Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File: gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier: +VFLhl4RN5K6nBYDsUC5lNJrhmHuldCjPLCq8bo8lL8=
Subject key identifier: 7B:A7:61:6F:10:71:06:5E:CE:59:47:84:23:02:3A:06:C9:20:A4:B4
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 0194BC3C6A808B0FCB03285B647B98D4E64D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number: 1386
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: VxFhrvKa/Z0vwwFnU1gliVT1EtWBhF8OT4Jg2xmLOZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6a:80:8b:0f:cb:03:28:5b:64:7b:98:d4:e6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=7ba7616f1071065ece59478423023a06c920a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:68:6f:63:c8:85:2c:3d:f4:03:32:a7:35:
5f:a6:f8:b0:16:f4:e6:d4:56:5e:78:3a:90:41:56:
bb:91:0b:81:31:ff:34:41:9e:77:77:b0:d1:df:e8:
b7:76:06:73:9c:bf:8c:86:ae:58:cc:c5:9c:ae:55:
e0:f1:fa:0f:f2:1d:48:f1:df:2f:34:02:7f:10:da:
9a:be:ec:5d:12:e9:a8:a4:42:66:8b:bb:be:06:90:
a9:46:f7:18:49:a2:3f:2b:c3:c2:53:7f:5c:d2:02:
18:c9:12:da:e5:7b:0e:c4:6c:c9:a1:5f:8c:5c:d5:
e1:4b:a2:43:72:79:28:70:4e:05:a6:f7:84:fd:15:
0c:e6:21:e4:e4:bb:92:57:49:c4:db:29:0b:ee:ea:
0c:d7:d1:70:49:1c:03:ec:1e:70:ed:4e:1d:1d:b9:
63:7e:ae:69:31:77:ff:a7:0e:79:0c:3f:4e:8e:42:
76:dd:76:73:f9:1b:75:59:be:23:da:e5:0f:15:2c:
60:fa:e7:8a:f8:b3:83:b7:81:6a:17:dd:45:5f:36:
3c:f9:f4:00:c1:d3:43:20:17:2d:fe:55:a9:2c:85:
0c:92:7a:4b:85:4e:4c:b1:f4:4d:58:1e:34:0b:0f:
46:b1:f2:05:1c:6d:6d:24:ef:ce:c1:e4:58:43:5f:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:61:6F:10:71:06:5E:CE:59:47:84:23:02:3A:06:C9:20:A4:B4
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e6:16:93:15:a5:d9:fc:2b:fe:98:a3:4a:8e:7e:29:60:44:
61:af:e9:ab:43:1b:fe:fc:ed:04:49:85:20:10:6c:88:9b:e5:
44:3d:b2:a3:c1:7d:e8:5b:79:01:70:ef:b5:4c:8d:3e:01:30:
11:1c:32:be:77:c7:10:79:71:2c:3e:88:3b:b9:54:3c:a4:fa:
f6:b0:31:08:7f:01:c4:28:5f:e8:83:84:d2:14:88:8e:2f:a3:
8b:3a:c2:9c:41:f5:58:f8:6f:f6:95:56:11:80:6f:78:90:fa:
01:3f:a6:51:ad:89:85:78:fb:13:58:d0:ea:df:96:cb:ba:99:
34:08:5e:fc:34:9c:73:b6:b8:0c:89:13:9d:11:5a:fe:bd:51:
7e:45:54:7c:65:64:7a:ec:d8:3a:d9:a6:84:dc:ef:af:ef:74:
cf:37:b9:fc:e1:71:b1:44:ba:01:17:0f:9d:3a:e9:75:4f:81:
21:ef:90:8b:58:62:f3:fd:45:1d:54:07:2d:c8:b1:d7:e5:09:
37:80:ca:85:2a:31:3f:00:24:00:5b:2d:10:34:5e:02:2d:1a:
f2:19:28:ee:a0:3f:0d:4f:4f:b9:bf:c3:b1:cc:de:96:23:c4:
45:f3:b8:9c:4c:ed:58:0c:af:5b:35:70:45:c6:5e:e0:2a:be:
ac:6b:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:34 2025 by rpki-client