Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File: Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier: x+uuhu2r6ThXC6G8S7rROjABI/T5wmW7inghYV0nSWU=
Subject key identifier: 82:71:A4:58:E3:07:76:30:50:14:CA:F9:30:5C:D1:B5:92:E1:3A:94
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer: /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial: 0194BBCEFD03CC1835953F947FCCE2C5217F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number: 03E6
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: Goki00gTCNvUwqtucOran3X222g.crl (hash: YMOdzRN80K3btHpkST1nESiyW5VgVpMwE41K04meMQo=)
2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:03:cc:18:35:95:3f:94:7f:cc:e2:c5:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=8271a458e30776305014caf9305cd1b592e13a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:c8:a1:f6:83:2b:16:09:a1:a7:1e:fa:b2:
b2:4d:e2:d8:aa:66:f3:d4:56:5e:a1:8c:e8:e9:e2:
7f:c1:1a:6e:29:bf:4d:da:6f:85:9f:2e:15:33:2f:
83:a5:24:95:f2:5e:0d:44:31:37:9e:2a:cd:bb:8f:
74:20:ec:3f:bb:c8:19:9a:c1:31:02:b6:f8:75:35:
b4:72:a8:ce:46:e7:8a:05:c2:cf:c9:25:91:23:41:
8d:7f:37:a7:17:b9:ef:79:1f:5e:8f:4c:14:22:4f:
08:27:91:90:d9:75:4a:b7:be:64:63:33:d6:45:c0:
c9:53:19:9a:d0:84:f3:cd:62:a8:85:6f:fb:d9:a2:
1a:23:94:5f:b4:7f:3c:05:02:ae:0a:b9:71:c4:03:
28:6d:aa:e2:b9:2d:22:58:d6:31:8e:b3:23:0e:ad:
62:bc:b6:6b:6b:d2:e5:3d:60:d3:65:9a:1c:2e:16:
9e:2d:7c:bb:d4:b2:c8:cb:b7:52:e4:89:79:78:24:
cd:2b:59:47:7b:e0:7c:89:fc:9e:44:5c:b1:91:4f:
66:0e:27:2a:3e:f6:23:88:5b:31:19:2a:b2:ab:a2:
18:64:49:47:8f:b4:e2:2b:62:ef:a6:a9:c4:55:d5:
50:d7:18:56:f7:66:78:0f:1d:f7:63:30:ac:ee:aa:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:71:A4:58:E3:07:76:30:50:14:CA:F9:30:5C:D1:B5:92:E1:3A:94
X509v3 Authority Key Identifier:
keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:01:d2:55:3e:ee:52:11:11:3b:e1:d8:a7:e9:0e:70:52:
7e:25:11:c0:c5:ce:e1:72:82:39:c0:8b:af:61:ba:77:80:bf:
f6:5b:26:24:11:fe:79:b8:75:ba:45:7f:9c:f8:4c:f4:c3:ad:
32:c1:ac:0e:f9:5a:52:b5:d9:bd:6a:96:27:47:64:4b:4d:35:
8d:74:56:5f:a1:72:f1:8a:c5:82:88:6c:e2:bd:77:9f:48:85:
81:77:1e:ed:b7:c1:5c:31:16:b4:10:d9:3e:ff:f4:fd:34:63:
75:2e:a4:f6:ca:21:17:5e:e5:8e:f4:03:b8:ad:f2:67:21:81:
8c:28:69:fb:a0:89:57:37:c4:c7:b7:ae:87:8b:c9:e5:ea:b4:
bc:5a:4f:c9:7b:9c:37:e0:0f:1f:5a:0a:a8:6c:d5:d1:13:7c:
67:12:aa:a1:39:fe:44:2f:4f:98:b7:7e:26:34:26:83:50:f0:
a5:77:1a:6e:ff:7e:92:23:36:1f:e7:e9:99:7e:fc:fe:4a:86:
15:26:07:08:6b:e9:34:bc:e0:7b:47:2d:74:69:05:7d:97:54:
cd:37:17:26:8b:a5:bf:e8:c9:3f:83:92:5a:aa:b4:c1:96:59:
09:ed:7a:fb:49:9e:9d:d7:e9:cb:49:4d:62:a0:38:fe:6e:d9:
ef:69:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:37 2025 by rpki-client