Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
File: gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft (raw, json)
Hash identifier: stGQcTmlPi9W7s5TUtABDF15kQCgFTk9WSWDQfHCSLI=
Subject key identifier: 36:EB:F5:CA:1C:E1:43:55:A2:21:7A:C4:D4:2F:D5:22:BA:39:7D:1A
Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Certificate serial: 0194BC04A7E4198D12CA370E9571E6700169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
Manifest number: 0B3B
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl (hash: yPgQ2GaqsigPd+OPJy6UEvSrdhjDO1qUT3eyhVqTKow=)
2: kT72_rs6FeeCr3dDSGrEzG7Qc-Y.roa (hash: aU4YilQ/j5WNVY1Q5u9ZzL1FCZbvOH4ANv0D/Jw9+To=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a7:e4:19:8d:12:ca:37:0e:95:71:e6:70:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=36ebf5ca1ce14355a2217ac4d42fd522ba397d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:2b:ce:b9:60:9d:45:8a:cc:e3:15:56:03:
56:45:86:a2:42:4e:22:78:df:34:f8:b2:7f:be:b9:
62:83:63:d3:bd:f5:d4:53:d2:8d:14:cd:37:8a:7a:
e3:fc:b6:48:57:41:fe:01:30:35:54:0b:2e:41:33:
78:81:17:76:50:8d:66:df:66:7c:c3:c0:b8:6a:ec:
95:10:09:07:33:b4:93:54:95:13:7f:de:53:2d:d4:
45:4c:52:ec:c2:9d:8e:02:31:c9:1b:29:8c:65:bd:
07:f7:d5:f2:73:db:57:50:84:ed:bb:ef:89:c2:a9:
d8:50:72:8b:bb:df:2c:40:a9:9e:79:2b:8e:5c:54:
32:43:56:6f:27:a5:aa:35:d9:f6:42:a0:a2:6d:17:
bb:c3:40:d1:ca:a8:0b:86:a3:fb:bb:1d:38:4a:69:
00:b1:75:4b:af:4f:ea:d7:7f:86:22:90:92:40:09:
f7:c1:49:af:fe:fa:42:35:66:19:bd:7b:b2:01:4e:
9a:7f:50:32:52:2c:e4:d3:63:8d:93:19:56:84:5b:
33:dc:2a:42:f0:d4:19:95:41:43:c9:c4:3c:86:d8:
20:3d:5c:09:9e:fc:b0:b7:3a:dc:4a:75:fe:2d:6d:
0d:8e:73:95:35:ae:48:4b:7c:70:91:50:30:94:c6:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:F5:CA:1C:E1:43:55:A2:21:7A:C4:D4:2F:D5:22:BA:39:7D:1A
X509v3 Authority Key Identifier:
keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3e:aa:2c:56:67:bf:d3:93:86:5a:a1:a1:b2:28:87:53:71:
95:a5:6e:9a:4e:3a:ae:f0:4c:ee:37:7c:4d:96:06:0c:f0:ae:
24:ec:f9:55:23:c1:e5:1f:be:a0:ca:f3:2c:85:3b:37:77:7b:
e4:df:19:d2:22:74:4d:ca:74:58:83:98:18:62:73:ed:0f:c3:
2b:21:f2:60:b8:c9:9c:aa:c5:08:3f:df:65:92:7b:a8:1e:9f:
59:6b:1d:ab:85:34:c0:f4:dd:b4:7a:a0:10:f7:42:b7:8c:19:
33:f2:5d:0b:df:1d:f1:a8:23:9f:05:c9:c1:c5:bd:8a:83:f0:
f8:14:98:84:e2:1e:33:5f:08:31:a8:3d:ce:7b:aa:64:b8:7d:
b9:12:4d:7d:47:0c:84:3e:3c:c1:ad:0c:b5:07:c6:92:61:e0:
6d:bc:45:25:67:95:e0:db:60:e6:13:e6:4b:12:16:5d:77:72:
b0:e9:11:4a:dc:5d:b6:81:21:f9:71:6e:01:87:7b:e8:a9:91:
7f:e3:32:32:90:c9:bd:2f:f4:12:3b:6a:15:f6:5f:74:6a:00:
b5:34:96:fb:8c:6f:2e:45:1e:3c:81:ea:37:b2:26:37:02:9a:
53:de:a2:99:ab:01:ec:f8:7b:3f:df:d1:51:60:40:40:6e:69:
86:b2:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:25 2025 by rpki-client