Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File: gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier: EsJ8RxEtMtBou4NCGeajKE6pMwF5OUJ+NUdnYW8mTZQ=
Subject key identifier: E6:90:A1:45:0E:E5:75:17:68:3D:A8:19:DD:37:17:85:26:12:30:5E
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 0194BD853E41317B1D62AFADC6F68DCFE306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=)
2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: yLxXRHOqMTgor53bq/JcN0dlZjf/xqmAV+087Qxr2MI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:41:31:7b:1d:62:af:ad:c6:f6:8d:cf:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=e690a1450ee57517683da819dd3717852612305e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:c7:7f:b1:8b:19:2f:dd:1b:72:70:5e:ff:
4a:6b:8d:66:c6:76:54:f9:a5:d0:be:31:34:83:4f:
05:4f:a8:ce:bc:b8:36:1d:94:f8:73:50:74:69:dc:
75:86:5e:7f:64:6d:bb:80:ff:da:b1:9a:69:a8:28:
08:f2:e1:b1:80:bd:4e:07:ae:11:56:17:36:96:80:
95:36:56:ed:eb:c3:08:6f:59:26:1c:ff:92:2c:d6:
39:51:ba:98:18:3b:3c:c7:0b:55:ce:ff:4a:a5:a8:
fd:b5:96:c9:44:32:90:3b:c9:d8:08:46:0e:c0:c3:
aa:01:ea:c2:b5:5b:f6:7f:e3:26:0d:00:8b:09:a9:
68:d9:fe:13:21:d1:99:28:a4:85:c7:8d:27:45:5b:
67:98:2d:c6:e8:d6:11:81:3d:15:c1:5f:a9:71:12:
ed:79:79:4e:b0:fd:74:83:cf:e3:db:ea:ea:fd:fc:
a8:b8:1f:41:ca:e9:0d:3b:6f:23:33:53:81:da:2c:
af:86:79:54:0d:1f:6e:a7:ad:97:94:fa:b1:84:f6:
b9:3a:15:f0:d2:ac:33:a9:63:44:85:f9:0f:a4:b6:
d3:ef:ce:08:2f:f2:ea:ce:dd:63:c6:64:de:3d:e3:
bd:b0:b6:7c:69:53:e4:2d:04:73:19:96:fd:7a:d8:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:90:A1:45:0E:E5:75:17:68:3D:A8:19:DD:37:17:85:26:12:30:5E
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:03:f1:1f:a6:8d:8c:22:53:e3:d8:08:27:c2:78:b2:94:72:
29:12:97:05:c7:db:04:a5:e4:2d:c9:ef:41:d9:86:85:aa:44:
41:29:49:5f:a0:d4:d1:58:da:2a:bb:47:5d:f2:db:a8:af:a9:
05:b1:43:c0:99:e7:87:bd:e8:d3:2d:51:bc:f7:50:fb:96:43:
74:31:9b:b5:1b:e7:bb:47:67:96:8e:95:b7:f0:11:31:4e:05:
55:77:fe:c9:8c:a3:9c:c7:c6:7b:86:87:06:60:b9:30:cf:d5:
5f:7c:42:88:50:20:28:0d:08:94:b0:d2:74:24:be:7d:e0:ea:
94:cc:35:cc:fc:56:e9:ec:fd:04:25:03:35:ca:8c:c8:fe:ed:
d8:38:4b:25:bf:17:a6:4b:93:04:5b:2a:37:11:e2:ee:7b:35:
e3:1c:ac:5e:f8:25:cf:56:74:72:a1:22:27:c2:19:47:31:57:
03:1a:fd:86:1b:86:8d:c4:4b:c5:80:66:c0:a1:9b:97:19:f2:
1c:82:a8:eb:21:20:45:60:5e:df:4e:b0:bb:e3:d6:c0:b0:93:
b9:d0:fe:6d:94:e0:e9:b2:04:92:16:50:f2:87:34:b0:09:92:
27:6e:29:07:e3:04:0c:7c:66:26:25:b1:67:9c:58:72:aa:38:
4d:91:32:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client