Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File: gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier: rYthv2eCDINvY+1Rl60LQ6v6bRHzLMXVMekFzV7ftUc=
Subject key identifier: DF:AA:4E:70:75:40:D0:A4:07:0D:EA:BA:32:AE:91:38:CB:CD:F1:86
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0194BC0500AAFA816C4E8DE32E44E2B6B124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: ihYzI54puLi6xxBZ0sVk56MF60ktLUbtIx7uyOk8+SU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:00:aa:fa:81:6c:4e:8d:e3:2e:44:e2:b6:b1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=dfaa4e707540d0a4070deaba32ae9138cbcdf186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:55:aa:ac:4a:7b:f9:f8:f4:7d:d7:3a:ef:
41:1b:8d:96:35:a1:d2:3a:72:28:43:7d:85:60:c4:
c5:12:b2:00:11:66:17:04:c8:1c:ab:ba:a1:1e:25:
c5:a7:c8:15:0d:9b:3c:55:74:65:d0:c6:2e:2b:7b:
f0:54:4e:17:18:09:f2:b5:8e:17:4c:c5:e7:60:c0:
46:30:1a:c6:44:c9:5d:ac:8a:fb:84:46:43:e6:42:
7d:ce:5d:71:bf:fd:e0:ea:c9:26:19:27:b3:5e:fd:
0e:4e:c5:3b:ad:66:c8:a8:91:b6:a1:86:48:ab:6d:
26:52:d5:b3:da:ef:bc:03:5a:1b:1b:ca:46:e0:91:
58:b5:54:b3:92:e4:cc:36:f6:e2:89:56:cc:14:b9:
72:a1:00:81:3a:d6:e1:ca:e0:d4:46:bd:c5:3b:a4:
f4:b4:af:da:53:e5:50:8a:1f:c5:dc:56:54:d8:f7:
8c:46:9b:ea:f4:c4:3c:7d:40:ba:14:f4:94:12:06:
f6:00:1e:23:f7:1b:88:21:c5:01:7c:30:92:d3:81:
4b:ee:d6:0a:cf:5e:fc:17:9e:c1:1f:ab:e0:e0:62:
81:28:d3:de:01:57:63:34:a7:72:56:04:5f:9f:8b:
e1:58:e3:22:db:26:dd:2a:36:fb:dc:7e:2f:c6:21:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:4E:70:75:40:D0:A4:07:0D:EA:BA:32:AE:91:38:CB:CD:F1:86
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:31:2a:a5:17:0d:4c:b7:91:f3:2f:5c:24:05:ec:aa:f5:
43:9f:66:06:3c:36:8a:7a:3e:5e:a1:93:ff:a0:f5:77:a4:82:
6d:ee:fd:c3:f2:ec:f8:37:e6:9e:bc:f1:e3:75:df:1c:95:25:
c4:ab:44:8f:8d:f7:8c:72:c9:9c:7e:29:a7:2d:35:d0:21:2f:
ae:48:c0:88:e6:ca:06:ab:d8:f7:4d:14:b7:d0:cb:17:e6:e2:
2b:d5:87:28:16:84:ca:fd:de:17:27:92:42:0b:88:2f:df:3c:
54:f1:2c:20:74:19:23:2f:07:c3:96:a0:6d:6d:a1:76:01:6e:
e0:09:a7:84:1a:45:57:f6:87:6e:77:90:04:b4:43:16:7e:d5:
f2:e4:91:58:3c:ad:43:e4:9a:be:0b:d3:e4:6f:06:be:01:e8:
55:1a:9f:3c:c4:7a:1a:af:78:ef:c8:d9:9f:32:ba:a1:ad:0f:
ec:12:7b:3b:96:5d:17:7f:84:f8:6c:79:1a:e1:83:53:88:5f:
18:82:a2:15:d9:fe:1d:b5:70:84:44:17:f6:79:5c:d6:ee:78:
d2:dc:af:8a:b7:6d:43:e9:3d:83:b8:e9:6a:3b:02:04:1f:10:
01:d7:d8:77:a9:6f:d3:99:17:74:1e:c7:d4:27:26:46:5c:0c:
27:c3:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:34 2025 by rpki-client