Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.mft
File: gNMdJca4jw1Qptcpi0855u0i90I.mft (raw, json)
Hash identifier: q5CPXtQfEvWY1RScwRKcAiakqjO3blkwG5oI2+wmX0s=
Subject key identifier: EB:67:BA:08:23:2B:99:35:F0:2B:7C:4A:8E:64:52:D7:65:2C:8E:CB
Authority key identifier: 80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
Certificate issuer: /CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Certificate serial: 018986226D8F66C549DAB3E4F2EEF6CA8E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.mft
Manifest number: 0875
Signing time: Mon 24 Jul 2023 04:22:30 +0000
Manifest this update: Mon 24 Jul 2023 04:22:30 +0000
Manifest next update: Tue 25 Jul 2023 04:22:30 +0000
Files and hashes: 1: RzIzgQdkGweHapAd18zKA9kKnQ4.roa (hash: QhxFU2NIWR1IWU9bDQCXd68koEUZzob0XfVJp6w+Bmg=)
2: gNMdJca4jw1Qptcpi0855u0i90I.crl (hash: uXTGb7ts6cO1KULbgtmOwejSw57f027van4pqNv82BQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:22:6d:8f:66:c5:49:da:b3:e4:f2:ee:f6:ca:8e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Validity
Not Before: Jul 24 04:22:30 2023 GMT
Not After : Jul 25 04:22:30 2023 GMT
Subject: CN=eb67ba08232b9935f02b7c4a8e6452d7652c8ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:bc:de:63:8e:c2:fc:62:52:16:c6:43:5c:
88:a1:7f:87:70:0d:4e:7a:2d:fa:ed:41:d3:04:39:
d4:8f:3c:6f:b7:41:a3:7e:a1:0a:3b:8a:3e:23:c5:
5a:68:b8:01:4f:00:96:06:39:69:3f:df:dc:a2:04:
20:9e:f0:48:ef:11:3b:20:4a:31:ca:8c:94:1e:2c:
c7:37:d4:ec:51:00:a4:89:6e:08:70:31:f1:d8:e3:
44:c2:06:54:e3:74:02:d4:4b:86:13:d1:27:e8:46:
b0:d6:37:84:a1:c8:15:bf:7a:9d:9f:d2:91:61:44:
7f:32:70:b1:51:3d:cd:9e:c3:f8:24:a6:4f:27:2d:
c3:5c:88:0b:a6:ff:29:9c:9d:e9:17:71:9d:9b:34:
2f:1a:c0:91:59:13:e0:71:85:e5:c3:2f:99:8e:6f:
a5:fb:ab:5e:43:06:ba:c0:1b:af:24:cb:cb:65:84:
ab:a4:44:9e:fd:69:1f:b5:5b:c4:5e:a2:80:7f:f9:
7d:aa:f3:5b:3c:2e:81:e4:81:54:08:8d:44:73:06:
ba:69:3c:e0:35:5a:7b:92:66:00:87:5b:92:5b:d7:
80:eb:a0:4e:76:c0:44:e3:fb:9e:d1:0a:76:72:cd:
6d:35:e1:e2:59:1a:49:85:e4:3a:03:18:5f:08:d2:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:BA:08:23:2B:99:35:F0:2B:7C:4A:8E:64:52:D7:65:2C:8E:CB
X509v3 Authority Key Identifier:
keyid:80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:19:73:85:97:86:34:a1:bc:40:b0:68:6d:ee:58:53:4d:
6f:7c:f3:36:2c:48:37:33:00:1a:2b:b4:68:3c:9f:f3:6e:cc:
c2:90:d6:d1:63:c2:9a:84:41:2a:44:27:69:88:3a:aa:61:98:
64:a2:32:9e:bb:7f:1f:a9:17:71:55:89:3a:4a:d9:49:cc:81:
d0:72:47:03:ce:9a:d8:03:4e:ae:7f:4e:f4:a7:56:5c:b2:95:
52:db:d4:e6:cb:56:64:df:a5:19:f7:78:f1:6c:14:92:ee:1e:
d9:b8:10:18:05:26:b6:ba:e6:63:5e:99:cc:27:24:55:95:9a:
32:8c:85:92:ee:eb:e8:5c:04:e4:bd:91:aa:ae:25:08:e4:8d:
69:a3:7c:37:d0:78:6d:58:96:1d:d0:89:6e:5a:bc:ea:50:4a:
cc:e4:cf:1d:c3:a9:98:84:76:32:d6:8e:9e:51:79:d4:3d:88:
a9:e1:89:9c:97:be:2a:e4:e6:31:71:b7:b5:2a:e3:7e:e7:e7:
00:01:5a:a9:fc:d0:0c:4a:6c:1f:45:31:94:5e:7b:31:56:14:
94:b1:27:95:a6:c5:16:84:66:06:c7:63:f8:02:59:7f:ce:cf:
26:97:24:2a:f1:c2:71:28:02:24:0a:d1:fa:19:18:e6:f3:d6:
e7:b0:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:52 2025 by rpki-client