Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
File: gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft (raw, json)
Hash identifier: +0g8ytwBrGByXTsyPw1/vqsuE+2nost1kGqyI30b0Ds=
Subject key identifier: F9:B5:07:2E:54:D2:6A:41:AD:48:A1:97:93:EA:8A:12:BA:0D:CF:D8
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 0195E159021B46947A1AA0ACF78C93B4A2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
Manifest number: 07ED
Signing time: Sat 29 Mar 2025 10:01:01 +0000
Manifest this update: Sat 29 Mar 2025 10:01:01 +0000
Manifest next update: Sun 30 Mar 2025 10:01:01 +0000
Files and hashes: 1: gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl (hash: FjPdLANC2fahOiqSHRPVprcRJe3Xd3LulU+d5U8U2Ug=)
2: h8JOFdoRpj6qGDNJuivBHNvrSRk.roa (hash: Vj2EQ4BWrvbCavVD4y/JlI7mb4cVKOnw+wqYqtWQ88Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:02:1b:46:94:7a:1a:a0:ac:f7:8c:93:b4:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: Mar 29 10:01:01 2025 GMT
Not After : Mar 30 10:01:01 2025 GMT
Subject: CN=f9b5072e54d26a41ad48a19793ea8a12ba0dcfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:64:4a:07:e7:30:26:c3:dc:dc:1a:5b:e3:
e1:4e:e2:57:c2:8b:fe:43:2f:98:69:58:41:fb:42:
92:3f:fc:45:ff:bf:95:e4:e5:35:25:d4:f3:46:a0:
92:b7:b5:69:c7:36:06:55:a0:f7:21:b2:f3:30:c5:
b5:9d:b3:e3:87:eb:8f:56:7c:f8:4d:30:8b:fb:1f:
bd:96:af:ac:bb:72:94:4f:86:3b:19:48:d6:bd:05:
4d:bd:cc:76:a5:02:51:1f:d5:8a:4e:1c:51:5f:c8:
9a:cc:b7:6c:f6:95:fd:9d:6c:e6:06:d9:4d:cc:76:
51:7d:2f:b5:b7:96:c9:40:48:7b:bb:a6:d6:21:13:
94:fe:3b:7e:5b:0b:5a:90:c7:f9:9e:36:1d:7a:ff:
38:9a:f2:0a:4c:cf:4e:68:81:22:c3:00:1a:4d:3f:
e2:0a:a3:8b:a7:98:fe:7a:d6:fd:12:c6:4d:5c:0d:
76:43:f8:d8:41:da:7b:30:d8:4d:77:61:44:da:a8:
5e:26:be:62:8c:08:4a:81:70:b8:01:66:53:35:18:
54:c1:8d:08:18:ea:ec:95:94:58:5b:c2:bd:0d:aa:
23:e1:27:7f:73:ca:8a:ef:10:0a:a4:ab:2d:a4:63:
4e:d0:6e:5e:96:c4:68:a5:9b:6e:82:c0:e6:a8:b9:
48:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B5:07:2E:54:D2:6A:41:AD:48:A1:97:93:EA:8A:12:BA:0D:CF:D8
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4c:77:48:42:c0:17:19:03:54:52:ed:82:0d:82:41:2e:bb:
69:f7:a5:46:5f:f7:3e:cd:01:c4:a6:c7:68:f4:17:ca:c4:3c:
e0:0d:2d:2e:64:62:c2:58:d3:64:fb:4f:84:7f:b6:13:fb:ca:
8a:30:f3:79:0c:8a:cf:4b:f2:6a:49:93:6c:3d:2b:f4:76:00:
c6:29:e0:a0:24:ee:a2:1d:0e:65:12:12:97:10:20:8d:78:cc:
9b:15:81:21:55:39:18:c2:1c:c5:8e:73:6a:3b:1c:99:83:72:
7c:dc:cf:50:c8:c3:09:d0:72:6d:8d:d3:1c:6f:6b:44:a7:12:
5a:7f:e9:b8:fd:ab:fc:10:d9:c1:ca:17:44:ee:62:49:77:5f:
e3:26:95:80:a8:eb:fb:ee:84:8f:ee:9d:cb:e1:00:e9:86:31:
5f:66:5d:1b:4f:a3:20:e9:61:43:39:2f:d2:61:e8:1b:48:57:
2e:cc:af:f0:a6:8f:99:42:42:88:05:5c:44:61:6d:ed:23:f7:
3b:02:36:47:f8:77:45:0b:ee:a0:2a:12:55:2a:72:29:18:b4:
48:30:c2:12:10:4d:97:1d:1c:29:4a:f2:70:c6:da:9b:ea:0b:
7e:3c:ec:2a:4d:ea:22:0f:81:d7:bd:dd:b3:0f:14:3b:56:f9:
c4:cc:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:15:28 2025 by rpki-client