Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/gGbLxfcfLArHq3JUgdxCMZnw1Q4.mft
File: gGbLxfcfLArHq3JUgdxCMZnw1Q4.mft (raw, json)
Hash identifier: haBljL+L3ITlzGsXs0uwpJK0gI3GTf1L98DZjvG6g70=
Subject key identifier: 8C:C6:BA:69:AE:B5:83:1D:52:36:CF:7B:A2:4D:F8:AB:17:99:72:30
Authority key identifier: 80:66:CB:C5:F7:1F:2C:0A:C7:AB:72:54:81:DC:42:31:99:F0:D5:0E
Certificate issuer: /CN=8066cbc5f71f2c0ac7ab725481dc423199f0d50e
Certificate serial: 0184D2E71F59B611537768B77D4AF7DD9F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGbLxfcfLArHq3JUgdxCMZnw1Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/gGbLxfcfLArHq3JUgdxCMZnw1Q4.mft
Manifest number: 0BA0
Signing time: Fri 02 Dec 2022 12:54:32 +0000
Manifest this update: Fri 02 Dec 2022 12:54:32 +0000
Manifest next update: Sat 03 Dec 2022 12:54:32 +0000
Files and hashes: 1: gGbLxfcfLArHq3JUgdxCMZnw1Q4.crl (hash: 95T6QKIroaHq9kgADCOnT2QATcPYke/mGgaBKhvbwPI=)
2: nz8HDFB0jKzzVLYlO5oFWyCESq4.roa (hash: YVeCsqtRM2gO3fQ79ZUuNJWEoZHgHyRgukrilQh+qKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:e7:1f:59:b6:11:53:77:68:b7:7d:4a:f7:dd:9f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8066cbc5f71f2c0ac7ab725481dc423199f0d50e
Validity
Not Before: Dec 2 12:54:32 2022 GMT
Not After : Dec 3 12:54:32 2022 GMT
Subject: CN=8cc6ba69aeb5831d5236cf7ba24df8ab17997230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:f6:a7:5e:c2:eb:aa:ea:3d:40:da:b4:5b:
cf:79:07:db:2d:fa:4d:8a:00:95:49:e3:5e:e3:a9:
73:1d:3b:3e:1e:c2:27:85:b0:89:a4:4c:a6:65:0b:
c7:e4:40:59:a8:78:3d:82:af:b7:28:56:91:ae:32:
c7:79:e9:75:1e:44:dc:a0:7d:07:2d:37:f5:03:7a:
1f:55:df:63:51:14:ae:52:81:3f:1b:d6:b0:c8:eb:
82:f7:de:79:30:63:54:54:06:8c:13:dd:f8:80:07:
aa:90:f2:04:6b:97:ca:27:a5:16:ad:e7:b3:4c:01:
7c:8d:df:44:02:0d:ff:58:17:2f:25:4f:46:b1:ce:
c7:76:a5:8c:1b:a2:7b:98:55:9e:01:55:28:cc:92:
82:4e:61:38:9f:5f:b5:25:e3:7d:78:ab:cb:e1:c2:
f3:af:4e:1f:a6:b4:72:c4:c1:e0:4e:a6:8a:c4:42:
90:07:26:b9:03:36:44:e5:16:bc:99:49:10:16:6d:
15:7a:d3:a4:3f:f2:7e:0c:74:c9:96:1e:63:01:95:
1f:43:1a:1b:72:d0:b2:63:0f:5b:b1:01:58:a9:cd:
05:84:ca:0f:cb:b0:d3:4a:2e:82:62:6f:dd:6e:ff:
94:f5:11:44:cd:b9:41:22:6b:29:40:8c:f1:98:6a:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:BA:69:AE:B5:83:1D:52:36:CF:7B:A2:4D:F8:AB:17:99:72:30
X509v3 Authority Key Identifier:
keyid:80:66:CB:C5:F7:1F:2C:0A:C7:AB:72:54:81:DC:42:31:99:F0:D5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGbLxfcfLArHq3JUgdxCMZnw1Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/gGbLxfcfLArHq3JUgdxCMZnw1Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a3d3f5-80f0-4106-9a82-57655bb1dbec/1/gGbLxfcfLArHq3JUgdxCMZnw1Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:c7:15:9a:f7:f9:9d:e9:85:c4:34:7e:9f:7d:dc:77:54:
37:13:e7:ba:dd:67:19:47:5d:2b:84:2e:0f:e2:e9:19:c1:11:
46:84:1f:f8:3c:a5:f6:d6:a3:ab:80:63:aa:5a:36:10:d5:06:
39:1a:ac:89:71:e4:74:b8:d6:2b:cf:4d:30:52:1a:eb:08:bd:
64:fe:5d:11:dc:9c:e7:2b:9b:64:3c:69:f4:8e:ad:37:6d:ff:
77:7a:6f:9d:0a:10:e5:36:3f:1c:b3:d1:4e:01:f5:cd:4f:b6:
3d:e7:05:d1:58:2e:c7:58:0a:a9:fa:34:27:8d:32:cb:55:eb:
2c:44:65:bd:f6:b5:f8:d1:2b:64:a5:f4:a8:1f:6c:0e:2c:ba:
93:9d:44:37:ed:0e:ab:5d:8e:cd:82:84:cd:0b:57:73:d9:97:
70:c7:b8:fd:6e:66:72:86:b3:07:fd:74:5f:1e:b2:85:44:d2:
ca:74:3a:b4:de:fb:00:a2:d9:62:bc:ee:99:41:ef:4e:bb:2c:
c2:f0:bf:78:9f:ef:4b:fa:d8:df:4d:3d:42:47:d7:02:12:44:
92:95:bf:22:9e:10:80:44:a6:87:07:c2:f2:4a:e0:cd:18:93:
f7:78:7e:53:68:15:64:09:7e:e2:60:57:86:d8:40:c6:fe:ef:
dc:4e:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:54 2025 by rpki-client