Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File: gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier: O2dRwi4I8dfzBtvq3zOkUu0i3lKBf7Ec4h6/6szYRos=
Subject key identifier: 18:3A:CA:03:14:CE:80:CC:D5:D9:B1:FC:07:96:B6:7D:1A:A5:56:26
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer: /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial: 0194BC04B68B4ADB05EEEAB47697EF4EDB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: Onn9ODH2s7JkE8lXTIBITMPXA/wJ+mimZKwf1ts/rtM=)
2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:8b:4a:db:05:ee:ea:b4:76:97:ef:4e:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=183aca0314ce80ccd5d9b1fc0796b67d1aa55626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:7d:f8:a2:54:a3:bd:b3:b5:be:a7:66:d4:
3c:f4:e9:a2:9d:84:cd:69:6c:37:b1:06:62:22:bd:
6b:5b:6e:d4:f4:b6:3e:67:8c:71:69:88:6f:dd:a0:
d0:cd:26:d7:6c:0a:4a:c7:fe:99:eb:13:eb:6a:0a:
e9:6e:8e:6a:7f:34:50:aa:98:ed:18:2f:29:60:4c:
e4:62:fe:63:94:f3:e6:68:97:12:12:96:eb:c1:3c:
0c:e4:aa:12:62:93:12:2a:22:0e:d7:d3:5c:ec:f7:
eb:74:50:39:5d:4f:8b:ac:b0:2e:fc:0b:75:f8:36:
b5:95:bc:7c:7c:f8:ed:69:72:7c:09:9c:6b:e3:f5:
84:56:c0:b2:91:60:3f:01:61:b3:cb:58:61:1d:b8:
4c:70:55:86:f9:48:83:d9:7c:b5:d6:eb:d6:cc:98:
ed:d0:68:13:0d:a1:8f:f4:ab:91:98:f6:91:f7:e3:
69:38:d5:d7:b8:95:e1:f5:31:77:8e:71:b8:58:6b:
f6:74:49:06:70:5d:2c:e7:23:99:f0:4c:0a:45:2e:
95:86:d9:80:bb:6a:39:54:92:3b:11:09:4e:bf:d2:
e6:f3:33:5e:c9:10:c9:76:93:00:77:ff:2a:63:e4:
18:7f:90:25:7f:65:41:78:8d:73:31:55:48:af:76:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:CA:03:14:CE:80:CC:D5:D9:B1:FC:07:96:B6:7D:1A:A5:56:26
X509v3 Authority Key Identifier:
keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3b:e8:b8:18:e0:e7:07:e3:c0:5b:ae:88:57:0b:40:50:48:
47:2f:38:71:c8:9c:0b:2b:05:40:85:d3:1a:8f:2c:a6:29:38:
cd:54:d4:19:a6:ab:39:b9:42:83:19:2d:85:15:9b:b3:ce:78:
63:c2:17:5a:22:53:14:c1:83:9a:f4:77:d3:01:64:38:3a:ec:
c2:33:23:cf:24:48:0e:b4:c0:28:ff:47:53:e3:17:06:a9:9c:
9f:c1:7e:07:47:1e:02:25:10:68:67:61:f6:a2:c6:8b:63:4c:
b7:cd:41:fb:d1:17:d2:0d:eb:33:f3:fc:e2:bd:4b:a3:f5:e1:
a0:1e:78:50:e0:7a:01:86:41:4b:fa:74:54:2e:42:4a:ee:93:
d2:e7:74:af:56:ad:b3:20:26:5e:15:22:ae:69:a8:c8:7f:57:
ad:31:42:22:ab:95:36:c0:46:e0:45:3f:45:4c:09:69:32:5d:
b7:e3:d8:1f:45:b7:d1:b5:a4:f3:fd:5d:9e:95:a5:8b:8d:7b:
3a:41:72:9e:d2:30:31:d1:3d:99:9d:97:b2:8f:b4:df:7e:13:
bb:a1:06:60:7c:fa:bb:b1:3c:c6:3e:4b:e3:9b:c2:48:90:ec:
2f:e4:b6:2b:1f:48:98:fa:d2:a6:7f:91:c3:f7:5a:24:33:80:
40:2a:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:36 2025 by rpki-client