Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
File: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft (raw, json)
Hash identifier: bIJOljpjkp3KTW7omO+TjQBWpq0A8lakJLTYdFVoSWQ=
Subject key identifier: 08:3E:67:7E:EB:53:29:96:70:AF:37:C8:E9:9A:37:D9:F4:1B:9D:AA
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 0194BD4E6A5079F85C0FA6AB4D4C49E998E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 1-NjDfK_nvVHtInlwB4n1ihBDusI.roa (hash: 51SSwaurBjP3sf/0P7WAI9i83HTjmsNiDA8wld4VpT4=)
2: GdpNbhRYxOd8aGRbdVnrsBhS_9s.roa (hash: GISJuo4rSYb3LIrT2Jj8iCtLWGFi5eIs0FwlpUwhIWU=)
3: gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl (hash: rA9zLbolab/fzfatqHdNHOLKobHwv52B3v8a9MCu6vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:50:79:f8:5c:0f:a6:ab:4d:4c:49:e9:98:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=083e677eeb53299670af37c8e99a37d9f41b9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:d0:4b:5d:39:57:93:f3:5e:43:44:a0:96:
2a:e7:65:b8:f3:86:be:76:47:b0:1b:1a:52:7d:03:
dc:a0:65:b4:55:0b:32:9c:37:85:e6:44:d7:3b:7b:
a5:b9:81:d9:3a:2d:3d:03:4e:d0:30:ff:2e:5c:88:
d2:8d:e1:1a:a7:c5:98:50:1e:70:f0:bb:b5:1d:44:
c5:4b:42:72:fe:dd:57:94:dc:04:2b:12:40:fc:2e:
b5:bb:5b:e4:02:4b:29:af:e2:18:c4:e8:22:92:73:
8a:1c:ef:12:95:be:f2:a2:00:45:05:0b:0d:a6:66:
dd:20:51:72:f3:26:b3:bc:66:1d:47:f5:af:11:9e:
a2:ee:9c:bc:c5:37:96:70:ec:0a:66:d0:57:f4:1b:
4d:de:6a:17:9c:3b:92:2a:4f:80:ef:38:6d:48:19:
9c:c0:50:e1:fb:08:5a:1d:04:76:4c:c8:8b:e2:af:
74:e6:62:72:1c:00:d8:60:75:fb:6e:23:31:59:b9:
8a:90:dc:3e:eb:02:0e:7d:88:34:01:ac:80:85:9a:
ae:3f:64:76:77:db:da:49:28:9a:ef:99:fc:45:18:
5b:d7:8e:cf:1a:31:92:24:05:c0:c5:60:aa:f3:dc:
b2:66:de:3e:8c:76:81:bf:8e:8e:ef:da:04:03:c5:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:67:7E:EB:53:29:96:70:AF:37:C8:E9:9A:37:D9:F4:1B:9D:AA
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d0:44:75:47:6d:75:62:53:b5:ba:23:63:8c:3c:9f:77:35:
41:d1:86:ba:21:64:33:4e:5a:6e:57:63:ea:31:13:4a:cb:c5:
1b:a2:4f:e8:4f:17:8f:f1:31:8d:d4:4d:49:c4:9c:9d:90:87:
8c:93:f2:8a:b7:40:b3:dc:ed:e2:92:c5:d8:07:1f:67:4a:d2:
1e:fd:4c:74:34:f0:8b:4e:9a:db:6f:d7:0f:34:01:ca:be:e4:
ca:92:56:b3:db:13:bf:e9:86:a2:b6:8a:28:f0:13:55:d3:46:
e3:83:a8:df:ab:bd:25:79:b4:c8:cc:db:4e:c5:3d:e3:c1:c8:
2c:dd:06:1b:01:26:3d:e8:64:41:a3:c8:7d:a1:71:50:e1:4b:
0b:07:9c:9a:59:7c:e2:73:1f:96:e8:0a:44:a9:cc:15:12:54:
9c:7c:ea:e7:04:96:47:33:4e:db:90:1f:45:4b:68:5d:0b:b9:
92:11:05:8a:98:0c:ba:72:ef:01:60:42:3a:aa:a8:f1:88:66:
bb:86:39:b0:63:7b:cb:ee:88:44:3d:f4:6a:31:46:1a:86:19:
d8:1a:66:af:a1:84:72:53:1e:a8:77:04:94:b0:57:b3:72:a2:
da:9b:a1:16:ea:f0:3b:b2:c8:58:9e:2c:1f:2f:ae:11:05:71:
99:14:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:04 2025 by rpki-client