Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: sI9bMSV5Fid+cUfaDZ4GjIj6bzllbU2bDaU8iXTtR70=
Subject key identifier: 28:4C:2B:BA:0F:3A:FD:A7:D9:16:D1:C1:B3:7B:A8:8F:A0:E5:37:ED
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 0194BBCEEFBC5FA8AE7AAA64C7F14DC301DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 0205
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: w9NHGnbIvY9/TCOUHtbKNizaelS98ahVMnLhseJldVw=)
2: xVzCoBRTedY1vT9C7xN3NLO-WeY.roa (hash: ystLlP8JPbF13VOw8QCBVAQ5cldgA4v4fXVvBu8BWIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:bc:5f:a8:ae:7a:aa:64:c7:f1:4d:c3:01:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=284c2bba0f3afda7d916d1c1b37ba88fa0e537ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:25:b8:95:92:33:47:4b:c2:4b:a7:25:76:
ad:83:e3:b5:47:42:22:56:f0:0a:7a:ae:3b:c7:31:
c2:fe:d8:c8:1d:a3:8b:6b:1f:71:66:7b:9c:54:47:
cf:8a:01:a8:10:55:d7:0b:58:8f:b0:28:71:ca:82:
96:3d:88:a0:ee:f1:13:83:92:cd:07:9a:d0:d8:a8:
39:ee:a9:72:52:a0:a9:86:cd:e1:15:c3:6f:73:2d:
74:2f:62:f7:49:b3:11:13:84:86:bb:c0:2d:fc:d2:
f0:07:bb:5c:aa:f7:80:7f:5b:2e:9a:60:8d:27:db:
c2:65:d2:65:59:ce:1c:61:54:51:ea:97:b4:05:63:
22:a0:51:a1:0d:a7:5d:df:a0:29:b3:54:d7:25:df:
f9:1f:a8:5f:fe:4c:41:07:8e:e9:99:cc:0d:7d:e5:
a9:8a:6b:13:d9:a0:77:96:95:7d:3e:91:67:3f:e1:
85:ed:e5:41:7e:5b:3d:3e:7b:ee:18:8d:ff:2d:4b:
1d:82:4d:78:2f:fd:6d:95:53:91:27:24:57:48:e8:
0f:a2:85:a7:0f:04:6b:38:6f:57:99:0a:fa:21:7c:
b7:56:1f:99:7d:93:d1:32:53:c2:1b:d9:01:1b:9f:
5a:15:53:8f:f6:a7:3a:46:ce:d7:5b:30:02:42:e3:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:2B:BA:0F:3A:FD:A7:D9:16:D1:C1:B3:7B:A8:8F:A0:E5:37:ED
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:06:69:d5:b7:90:8a:6f:17:35:6e:78:9b:39:e4:90:cd:40:
1a:c5:60:e2:38:a6:de:c2:ba:a1:4a:c7:f1:93:fb:fe:fa:89:
ea:da:da:6c:a1:84:d5:df:17:8b:60:b9:3e:ea:36:9d:99:d4:
2f:f7:d5:7c:2c:fe:d9:b2:ad:12:e4:61:62:52:cf:9a:3e:41:
27:e5:d6:2c:13:55:af:02:82:be:b2:ed:b1:34:be:ed:43:95:
d3:b0:7c:dc:80:ce:53:3b:5f:7a:43:f4:19:ac:a7:3e:33:90:
0f:63:ca:0d:1d:7c:6a:65:e1:ff:76:40:cf:85:6a:c7:90:35:
43:e2:62:a3:f6:bb:7c:4e:92:59:c0:a3:da:a3:3a:8d:62:32:
af:7b:85:e4:d4:13:0e:41:1e:95:a0:bc:71:32:7d:fa:5f:07:
32:71:13:4b:8e:f2:8c:98:a1:5b:f3:2d:da:28:e5:25:78:94:
19:1c:cf:01:6a:47:fb:d9:c5:11:7d:6d:d6:7a:e8:8f:be:8e:
db:51:e3:15:89:6a:46:fc:df:b0:78:5d:e2:43:50:60:71:aa:
36:42:b8:4e:19:a9:82:6d:ca:a7:2e:98:90:6b:8a:52:79:81:
df:71:f4:ed:d3:ee:8d:2b:bc:55:ef:26:70:5d:a2:3f:d2:1c:
d4:37:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:02 2025 by rpki-client