Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
File: gTEkC9qnwS6BChc4vN91p0ZTC8E.mft (raw, json)
Hash identifier: 24ru+sgHf3lPXcq+Wxv50HpsshGBVB9mfQVKLaMjrDE=
Subject key identifier: DE:14:71:2E:F6:02:61:CB:D8:93:78:64:88:71:1A:F9:8B:40:BF:AD
Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Certificate serial: 0194BD4E3F1317E6657A28245088ECEB353B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
Manifest number: 0995
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 6BQqkGrM3gw54Pj0HSmQY8wMCck.roa (hash: Ar7D9TbLcSVMAE2S4iadlofqY6yoHjuB0ZjyXAJSQDg=)
2: gTEkC9qnwS6BChc4vN91p0ZTC8E.crl (hash: Ixh+07QxWxZ9r+tfiTwrr/ejWhN8wzlBSNpFa5QOgis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3f:13:17:e6:65:7a:28:24:50:88:ec:eb:35:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=de14712ef60261cbd893786488711af98b40bfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:d9:5c:8a:37:75:fc:d2:9a:b9:1f:9a:57:
78:28:08:fe:29:86:ff:d8:af:08:2a:88:5f:c3:39:
a4:05:5a:c7:ba:49:84:02:ff:cf:37:9c:ed:3c:e6:
a0:2e:db:f3:03:85:b3:85:25:93:83:8b:46:e8:17:
33:b1:8d:4f:61:9f:23:a3:38:f7:48:0c:81:1e:db:
2e:63:48:af:39:21:70:c3:79:04:e8:3c:74:a7:85:
2f:3c:2a:16:75:9d:75:47:5e:1e:fc:09:97:5f:fd:
99:3b:04:22:71:d6:ae:1e:df:2e:74:5b:03:1a:2c:
fe:13:a7:95:65:08:9b:34:6f:8b:74:c4:fa:87:59:
2f:74:dc:64:78:2a:b0:d4:43:25:c1:37:a4:af:bb:
d0:60:e9:ab:a6:ee:d2:75:4f:a1:53:21:92:20:17:
73:8b:9c:4a:c0:a8:de:20:0e:11:47:03:cf:e9:b4:
a2:41:e5:31:1c:a5:f3:93:f9:62:8b:98:87:11:35:
d3:b1:f4:3f:53:88:b4:38:e1:39:ad:89:71:c5:70:
c9:93:35:8c:e7:7d:78:b4:ee:86:72:4f:ce:ca:36:
cd:8d:a8:3f:73:f2:30:53:bc:dc:ee:97:58:1d:7a:
77:c4:ed:c5:63:c2:59:9e:58:c5:ac:7c:ac:8e:bc:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:71:2E:F6:02:61:CB:D8:93:78:64:88:71:1A:F9:8B:40:BF:AD
X509v3 Authority Key Identifier:
keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:45:19:86:a6:1e:f1:55:ca:5c:40:9f:73:0c:7f:dd:78:5d:
4b:bf:95:2b:dd:a8:47:da:f8:fd:2b:30:e3:76:5f:2f:64:c9:
ab:71:8b:d1:89:0c:56:bd:b8:77:1f:70:60:59:5c:91:b2:6b:
bc:29:3e:dc:f6:32:5b:e5:a0:f8:3e:13:51:7a:e9:b3:29:cb:
9f:2a:9b:c1:50:ce:66:c5:8a:87:a1:77:92:3e:32:00:e7:58:
1b:4d:85:6d:39:73:55:db:ba:5d:cd:89:cc:64:33:bc:bb:b3:
08:0f:f7:61:40:14:73:1a:81:e2:1e:14:c2:ad:e1:42:92:8d:
fc:9d:06:2f:82:68:4c:bb:f9:ac:bd:d6:be:57:a5:97:e4:15:
af:7f:83:7e:be:6e:19:bc:98:34:ec:16:f4:be:87:f0:3f:8f:
f0:44:13:3b:63:03:a6:89:3b:4e:91:a8:c8:87:a3:eb:df:1b:
3a:d1:20:dd:0d:a9:69:c4:16:67:7c:40:45:6f:3d:54:6f:d6:
ee:01:73:ea:b7:ef:af:b5:96:5d:a7:05:56:0c:5c:83:63:6e:
2c:30:6a:b7:c5:46:dc:8d:a1:25:44:a3:79:4e:f2:bc:b2:07:
24:fb:45:11:3a:49:75:a8:21:1d:4c:2d:79:64:a6:b6:70:9a:
8a:dd:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client