Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
File: gNYIoUEYsajc3eu7QPluzUj4XHE.mft (raw, json)
Hash identifier: EF1iFRAACbXa1D88vaMc8aPhUQ72nx0rJrmV/3Zyr2c=
Subject key identifier: D6:F9:E0:D3:2A:21:14:39:CF:BB:DA:8F:BA:A6:42:17:CF:80:EE:E0
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 0194BBCDE8250D1C86996A222667A17E4544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: I9UcyFkxclyQfZHhVQikKNPSVgY.roa (hash: xTi80oKD/t5UjogmPH/rk43vPfKlVZ63gwaMGRnVoxM=)
2: KUeSunFIk48S0xFjDtY2TFss-TE.roa (hash: J/IARmd2LJ7EVJ23zEUrZq3QktpdZue4SY7AhlJReKQ=)
3: gNYIoUEYsajc3eu7QPluzUj4XHE.crl (hash: sSyD6UvVypX6CgZj8UJ5t3jbdPVW3zZiQ163Av3fIOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:25:0d:1c:86:99:6a:22:26:67:a1:7e:45:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=d6f9e0d32a211439cfbbda8fbaa64217cf80eee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:55:44:81:06:84:b3:85:48:41:5e:ce:c9:
3c:f7:28:7e:e0:5c:86:57:84:19:36:12:f7:ee:32:
ce:e6:58:9d:76:83:6e:94:07:2a:83:a9:3d:30:da:
ec:35:c2:f5:3a:18:97:df:42:91:ed:ae:c6:8b:bc:
b3:7d:fd:9b:4d:0d:00:f1:16:07:28:c1:bf:d1:6a:
73:b2:9d:4c:fe:cd:8f:00:44:a9:72:ba:aa:97:58:
36:43:92:96:4d:47:ed:0c:16:b7:3d:a9:64:df:c0:
04:67:13:8a:af:09:61:61:3a:50:a3:75:cc:43:90:
42:9e:b2:cc:f8:9a:db:d9:4a:ff:23:c8:2f:f2:15:
12:cb:e6:f3:19:80:b1:6e:1c:15:c6:0f:ab:10:e2:
21:76:b5:5e:45:ea:ae:6f:dd:d3:f6:e8:5e:58:d9:
68:d9:c7:df:83:10:ff:1f:69:14:69:43:44:27:28:
6e:e9:ab:cd:55:81:61:dc:1a:7b:f4:6b:50:4a:88:
a7:28:11:07:ca:68:e5:b7:8f:8c:ae:43:68:26:f4:
22:98:63:7c:7b:c2:6a:02:0a:9d:ba:70:da:05:80:
a6:df:34:56:b5:30:6c:73:83:f0:c9:59:45:67:d6:
40:45:75:6f:79:aa:4e:67:ad:8d:ae:f7:db:b0:fd:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:E0:D3:2A:21:14:39:CF:BB:DA:8F:BA:A6:42:17:CF:80:EE:E0
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:84:d2:59:2d:84:b3:f5:e0:54:20:33:ae:b2:b1:f1:c2:
53:e1:66:55:72:50:70:ac:2b:a3:68:44:21:c9:8e:e2:44:f5:
ee:06:78:86:19:6d:ea:22:92:01:d1:44:d7:18:4d:58:6d:c3:
be:9e:2c:f0:45:33:30:33:37:74:7c:99:1f:c4:c5:74:b9:7e:
34:ed:33:d8:38:98:bb:24:d8:9d:e9:15:32:5c:ae:40:23:d7:
37:f8:0e:e5:9b:2b:bc:70:19:5c:d5:72:9f:55:cd:01:01:0d:
47:0d:a1:e3:0a:b9:87:8c:76:95:42:52:0a:0a:d2:91:10:36:
02:a6:6f:7a:a4:32:70:42:7f:4a:1b:2e:de:ba:0c:1e:cb:18:
be:9f:c4:7e:c2:25:92:ad:4a:fa:9e:39:45:5c:fa:d3:e3:4d:
ad:02:8a:79:da:8d:fe:24:e7:c3:da:12:25:c2:ea:22:df:7a:
71:ed:02:29:3c:ba:c1:78:8b:f3:7b:58:e5:d4:93:62:8d:c1:
2d:0f:24:71:b6:a1:34:91:6f:25:3c:99:62:98:ce:22:0b:1e:
a1:14:77:ac:8b:38:3e:2a:58:cf:89:92:c3:17:ec:82:57:64:
3f:25:47:c0:c8:df:92:f6:48:7f:4c:48:9a:2c:84:88:af:00:
6f:ae:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:04 2025 by rpki-client