Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File: gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier: jqsrLGyMZZ3Mz/cUge301UpwRKUorCD/AdyOUVH3HhQ=
Subject key identifier: F4:50:34:57:23:60:10:44:14:A6:6A:5D:29:B9:F0:9F:C8:E1:C6:28
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 0194BC04FB7DF5C3B80AD5927823396C6402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number: 02F2
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: MWh5oxD0mlPfv3wl5DDlIllo7IY.roa (hash: hCUe3UqGLfLJn0/ykpo1moRqC/s0I/1a6u8vKsOmeBg=)
2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: 79TMQhar1VHNagAFIXOciBmP5mcvyh5wwaofwBGlqpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:7d:f5:c3:b8:0a:d5:92:78:23:39:6c:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=f45034572360104414a66a5d29b9f09fc8e1c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:35:a7:92:f9:d1:f3:1d:18:d7:8e:4b:9d:
0e:7d:85:0b:f2:28:da:98:9f:d0:9a:80:27:33:0e:
6d:39:dd:f2:d3:8c:b2:21:59:74:4e:0a:e3:1b:d0:
bd:7a:d2:fb:00:d7:b8:6a:05:e7:d1:be:2a:2d:ef:
17:c9:e7:2f:c6:cd:b3:8c:be:ac:34:9a:96:90:28:
5e:39:e8:d1:44:81:8c:34:8e:7d:1f:93:62:7c:cc:
ee:19:25:40:98:2c:11:53:08:45:4c:c9:05:b8:ff:
be:12:64:c3:51:2b:32:9c:5b:eb:ab:7c:36:b1:3e:
a0:ea:2f:3e:3a:e2:66:df:f1:4f:8a:90:98:cb:5e:
21:69:53:54:27:35:ae:b0:8f:b3:1a:01:46:82:9e:
51:00:c0:f2:c9:8c:58:e8:27:56:9a:d2:71:f3:45:
4d:f7:08:33:5f:17:55:54:bf:52:04:53:f0:fc:fa:
18:28:85:33:5b:33:30:bc:62:ea:e3:a2:a4:7f:43:
33:35:c6:25:fe:99:a7:6e:4b:74:c2:2e:31:55:6b:
80:85:e2:ae:21:cc:12:24:35:11:be:0c:17:f8:69:
a4:7d:b5:7b:5f:c5:0c:33:29:c8:57:12:0e:a1:8b:
57:55:ce:8a:3d:55:84:46:3a:d2:a5:67:e7:9c:8c:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:34:57:23:60:10:44:14:A6:6A:5D:29:B9:F0:9F:C8:E1:C6:28
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:8f:b0:af:2e:eb:75:02:e0:a4:a3:b7:99:15:fa:a6:4c:
c7:e6:15:7b:c2:71:49:bc:3c:e2:de:ee:e0:50:94:bb:66:3b:
0b:22:8f:09:e9:95:7e:37:0f:05:c5:08:9d:83:c8:8d:20:9c:
c2:7d:49:65:29:d9:dd:1b:80:a0:f7:da:fe:47:93:15:8c:1b:
b5:93:9d:f2:70:d5:13:4b:dd:b7:51:36:45:7d:fa:23:69:b1:
ff:26:7a:de:91:32:cf:10:55:66:d9:99:c8:bb:10:c9:d7:31:
a8:11:da:74:8f:d8:9d:c3:cf:47:4a:18:5e:5a:5e:5d:6b:78:
f5:86:1f:70:e8:24:8c:1f:a7:90:e5:7b:d2:c1:8f:db:5b:69:
f7:f9:f5:51:f3:67:6b:69:26:db:f0:8e:db:48:24:1b:86:08:
7f:d5:c5:9b:82:23:87:7f:38:22:ae:70:c7:03:4c:32:48:3e:
e2:dd:d5:67:04:42:9f:b5:0b:a2:45:82:0c:b6:38:d4:60:d4:
96:c5:18:30:c2:0a:8a:f3:a8:df:e7:5c:35:da:f3:31:df:42:
82:06:97:c3:80:b7:f2:df:5d:56:26:c6:6f:b0:42:88:a7:7e:
4a:6b:de:9b:f7:0b:6e:d0:a0:14:2a:ac:65:45:ba:bb:ad:31:
e4:b2:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:01 2025 by rpki-client