Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File: cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier: 8m07teXsZrxHzOs04upE2dK3y7HDnXGDxLpzkPk3F88=
Subject key identifier: 3F:FD:A1:1E:91:05:FE:B2:07:FE:8F:93:E5:4D:9D:02:93:61:98:BB
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer: /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial: 0194BCA983492AF011E3742EC86B50441F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number: 0C53
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: cE8dCQJoRoLNtSWN2Ay+eXKL1x7NDhJ+G9itrx5EVbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:83:49:2a:f0:11:e3:74:2e:c8:6b:50:44:1f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=3ffda11e9105feb207fe8f93e54d9d02936198bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:20:06:1a:38:50:45:f6:dc:aa:c3:ba:c5:
8a:bf:0e:f8:ac:31:09:98:e9:67:bc:ba:90:ee:b9:
ec:8a:1c:37:42:de:5b:34:74:03:d4:32:b1:93:fe:
95:c0:e3:fd:97:53:98:2b:55:d6:f3:a3:4e:29:84:
75:c4:64:82:f6:d5:03:6c:58:a8:0e:93:54:a1:31:
de:c9:90:b1:74:09:bb:6e:df:66:ef:fc:ec:92:80:
c3:81:47:63:fb:e0:65:c5:ca:51:d5:59:da:9a:80:
2f:c2:9c:e6:89:65:40:85:17:83:44:47:de:3f:7c:
59:86:62:42:42:9b:48:6e:01:d9:28:3b:60:b2:4f:
6a:a5:41:8e:8b:aa:b0:e8:e5:cd:78:9b:51:97:72:
ec:ee:0e:c8:66:07:41:4a:74:03:08:ec:77:78:cb:
cc:54:70:8b:57:81:75:3c:6d:cf:28:1a:dd:00:26:
89:1d:e6:ff:42:5c:43:d9:91:a4:49:1e:9c:b3:98:
0c:86:22:fc:5d:6f:dc:1e:68:a1:33:17:51:83:bd:
ae:c1:8c:50:30:5a:01:fe:6e:00:54:66:9a:63:99:
1f:9b:6a:f9:dc:0f:7d:37:44:8f:0c:b3:09:5a:8e:
5e:7d:47:10:1c:6b:31:ba:54:d0:3d:36:fb:e0:dd:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FD:A1:1E:91:05:FE:B2:07:FE:8F:93:E5:4D:9D:02:93:61:98:BB
X509v3 Authority Key Identifier:
keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:55:7f:d6:e3:8f:45:45:7e:a7:5f:75:08:95:06:e6:ff:
eb:75:9a:8d:1c:0b:ca:30:76:cd:bf:ec:9e:51:20:c2:a9:dd:
26:84:3b:be:9b:8d:5b:68:54:d0:4e:25:97:a3:fa:fd:32:c5:
a3:e9:a8:53:1f:32:c2:01:aa:d6:19:44:13:50:fc:bb:07:42:
d4:16:a5:4c:ee:1b:e4:1d:f9:6e:03:a2:37:2c:31:0b:a8:42:
8d:43:75:8f:ba:e6:fa:d6:4f:3a:f5:bf:4e:6f:be:7c:b1:5c:
fd:eb:e4:7d:77:e9:43:b5:19:4a:79:5c:d8:a0:0f:9a:ec:e6:
c1:be:1f:02:69:e2:ad:60:3e:3c:1c:14:1e:bd:d5:30:57:a3:
bb:c3:2c:8d:84:66:1c:97:f3:77:0e:a6:75:45:7d:ef:03:fd:
af:82:88:7a:2a:d6:dc:5b:09:f8:be:9f:cb:2b:28:d8:dd:aa:
79:eb:e6:40:85:c9:52:54:c9:ce:32:b6:31:7d:1a:df:fc:1b:
7b:d9:f0:ec:0b:b9:48:53:ae:6d:14:7e:96:56:b3:9b:90:9b:
d7:1b:18:18:6f:b9:9f:b4:3c:f9:48:2a:35:1a:cf:64:e8:c1:
61:6e:f0:29:47:69:60:71:58:c6:43:99:19:76:de:a5:8e:fb:
40:f8:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:30 2025 by rpki-client