Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier: kEPkIGVF4Fzgs8Lhp3fpba+DyJ0VS9FkQG+gYSqes5w=
Subject key identifier: 4B:71:BC:5D:F9:FB:F6:5C:4B:15:1F:D2:A8:89:E9:F3:A5:B8:28:13
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer: /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial: 0194BC732BFA4FA0D76EA7DCC3332A2BA44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number: 0EF7
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: 9Wt7MxH1HGoDYEHk8HQG/0EhL2ic4R+9o1CXZ+zJOuA=)
2: fhVodD3Al80st-44wh_3zJPa9hw.roa (hash: fjogseqmXaDswGCqZQtmESnsh5NfjXgWetNNokS6YuY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2b:fa:4f:a0:d7:6e:a7:dc:c3:33:2a:2b:a4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=4b71bc5df9fbf65c4b151fd2a889e9f3a5b82813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:43:5a:0e:42:b4:6a:e6:f7:8e:fb:19:07:
67:9d:b9:c0:21:dc:1f:b5:26:d7:77:f9:39:64:e0:
c7:b1:90:bc:50:26:51:23:1b:bb:74:70:35:70:5e:
8e:de:fa:10:b5:c6:5a:e4:d6:0d:bd:92:2f:79:5c:
6a:4b:0c:f1:77:30:88:85:29:15:c7:c1:5a:b7:d6:
0e:9d:0e:31:a8:f2:3e:99:58:89:17:45:1b:4d:3f:
7f:6f:2e:a8:a8:63:4c:20:50:c0:cc:cb:29:cd:f0:
b5:37:74:f1:25:14:6b:56:87:0f:39:11:b5:74:c4:
7a:1e:2e:b7:72:3a:39:f0:a7:2d:fb:56:b5:a6:3e:
bb:4a:8c:09:e5:2d:5c:dd:a5:c1:56:4e:1d:46:77:
ec:17:51:79:90:58:9e:3e:e0:31:6b:a2:49:73:95:
b5:58:ee:50:c8:c5:17:f4:a2:0d:71:34:86:0d:d7:
3f:62:30:fb:c6:bf:7c:53:7b:56:b1:81:ad:14:b9:
34:25:96:f7:94:25:cc:15:8b:ba:68:81:ac:11:79:
88:2a:13:06:87:87:fa:a8:2c:b0:ac:67:05:7a:01:
46:51:82:f4:3a:63:b3:f5:0e:80:27:25:c3:43:91:
34:08:77:b7:c5:8d:50:c4:ef:8a:27:7a:e1:3a:4c:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:BC:5D:F9:FB:F6:5C:4B:15:1F:D2:A8:89:E9:F3:A5:B8:28:13
X509v3 Authority Key Identifier:
keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:9d:ac:f2:80:d0:f3:c3:f2:9d:61:e0:b3:68:09:0d:ce:
20:22:18:04:ed:5f:7d:d3:33:fa:54:b7:e3:b8:b1:fd:ad:aa:
a5:91:ba:8c:9e:30:9e:59:82:97:e5:67:23:e8:7c:a9:b7:b2:
b4:6a:f7:12:9e:b0:e7:b0:22:10:30:92:8f:6a:75:60:18:b7:
68:60:e9:63:22:2b:aa:4a:b7:fd:b8:2a:7f:5f:21:40:c6:69:
fc:87:72:8a:02:76:17:6d:ed:31:be:ba:f4:34:e2:4c:34:5d:
25:fe:67:fb:ba:bc:aa:f4:98:49:8b:ca:b2:b8:3f:5d:52:3b:
ed:83:d7:69:2f:cd:38:95:b9:b9:90:d7:61:f5:60:54:fe:11:
3a:1e:31:ae:ba:5a:e6:2c:86:26:dc:be:29:77:e5:06:fe:1f:
0a:ee:dd:d0:a8:41:36:0f:9e:52:47:bb:f8:45:f4:22:6c:3a:
d2:66:ae:03:94:9d:56:4f:d4:fa:fd:8f:45:d3:39:02:77:a0:
3a:60:1c:50:90:7a:1b:3c:25:7e:85:9a:b5:76:92:3f:f6:23:
e8:9b:82:ca:5d:3f:ec:56:fc:8b:23:f2:36:6d:3b:62:6b:b9:
16:40:0a:b7:3e:8d:bd:60:e7:f7:ac:ab:de:f3:8a:0e:b4:4a:
2e:ad:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:29 2025 by rpki-client