Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
File: goiQPZDAHi1c4YeIBa1KktKK7ck.mft (raw, json)
Hash identifier: Zn5idwgNzo8IIluU/yFcTIq8A0jHfAnYceYu9jJh9go=
Subject key identifier: 15:09:0A:A4:A0:58:B6:94:AC:76:A4:48:C6:43:3E:B7:54:B7:81:CA
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 0194BD4E849E3D5C441AB8569614FFA1EC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
Manifest number: 0B7D
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: goiQPZDAHi1c4YeIBa1KktKK7ck.crl (hash: 4v/7l46YIxBht+VkmL4HnM20Aea0uc07roa1Dt1KM3U=)
2: xs7enPVeNIMyt7yLlWdZQsBjc6E.roa (hash: Hl7Zc5f4P4RuVLf0+lM7s4f9NcFGJ5Df6CUhJF0dl6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:9e:3d:5c:44:1a:b8:56:96:14:ff:a1:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=15090aa4a058b694ac76a448c6433eb754b781ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:03:10:11:f4:ca:a1:ab:32:1e:b4:8f:00:
b5:f3:15:e9:d5:92:b6:3d:bb:6b:37:40:03:eb:de:
2c:c9:a2:d1:e5:87:a8:c6:18:0c:36:a9:87:a8:cc:
cd:13:ea:99:6f:ab:f7:5c:c4:dc:4d:14:9d:1b:a4:
bd:24:27:57:44:a3:8a:8b:79:37:4c:9f:33:ac:80:
1b:8a:e5:fc:b9:17:88:07:6e:df:5c:a5:73:93:5f:
82:6c:e4:1b:50:9f:12:87:85:cc:50:fa:07:eb:da:
51:ab:e5:84:c0:f4:61:44:86:63:9b:84:81:93:88:
b9:b8:c7:52:b4:b3:76:f6:bc:92:97:b1:31:53:0a:
75:0c:c8:3b:56:34:5a:6b:c5:21:a4:81:3c:24:f9:
af:b5:18:a8:b2:71:d1:5f:84:71:2f:9b:a8:f0:84:
49:d6:13:6a:76:6d:59:c1:bc:b8:38:8c:f1:9d:66:
eb:e3:ac:f4:93:8a:30:15:70:a3:a4:0f:12:fc:0b:
d8:28:9c:5c:1a:64:30:74:b0:99:0b:ed:6d:4d:86:
74:dc:22:07:cc:5b:70:c1:4f:2c:e1:95:b7:18:f1:
99:d1:74:4e:a1:63:8a:48:4d:83:08:63:12:aa:7c:
01:32:eb:9b:31:10:a7:92:3e:67:87:72:81:2e:b7:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:09:0A:A4:A0:58:B6:94:AC:76:A4:48:C6:43:3E:B7:54:B7:81:CA
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:4f:ca:75:76:f6:3f:6c:dc:3c:c8:ba:ba:38:f6:8c:78:
a4:43:f2:4a:9d:46:29:af:18:7b:4d:78:be:3f:8d:2e:60:40:
28:31:6f:c7:d4:9f:09:a4:ae:95:55:b6:00:fc:57:44:82:f7:
22:05:1d:90:f7:3d:da:e0:ca:0b:fd:91:65:dc:d7:22:a8:6d:
b5:42:f9:7b:54:d5:e5:07:03:49:04:dd:27:69:9b:9a:56:f0:
b3:20:bc:3b:9d:a2:1a:63:02:5e:86:b9:9c:92:5a:a7:64:c0:
c1:28:9e:ea:8a:c2:46:9c:cc:d5:b1:11:fd:24:2e:47:c3:21:
60:3a:c3:30:17:92:94:eb:78:83:e3:56:22:14:46:4d:24:b7:
44:ee:5c:84:46:3b:fb:42:0b:9c:fd:d3:25:00:f1:e8:83:e2:
27:e0:88:93:52:56:26:2f:dc:5b:55:48:6f:bc:d8:85:21:87:
0a:e8:d0:81:90:38:aa:00:58:98:5f:63:05:84:1a:15:e9:1f:
52:30:6b:98:21:e6:f2:4c:c1:96:63:91:97:5a:6a:af:77:a4:
26:67:56:3a:3c:85:2d:5d:b5:24:97:17:28:c3:a3:82:c4:a2:
50:62:63:b0:26:c2:bf:94:ee:a0:d0:2e:a2:72:1b:cd:72:d2:
ae:e7:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:22 2025 by rpki-client