Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.mft
File: gWAcIhOLVxnEAn7ude90Z5zmjKk.mft (raw, json)
Hash identifier: gh+PXUKHfenEjtB/edR3LDRpFrYkGYKv104hphCAHfs=
Subject key identifier: C1:41:84:B6:B4:6F:DD:1D:85:80:E7:77:5B:C1:34:1B:D5:91:D0:BB
Authority key identifier: 81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
Certificate issuer: /CN=81601c22138b5719c4027eee75ef74679ce68ca9
Certificate serial: 018B3AB89257B53654531BA00012C7D80EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.mft
Manifest number: 087E
Signing time: Mon 16 Oct 2023 23:00:56 +0000
Manifest this update: Mon 16 Oct 2023 23:00:56 +0000
Manifest next update: Tue 17 Oct 2023 23:00:56 +0000
Files and hashes: 1: Dx-nEiZWa7VtVjTCwO24UG1vpOM.roa (hash: N9/Wwf0HeAEAYarJ43DM3U7PvLHyrn3rc1Z8+S6sAy0=)
2: VveoBbup7SfAtR0ci5-_QYePHmQ.roa (hash: H60Yc8ajoKKSRYyZr69I9lN7ta6BvFix35sc+VvI604=)
3: gWAcIhOLVxnEAn7ude90Z5zmjKk.crl (hash: egsWcgfyAUDiQ9hRMOdqGR3SctT6QX0PSL2Jc39iYAg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:b8:92:57:b5:36:54:53:1b:a0:00:12:c7:d8:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81601c22138b5719c4027eee75ef74679ce68ca9
Validity
Not Before: Oct 16 23:00:56 2023 GMT
Not After : Oct 17 23:00:56 2023 GMT
Subject: CN=c14184b6b46fdd1d8580e7775bc1341bd591d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:7f:a6:3c:7e:ad:77:ac:58:db:23:42:98:
e2:f3:a6:8f:b1:4f:3e:b6:eb:73:66:86:8e:41:ad:
a1:6e:4d:4c:1d:60:4d:56:ea:ff:5e:af:ac:9a:b3:
2f:36:4f:0f:e5:06:ba:4e:b9:d6:cc:66:86:e2:c3:
70:36:61:73:a4:d1:d7:86:da:e3:be:56:10:d4:7d:
2f:01:63:7a:99:02:52:ef:6f:99:5a:e0:92:14:9a:
8f:45:5a:aa:c2:be:b9:a7:05:e5:9a:dd:53:88:ea:
96:82:1a:7e:cb:a4:e0:20:9a:5f:d5:9a:c3:11:13:
2c:d6:7c:0e:70:0f:ff:ee:37:11:f3:2b:2e:0d:f4:
68:a1:5c:b5:70:a7:f1:49:c5:43:4e:7b:ab:8a:e7:
00:5c:f0:15:99:60:ec:eb:3f:6b:88:84:47:db:ed:
3c:72:65:c5:d1:91:0e:a9:22:ff:c6:c3:05:26:f8:
10:26:d7:db:29:be:a3:91:a5:43:b8:f3:37:89:4c:
61:05:b8:7a:a8:7f:d7:14:11:b4:ef:b6:b1:0c:13:
2c:f2:23:25:03:95:c2:1d:17:55:63:e4:c6:c6:59:
28:0b:98:3e:8c:b4:5d:61:48:0b:a9:85:79:4e:11:
b1:13:b9:bf:5e:44:52:2e:07:24:4e:be:e9:07:44:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:41:84:B6:B4:6F:DD:1D:85:80:E7:77:5B:C1:34:1B:D5:91:D0:BB
X509v3 Authority Key Identifier:
keyid:81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0a:1c:01:88:d7:fa:91:de:09:6c:91:1c:c5:34:7b:59:92:
c0:35:55:37:ab:ca:22:6d:ae:df:1c:dc:78:7e:7b:f7:e6:18:
71:23:6b:6c:e5:fd:00:41:67:6f:90:da:65:32:32:c8:aa:b4:
66:50:87:67:43:4e:f7:a0:a8:be:26:41:60:09:80:f4:52:8b:
ac:ae:8a:04:f9:a1:bd:35:63:65:e8:a8:7b:3d:31:37:c3:75:
2c:7d:55:9b:1e:63:ac:6f:7e:a3:cb:17:6a:a9:b6:a2:a8:32:
4b:cb:fc:af:27:ae:d6:91:d1:6c:0c:b6:2d:f0:49:33:f4:89:
4f:dd:f2:8d:f4:50:0b:06:c8:fb:6e:d5:2f:63:48:5b:9c:6a:
a6:bc:a5:ab:c3:ef:8f:08:85:ae:1a:df:5f:88:7a:99:16:c0:
61:70:4e:f1:c1:90:88:39:f4:10:ef:a6:cf:5b:e8:1c:ef:bf:
5a:1b:d8:70:5a:e1:04:5a:5d:79:ee:ed:be:42:d5:6f:1d:01:
d5:78:a1:5b:70:ef:e9:f7:12:31:0e:d8:d5:42:ae:91:74:54:
81:29:9f:34:3a:78:4a:c2:00:27:49:3a:88:cf:d6:1a:a6:6b:
ef:c6:57:eb:16:01:14:23:4c:c4:f4:f9:5d:7e:b9:f2:3a:d1:
6e:0d:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:30 2025 by rpki-client