Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File: gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier: YkyHJywVjSqD+dh5V19p9LFv+feHt/URtCQMOtX7npg=
Subject key identifier: 8C:DD:2E:C0:4F:A8:17:D9:A0:1C:29:03:9F:D9:3C:9E:B4:77:C3:8A
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer: /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial: 0194BD4E7911F1DDC0471F4E3A85CFE7E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: pKxmt2YQMMiuSKbCPyv+XNTGlsgxTKFtJ8IccWv+P6U=)
2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:11:f1:dd:c0:47:1f:4e:3a:85:cf:e7:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=8cdd2ec04fa817d9a01c29039fd93c9eb477c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:25:09:c8:93:53:14:df:0c:fe:90:25:0b:
e1:9d:40:78:1b:ac:72:96:45:a4:79:9e:02:f1:98:
7e:33:83:c8:fe:5e:da:4d:0d:d8:e9:45:97:1a:12:
98:5e:b2:f1:4a:c4:4f:9f:f8:0d:ef:58:f1:00:04:
e2:fd:72:af:bd:c5:1d:86:88:07:a1:bc:5e:a2:1e:
25:03:76:4e:6b:5a:76:a3:48:7a:e1:d2:92:99:56:
b8:70:7c:d3:63:92:0b:0a:c0:4a:54:b8:50:da:57:
39:de:f3:ea:f9:00:1f:df:14:d8:e4:d1:64:02:df:
cf:20:ee:81:fa:5c:3e:0e:70:1f:89:be:64:ab:1e:
fe:4a:1f:2e:46:e4:d4:ad:64:9e:db:a7:50:88:54:
17:f2:04:b7:23:95:4c:d5:a0:7c:bd:ba:f9:5e:b9:
2e:70:1d:2e:5a:6d:53:2f:d7:08:c3:b3:53:ad:c5:
35:be:ee:9d:9d:3d:a6:52:dc:fc:ee:71:74:27:d9:
6c:e3:d2:97:15:cd:1b:30:b8:cc:b2:98:4f:d9:7a:
6a:18:70:c8:f8:2d:d8:c6:c5:c7:b8:4f:bb:91:ad:
01:5d:e0:1d:54:24:8c:a4:65:5c:77:7b:9d:b1:b5:
27:46:1d:83:b1:58:ec:6e:2f:8e:f8:81:00:c2:47:
47:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:2E:C0:4F:A8:17:D9:A0:1C:29:03:9F:D9:3C:9E:B4:77:C3:8A
X509v3 Authority Key Identifier:
keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:85:29:fd:5a:c7:97:00:8d:fb:79:fb:73:0c:e7:cf:55:
9d:a2:0f:fa:11:3d:10:7a:3f:99:81:b5:08:32:88:5e:d3:7c:
e3:d7:b2:41:6d:dd:d6:39:7f:95:69:76:f0:5f:43:97:36:52:
a1:cb:ce:1f:bc:dc:69:76:b6:35:41:46:bd:b0:6f:a9:6c:25:
64:e5:0b:14:44:7d:15:35:bf:95:0b:36:54:9a:dc:97:6a:51:
b7:c3:24:5c:15:07:9f:74:4b:4d:e9:c9:2c:3a:44:3d:83:49:
ea:41:3f:b2:88:b9:ce:78:78:43:83:69:14:d9:ef:71:e6:29:
aa:3f:fe:10:17:c6:55:f0:ef:a8:ab:75:45:b4:56:f6:d1:f7:
e0:5f:f5:c8:d5:7f:ec:7f:1e:eb:1d:f7:dd:c7:bd:65:75:98:
76:6e:bd:13:6a:87:d6:f6:9f:a1:06:b5:21:3a:07:46:9a:29:
cc:39:e4:cd:d9:e6:1e:fc:fc:c3:0f:03:11:f4:1d:f3:57:b0:
97:44:d7:d3:4e:74:b9:25:24:ef:c3:e0:38:e5:67:b8:67:e4:
a2:9f:28:58:92:86:c7:9f:bc:a0:d7:32:52:db:d3:3e:2e:da:
64:a4:c5:b2:1d:4f:81:74:06:ef:11:50:6f:76:54:87:f2:70:
72:66:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:23 2025 by rpki-client