Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
File: gXFLKnOMo96ukVr4fDqRxhPhvEk.mft (raw, json)
Hash identifier: ZVM0h17tm3UHmEw8hJTnMJILc0wZix/j47kr7nsjwB8=
Subject key identifier: E0:E6:F4:59:D5:15:DE:88:D6:D1:D2:9A:2B:65:F3:E1:D4:87:01:90
Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Certificate serial: 0194BBCEE72DE37C31A77E665E4C26306F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
Manifest number: 04B0
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: gXFLKnOMo96ukVr4fDqRxhPhvEk.crl (hash: T0ZJKBsLlekc7GhMyeirCqL7nubHXRlqTmJJxHQn5PE=)
2: puvubvKJAYg7r6mXBIAyb_AGzB8.roa (hash: GM5+sjVJG/v0mBOXZh/kGPDkPN3npBN1lUlwDZuz3ng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:2d:e3:7c:31:a7:7e:66:5e:4c:26:30:6f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=e0e6f459d515de88d6d1d29a2b65f3e1d4870190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:4d:1b:c6:3f:fc:4b:c6:4c:5b:a7:8c:74:
77:72:3e:25:ad:26:a8:54:44:9b:f8:95:14:28:7d:
f6:43:9f:8d:46:ab:62:3f:ec:eb:82:db:9c:dd:14:
79:1f:98:f6:27:cb:4c:c1:f9:9b:49:75:e5:49:44:
fe:08:75:73:49:b6:b8:b3:b2:2a:e9:77:26:d8:60:
bb:1c:48:7e:01:45:e4:23:fc:d9:54:fc:bd:63:0e:
75:c9:14:69:ac:a3:e1:7d:16:65:2c:09:14:94:97:
c9:b7:78:46:62:d6:79:32:c4:66:de:37:9a:08:79:
3d:a0:a5:e3:84:80:70:3f:e3:29:95:ca:6d:1b:4a:
8c:e0:dc:0e:70:13:a8:60:76:40:d6:bc:26:c0:7c:
9a:e0:8b:34:fc:7a:94:4c:7f:f6:0c:9c:05:e0:f2:
04:dc:50:bc:21:ea:1f:8a:1b:17:a9:86:dd:07:6b:
27:35:cf:e6:bc:bd:95:23:a2:5b:a4:14:93:4c:c6:
35:d3:e4:14:80:ee:a5:6b:64:67:99:ae:db:35:30:
4c:0d:76:1a:07:12:17:84:b0:45:c8:e6:9e:5e:37:
48:40:d0:4f:bc:00:b6:f3:9f:77:1a:ea:ec:be:23:
fc:1c:1d:20:89:43:e4:43:6f:a0:12:87:d4:de:c9:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:F4:59:D5:15:DE:88:D6:D1:D2:9A:2B:65:F3:E1:D4:87:01:90
X509v3 Authority Key Identifier:
keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:43:aa:2d:47:9a:5c:24:5a:e0:d3:a8:9e:01:6a:3a:18:
7e:6c:59:80:0e:1e:97:ba:92:f9:19:3a:d9:e8:0d:ea:e2:a4:
26:10:f4:a6:65:22:eb:42:77:ae:45:1b:ea:3f:b3:fc:48:18:
b4:ca:a0:3b:3d:e3:28:bd:e3:d2:35:c1:1c:54:d7:55:be:1d:
78:56:11:24:6d:10:b7:7f:13:90:b6:a8:d1:2d:5d:3c:bb:38:
26:a3:67:38:8d:20:53:77:be:ee:a6:3d:26:bb:93:4f:53:63:
36:f8:ef:de:86:78:fb:67:47:97:f6:cc:74:89:d8:3d:6a:7a:
35:8d:fa:25:92:47:21:ab:6b:f2:34:f2:35:3a:cc:48:5e:e8:
5a:5d:db:e6:b1:95:e8:f4:99:59:c0:b0:ec:f5:59:09:d0:24:
dd:4c:d5:e4:3c:10:df:ed:e9:ae:c2:8d:aa:4f:bc:9a:b6:d6:
0d:58:21:b7:93:d7:7e:6d:11:24:a4:3a:70:48:97:37:24:6e:
50:63:a7:90:16:74:7b:92:cb:a4:cf:18:a6:41:3d:3d:ce:78:
0c:45:e9:15:dd:54:5a:ac:c4:28:21:87:9b:ef:72:c4:6f:9e:
79:58:c8:3d:8d:0d:0e:09:70:7e:d8:76:85:fb:1e:0c:d1:c6:
a4:21:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:30:16 2025 by rpki-client