Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/385866-a4c5-4a0a-8238-79f94b50ab2f/1/gtw79QfXHgIbdMxWPnHZ3QtCt54.mft
File: gtw79QfXHgIbdMxWPnHZ3QtCt54.mft (raw, json)
Hash identifier: ljpJA2nqanvVCTij6phATVy0oKEcRcGwK/2Jw33HSPQ=
Subject key identifier: 17:E9:3C:03:ED:B9:26:FC:21:BB:46:A3:47:8A:8A:FB:16:60:72:96
Authority key identifier: 82:DC:3B:F5:07:D7:1E:02:1B:74:CC:56:3E:71:D9:DD:0B:42:B7:9E
Certificate issuer: /CN=82dc3bf507d71e021b74cc563e71d9dd0b42b79e
Certificate serial: 018F26BB8A4C38098AA9DCFA821A04A81C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtw79QfXHgIbdMxWPnHZ3QtCt54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/385866-a4c5-4a0a-8238-79f94b50ab2f/1/gtw79QfXHgIbdMxWPnHZ3QtCt54.mft
Manifest number: 0196
Signing time: Sun 28 Apr 2024 22:02:55 +0000
Manifest this update: Sun 28 Apr 2024 22:02:55 +0000
Manifest next update: Mon 29 Apr 2024 22:02:55 +0000
Files and hashes: 1: DxvyOvX_B_53rxJwdrCQhrTrP1k.roa (hash: /QHPX7klgOVDwnIhNfRb5Qr8g1eXkb5fViTBEEXKy/Q=)
2: gtw79QfXHgIbdMxWPnHZ3QtCt54.crl (hash: oNQAy6LH5fjwotERBB5kQA+yYef18sKxKQhwb2hESDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:26:bb:8a:4c:38:09:8a:a9:dc:fa:82:1a:04:a8:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82dc3bf507d71e021b74cc563e71d9dd0b42b79e
Validity
Not Before: Apr 28 22:02:55 2024 GMT
Not After : Apr 29 22:02:55 2024 GMT
Subject: CN=17e93c03edb926fc21bb46a3478a8afb16607296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:dc:dc:c1:db:19:ee:22:47:1c:09:66:50:
aa:95:9d:10:6a:84:91:ca:46:35:ea:a1:6f:93:44:
97:1d:e6:98:15:2a:28:2f:46:51:78:cd:32:7d:ae:
61:b2:64:3f:60:d6:6f:fe:60:10:1b:08:35:10:54:
4d:46:8e:3b:3a:ee:78:da:38:bd:99:aa:49:0b:15:
cf:bc:65:d7:7a:30:b4:7f:5d:4b:3c:98:27:1f:cb:
50:83:c6:29:05:e5:5d:9e:08:7f:6d:a4:72:a9:b7:
e4:97:87:d5:71:ec:18:73:37:4d:ad:c7:a0:90:3b:
ab:a8:c4:ff:7a:b2:2e:73:65:bc:28:89:f3:35:aa:
db:17:21:2b:de:73:22:23:c5:50:ed:b5:8d:11:e5:
66:3b:b0:23:34:c4:b5:0c:4d:56:a2:10:91:0f:e9:
e5:14:83:fd:62:70:d6:4c:55:a0:3b:31:51:be:9f:
11:97:c6:63:03:06:f5:27:f2:1e:a5:e7:5d:c1:fc:
70:ea:68:5e:f8:fc:a9:d8:19:12:de:c8:3f:8f:fc:
cd:b7:69:85:4f:f8:70:e5:70:68:b3:0e:83:e7:f4:
3d:2a:d4:4c:f3:c2:f1:e7:58:a3:04:b3:89:cb:e1:
cd:9c:e2:ae:3b:a6:e4:aa:2c:5e:fe:90:e6:99:9f:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E9:3C:03:ED:B9:26:FC:21:BB:46:A3:47:8A:8A:FB:16:60:72:96
X509v3 Authority Key Identifier:
keyid:82:DC:3B:F5:07:D7:1E:02:1B:74:CC:56:3E:71:D9:DD:0B:42:B7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtw79QfXHgIbdMxWPnHZ3QtCt54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/385866-a4c5-4a0a-8238-79f94b50ab2f/1/gtw79QfXHgIbdMxWPnHZ3QtCt54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/385866-a4c5-4a0a-8238-79f94b50ab2f/1/gtw79QfXHgIbdMxWPnHZ3QtCt54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:55:1d:2b:bc:0d:7f:9d:96:67:50:c4:8f:be:2f:e8:58:03:
27:fd:9d:14:7e:8e:da:ea:78:4e:ec:32:db:58:5d:07:83:54:
5f:39:86:9b:3a:1b:42:8f:98:7e:63:66:c2:90:0a:ef:39:f5:
4f:5c:95:88:fe:17:6d:1c:c6:72:18:d6:a9:02:a4:bb:df:ec:
0f:c1:bf:72:41:82:3c:b8:38:2e:e2:88:2f:dc:8c:92:19:be:
58:69:f6:67:e2:0e:ee:7f:40:45:14:5e:c2:a7:f8:06:24:36:
a6:1c:91:b1:a7:d7:94:cc:c2:6c:a8:06:08:d4:55:2b:6a:76:
f3:96:99:5d:44:47:76:6b:d8:72:a9:85:98:bf:a8:81:4e:10:
01:0f:ec:af:42:4e:23:23:0a:92:3a:37:eb:fb:df:0b:c2:b7:
70:38:29:d1:af:d4:a7:1b:6a:cc:69:6d:cd:c4:f6:e8:91:b0:
7c:8a:04:91:08:20:89:4b:d5:5f:21:a1:aa:e7:0f:82:5e:63:
46:ce:9c:a7:6e:97:74:8e:c0:43:16:6b:3b:f9:01:1a:71:89:
b1:80:74:96:0e:10:45:3b:26:05:c6:b0:f9:f0:dd:f2:a7:20:
4d:df:4f:4c:84:ba:98:ec:41:63:28:a9:7a:a3:31:2b:36:6e:
1a:d8:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:37 2025 by rpki-client