Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: X/sOwS+Y2emEDV69Mia2l3Zx7ocNlsssKU9zyCjDj4M=
Subject key identifier: 32:7E:CF:BE:1B:67:1A:5C:CA:7B:56:FA:32:AD:EC:01:A5:A4:BA:07
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 0194BD854E283D88231EA4213D2CD2E6782E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (hash: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: VeB42CbsPVjkuSN8S1HvT0CKXmUuLQ+bSkDDwIK7kNE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:28:3d:88:23:1e:a4:21:3d:2c:d2:e6:78:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=327ecfbe1b671a5cca7b56fa32adec01a5a4ba07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:94:d6:17:07:32:ed:48:aa:b4:21:50:07:
b5:7c:1e:8a:60:b9:dc:e1:58:cd:37:fb:70:fd:22:
9f:70:b7:81:ad:4e:25:fc:a5:4b:22:3b:67:32:f0:
ee:70:83:b9:01:19:85:3d:78:e5:04:d3:f6:52:a8:
b6:12:40:61:92:43:c9:3c:0b:e3:08:ef:92:f8:ce:
ad:9d:c0:8d:d4:02:ca:8b:88:8e:ba:60:4f:5c:33:
72:88:64:55:5e:32:c9:eb:eb:17:17:4e:8f:28:c3:
9d:82:db:82:a3:57:cd:c4:8e:28:f9:e3:e2:97:39:
ad:41:d7:4f:36:bd:7f:94:a1:a5:ad:ae:d5:88:ab:
d4:22:7f:e2:be:a2:4a:ac:88:6e:55:13:1a:51:36:
98:dc:77:e0:bd:5d:36:5e:f6:e6:ce:7c:01:cb:28:
53:e2:16:db:22:44:5d:ac:3c:8f:19:6a:81:fb:11:
18:a0:64:b0:6b:ae:d5:fa:03:d7:96:0b:71:8c:38:
0c:e2:f3:54:50:44:eb:1b:46:c0:95:f0:97:61:24:
0a:13:eb:9b:a6:fc:1e:1a:fa:6a:f2:eb:56:ed:ef:
84:5c:82:71:0a:4c:bf:63:47:a8:48:c7:de:44:c2:
22:6b:84:45:f3:b3:8e:b2:51:08:50:9e:dc:2d:66:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:CF:BE:1B:67:1A:5C:CA:7B:56:FA:32:AD:EC:01:A5:A4:BA:07
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:df:fd:0f:a0:03:b2:bd:9c:3f:4b:57:86:7e:92:8f:1a:29:
40:5b:62:a7:f4:6b:94:65:fc:35:58:23:95:0c:2e:ee:79:93:
29:39:73:dc:c2:04:96:81:d6:38:ac:4c:c5:72:10:4b:6c:02:
0b:73:af:84:db:04:c0:95:38:84:22:53:cd:f3:40:a2:c4:64:
f2:34:32:40:07:54:97:76:fd:79:e1:45:d2:8b:be:fe:8a:3f:
b8:19:50:01:d9:3a:d2:77:fa:0b:6e:a6:ac:3e:a5:78:57:8a:
a4:4b:8c:48:82:19:09:d6:b9:5d:08:d5:98:51:1f:5b:97:ba:
e3:8b:0c:91:35:37:0e:af:68:81:32:a2:1d:65:92:07:a7:56:
b6:47:03:3f:6d:9f:7e:f7:05:f5:d9:71:49:d0:ec:22:79:68:
46:c1:33:19:33:25:0b:0b:4c:92:7c:42:a0:b7:33:75:2d:70:
1c:5b:1c:01:81:d2:21:5f:a6:9f:c0:28:e0:27:34:f2:1d:b4:
c2:0b:4a:22:1f:ca:1e:93:de:a4:50:f7:8a:f3:31:08:69:10:
de:38:46:b8:29:fc:fb:c2:81:a3:68:d4:28:88:4f:b6:17:92:
bc:b1:08:ae:77:85:34:ff:12:47:11:5f:09:a6:e0:29:14:4d:
6c:48:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:36 2025 by rpki-client