fd:86:d2:a9:25:d5:9a:0c:91:f2:24:cd:f1:6a:
06:4e:06:44:cb:ee:21:96:a3:4d:e8:77:e3:3d:f4:
c0:57:7c:dd:d4:ea:4c:b2:46:7f:72:90:90:81:df:
1b:e0:ed:a4:41:a0:fe:1e:a1:f2:96:84:7b:cc:8a:
14:3b:b7:55:2c:19:0a:1d:ea:02:33:73:1e:73:9b:
db:45:84:c6:50:87:c5:07:f8:59:d8:57:43:3a:29:
03:84:04:a5:cc:f7:46:3a:4a:60:13:99:e5:24:72:
7f:a0:13:d4:44:c8:9f:dd:92:b1:72:65:2e:9c:db:
9d:cf:09:37:a8:27:1c:02:a7:a7:a1:72:e4:a7:0d:
d0:e1:9e:46:b8:64:62:90:66:b8:fb:2b:c2:15:d2:
05:18:ed:59:3a:77:bb:4c:c5:5f:f0:b7:bd:fa:b6:
48:4d:77:05:a6:02:4c:22:4a:dc:b1:dd:b0:7b:83:
41:f2:10:d9:05:cb:ae:f6:7d:1f:c5:c9:c6:ce:d6:
b9:6d:67:66:bd:2b:b7:3e:ba:1e:58:93:e3:33:b1:
a0:44:3f:ea:85:d1:8c:dd:21:43:f8:a7:07:5d:34:
59:82:22:84:fa:69:f2:61:bb:f7:c6:32:79:6c:3a:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:B9:B4:A4:0B:8E:C8:93:BD:96:FB:D1:F0:68:42:F6:A1:9F:6C
X509v3 Authority Key Identifier:
keyid:80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e6:8c:2b:39:a6:7b:99:71:de:fb:c8:8c:00:d8:72:0c:51:
bc:77:f7:ae:6e:6d:0f:f5:b2:6b:09:c4:bf:40:80:fd:39:f5:
ea:83:2a:e1:14:db:0a:34:9d:8f:0f:c6:06:30:4d:0c:8c:cb:
ad:4b:a6:4c:0c:c5:57:46:18:ec:a7:b7:d7:5d:1f:77:bc:68:
96:ca:3e:d8:97:e6:55:51:69:91:9f:76:6c:33:46:d6:1e:56:
a8:e4:ce:5c:8e:b8:31:73:ff:71:07:ac:62:6f:d1:9e:be:05:
a1:f1:88:3f:cf:48:b5:ca:b6:ee:1a:9d:df:34:f2:c4:18:60:
7c:50:d4:fd:a8:d8:5d:3e:b7:21:34:db:8b:e1:c1:2f:95:a7:
b4:70:a9:4f:f7:e5:30:e9:b8:93:e6:fd:69:2f:ad:d7:1f:97:
2a:c9:00:2f:79:b2:3b:2a:d2:7b:8a:06:77:04:08:37:e8:1b:
35:25:4e:10:ee:c2:15:e3:2e:c9:5b:44:78:f7:4b:2a:40:13:
36:5e:58:24:84:88:2f:ee:96:38:55:11:b7:da:9a:c3:56:6b:
68:91:84:ba:13:5b:2c:be:8a:a5:bc:79:eb:0a:9b:ca:d8:59:
8f:90:ae:5b:f7:b7:a1:53:86:7f:59:88:0a:1f:a6:31:32:d3:
77:6e:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:36 2025 by rpki-client