Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File: GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier: gw6DMTu/ckJPRvK35F2lnf7iIyEWgez0njgj0dApxWU=
Subject key identifier: A4:6D:8F:C2:7F:D6:59:0B:FD:74:53:83:E9:2E:C9:69:7D:D6:A2:74
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 0194BD4E7EFF08F1CBC50B6C137E7DDE6B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number: 0505
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: OXvJLXlUtdHO2+O+/2Mzu/OLENZrFIoJypUnp7rW9FE=)
3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:ff:08:f1:cb:c5:0b:6c:13:7e:7d:de:6b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=a46d8fc27fd6590bfd745383e92ec9697dd6a274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:65:1c:ba:16:42:eb:ea:e7:b8:5f:a5:b6:
b7:a9:05:50:33:53:c3:9f:8e:11:5e:e9:bf:29:55:
f4:70:1a:fd:7b:4b:67:1f:5c:44:b7:9e:1a:46:14:
20:e1:c9:38:52:65:56:8d:41:74:2e:56:5d:16:7f:
cd:c1:24:da:83:d1:d4:45:53:d2:2c:58:94:64:59:
dc:e5:0e:80:d2:99:25:04:02:42:30:9e:d1:b0:b6:
a8:25:1d:8e:c9:d3:0b:ad:12:f5:9a:5e:b6:1b:0b:
c9:a3:66:46:31:b5:4c:d3:a4:65:60:08:5b:76:14:
11:13:9d:ef:8c:ca:f1:bf:ef:4e:66:29:df:ea:1d:
bb:0c:e5:6c:a4:b7:a7:ad:d3:60:e6:06:49:45:14:
d8:63:eb:13:7d:f0:fb:9b:97:44:5b:6e:bf:1a:8f:
ba:06:f7:4e:c5:f4:f9:ec:19:e6:cb:20:35:e0:d7:
f3:1f:3b:5d:fb:80:af:b3:ca:90:b6:0e:31:40:15:
63:c0:7c:89:dd:0c:e1:99:12:9a:c1:97:a8:8c:97:
43:a8:e7:72:0d:70:f4:95:23:e6:0f:11:f9:3e:b7:
16:d0:6c:4d:8d:53:e2:d3:d5:bb:76:8f:1f:9c:a7:
ee:d8:30:f2:8b:2f:60:2b:cb:c4:de:5f:5f:a0:e0:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:8F:C2:7F:D6:59:0B:FD:74:53:83:E9:2E:C9:69:7D:D6:A2:74
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c6:e1:1d:6e:0d:15:bc:69:71:5b:ac:6e:5e:06:d5:50:78:
93:8c:c2:f7:e1:cb:c0:94:d0:53:4a:fa:5b:20:81:7a:2f:60:
c8:e4:2a:6d:d1:38:09:4f:ce:0c:26:84:e8:df:55:e2:21:a1:
8e:b0:6e:44:b7:40:39:e8:5c:eb:e7:07:28:81:32:3e:89:82:
e9:60:0e:69:33:bb:14:19:16:47:e5:a7:b2:c0:71:38:e5:5f:
40:31:d1:2a:eb:19:36:5b:b3:51:14:ed:35:10:31:ed:ce:4a:
8f:f9:42:e2:bc:3e:61:5f:d5:55:a4:18:7f:6a:b1:8c:27:90:
9b:86:93:0b:0d:47:08:a2:1f:11:85:00:04:a2:91:8f:f8:0c:
bd:be:87:34:79:18:8c:25:6c:9e:5a:41:ec:0a:bd:22:17:cf:
0a:8b:b7:3f:26:a9:7a:41:34:96:ac:19:3f:50:3f:11:9b:74:
84:d2:31:c9:56:4a:00:cf:c6:75:29:18:ae:2f:a7:3a:5e:f7:
06:14:98:75:11:2d:cc:3f:bd:b2:2d:53:a5:61:14:ea:da:d1:
5a:07:84:fc:57:ff:ce:96:bd:72:13:9b:db:4e:c6:c5:c4:63:
ec:0f:0d:89:d2:76:06:d6:a5:fc:27:e9:c7:ef:69:af:7b:3c:
bd:96:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:02 2025 by rpki-client