Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File: gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier: +zCQag4BDrRYVDduGPkzmMZPoGdsu/jLZTIiwdknPUs=
Subject key identifier: D4:9A:9A:EB:5B:E8:23:33:9A:DD:7D:B3:62:51:31:EC:71:48:F5:E1
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 0194BCE0D53E9DD47EA1AAA4C084ACCFC52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: RbghuQce7oTlo+T9uPcuLvO84gMoxbKNkvG5H6sxkcg=)
2: qlqgePzaow94bOhGIICb3tENs_I.roa (hash: g2l9EOHM8zyw2rqoOA1je1urWXi5S7+aWTnDmc/QL/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d5:3e:9d:d4:7e:a1:aa:a4:c0:84:ac:cf:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=d49a9aeb5be823339add7db3625131ec7148f5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:c8:ff:af:30:ee:0e:ad:22:aa:d8:32:a7:
98:67:c4:f3:9a:35:25:66:9e:3a:c4:f0:57:2e:f3:
20:8f:3a:02:be:ae:b7:62:a0:fc:13:78:47:d6:b7:
33:5b:d7:51:86:0a:1f:f2:3a:f2:dc:c8:01:25:e9:
93:b4:dc:8f:cc:11:6a:51:16:5d:78:4b:d7:51:33:
6d:20:c3:82:c3:03:e8:c9:15:1b:ce:2d:e0:f3:6c:
54:3b:be:93:9d:a3:1b:44:df:d9:8b:95:1a:69:b0:
a5:e8:f9:aa:98:de:bd:93:b8:17:33:35:53:5b:39:
54:23:3d:c8:3d:4f:3c:00:1f:a8:85:27:ba:40:a9:
bf:c5:0d:a0:6b:33:b4:fa:d7:2a:f6:b9:09:c0:a3:
45:08:ea:dd:b1:40:91:b8:d1:c1:28:05:1f:16:fc:
8a:ed:a5:c4:09:82:0e:1b:7e:7d:18:f3:58:a3:3f:
a4:88:f3:9b:de:5b:e4:be:29:9a:52:5e:0a:31:83:
59:b3:36:a8:e9:60:fc:46:95:99:ac:53:e4:d2:33:
c8:cd:df:ee:24:4a:2c:fa:c9:d3:a8:01:e2:32:4b:
6e:6c:1e:38:c5:32:94:bb:87:23:20:c5:df:d5:28:
9d:76:6f:90:77:66:30:3a:e7:f4:c7:26:d9:c6:00:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9A:9A:EB:5B:E8:23:33:9A:DD:7D:B3:62:51:31:EC:71:48:F5:E1
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8b:41:3b:52:dc:b2:bb:f4:7d:1f:5e:7d:f3:7f:99:8c:7c:
85:1c:23:f3:6a:62:9c:93:68:0f:40:c3:5c:0a:38:53:48:e0:
90:6b:63:0a:e6:1c:f3:b6:bf:3d:fe:7b:b3:42:f1:41:fc:d5:
7c:6d:e7:ff:67:5f:c8:8f:52:d8:b3:b3:1f:3f:bd:fe:e7:1e:
9f:64:6a:d2:ac:ea:c3:94:99:3f:c9:94:14:1c:42:8f:04:29:
c8:07:bd:1c:79:c4:45:fb:38:4b:c2:73:30:28:93:bd:fe:32:
de:b9:49:2b:4a:20:b8:6b:d8:7c:4c:99:09:5e:3d:4e:41:f6:
ce:a0:d7:cb:bb:e5:98:f3:a3:cf:a1:06:7f:ce:1d:a0:5b:0e:
08:5d:10:d2:3d:c6:0e:52:8d:ab:3f:75:3d:71:95:bc:36:fb:
61:a3:86:66:fc:93:b5:5e:b2:ab:d1:fc:85:86:3a:a8:e7:f5:
51:21:3f:2f:a1:0e:9c:ce:bc:fe:b6:d7:93:39:d5:c5:77:b3:
3b:08:4c:ae:89:23:09:9f:1d:20:81:0a:28:fc:17:c0:ed:3c:
51:13:56:39:cd:a6:d1:7e:83:90:ec:f7:5a:aa:22:35:cf:9d:
8b:ea:98:c3:36:be:bc:08:d0:4e:23:9a:15:4f:fe:8b:45:61:
c6:9c:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:05 2025 by rpki-client