Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
File: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft (raw, json)
Hash identifier: GiSJE0DW1RuF0i/QV1sTKnQ4NYP36UYFnicPZaucqaU=
Subject key identifier: 0C:EB:E5:18:29:84:FC:B4:A9:E0:6B:30:BA:5D:02:36:97:FC:00:79
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 0194BD17938A44E4F8475408F4678C83594C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl (hash: lvqe2sjhBHu3+ZRLU6lxYl/TQUGwjIqPNv8RJiqL/JY=)
2: lrVdWYePrfvjN2tTsNMy_Nf4Gn4.roa (hash: twkAP7rnPOwhMAXsaX+PpZC1dZNkXLlK0+tLwfHke2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:8a:44:e4:f8:47:54:08:f4:67:8c:83:59:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=0cebe5182984fcb4a9e06b30ba5d023697fc0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:d7:04:0a:6e:b3:14:44:22:3f:bd:d1:1b:
67:7c:6a:f7:84:bc:94:b5:4c:db:f8:e0:c5:5e:c1:
8a:4d:c2:32:b5:91:24:01:59:b6:ab:4f:df:b2:6a:
69:70:94:cd:e7:05:b7:1b:72:de:93:4b:b6:6a:7f:
52:f9:97:d0:b2:4d:d7:c3:4b:e1:ea:26:f4:8c:e2:
cf:1a:5f:42:fd:26:f1:30:6c:a6:5e:96:7d:11:be:
d7:2a:e2:74:27:10:a9:8e:22:3a:5f:dc:14:ac:a8:
26:10:6a:8f:95:1a:b3:f7:d4:3b:dc:42:5c:b9:e4:
15:5a:5e:0f:ac:4c:fd:be:32:4c:68:0f:27:fa:c3:
59:2b:df:f5:3f:99:3a:57:e9:e1:86:c7:35:6b:bd:
6b:27:1d:0d:cd:7f:2f:e7:39:3c:ed:1b:f4:c5:e6:
94:5d:0b:e1:4f:72:71:7a:12:70:ae:7a:99:00:23:
08:c3:81:13:a9:5a:24:0a:8e:24:b5:70:0f:de:83:
47:4f:03:64:e9:61:ac:eb:71:ce:2d:4e:9e:40:99:
46:d4:9f:a1:d9:9b:58:2e:ec:5b:71:ea:ad:9e:94:
c1:73:3a:de:66:98:4a:3c:0b:10:1f:cd:ec:44:56:
b0:67:ec:50:8e:16:a1:3c:77:d4:1a:25:7a:02:69:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:E5:18:29:84:FC:B4:A9:E0:6B:30:BA:5D:02:36:97:FC:00:79
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:44:26:fb:05:7c:c2:6e:98:9c:67:e6:2f:b5:3b:01:3c:dd:
aa:de:a4:24:43:83:42:77:c0:f6:e8:f0:7f:3b:61:87:b5:5c:
77:32:9d:b1:f9:c4:35:48:05:fa:91:66:3d:4f:5c:c5:0e:f6:
25:17:da:59:f4:42:15:af:52:31:d2:90:4b:c6:25:3b:e7:ce:
be:1e:f5:e3:58:c1:c5:82:be:c4:82:ab:16:a0:46:84:af:9d:
fb:eb:57:4b:00:b4:68:47:f5:21:3d:50:7b:f6:08:d3:52:e4:
b5:8d:79:59:97:82:5a:45:9b:0e:48:c9:ba:d5:58:90:17:e8:
73:b9:aa:47:b4:81:cd:2b:c6:90:cd:5c:bd:9e:c1:46:52:ab:
00:18:13:29:d5:63:14:62:32:66:ac:81:5f:ae:a2:9c:ff:d6:
b8:7a:31:8e:bf:29:fd:4d:b4:3a:86:4f:4c:7c:c5:a5:c2:e9:
f0:7a:0f:ac:4f:3e:b8:69:81:7d:a6:c6:fe:00:46:ef:aa:5d:
24:32:e2:21:11:df:2f:fc:aa:ec:56:94:1d:24:c2:7f:33:5d:
05:ea:89:ac:43:55:a8:8b:14:2f:22:cf:33:d5:2b:39:d0:71:
ee:84:79:6c:bd:5b:7c:ca:ca:c3:6a:89:89:6d:e1:75:f1:70:
e3:3c:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:26 2025 by rpki-client