Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
File: gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft (raw, json)
Hash identifier: uEOzOhEKmmVyJEgTnADMSfKp3uQQZv822lnP+PCjpc4=
Subject key identifier: 6B:7F:69:21:67:2A:4D:77:26:6A:C0:06:EA:EE:67:CE:83:9D:4C:1F
Authority key identifier: 83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
Certificate issuer: /CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Certificate serial: 0195E0B4DD4AC52C683AB69BDF98AC4BE24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 07:01:44 +0000
Manifest this update: Sat 29 Mar 2025 07:01:44 +0000
Manifest next update: Sun 30 Mar 2025 07:01:44 +0000
Files and hashes: 1: gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl (hash: r9LV4d6b3zt28zAbfhnY4P4PXxt3CwRvjsP9ZTSSVjU=)
2: zMBNnU414lgd-NbPPxv6LfAwsv0.roa (hash: a4j1fjgcVTUDMcw7oEdiVT0gcdKWNK33wBEmeJ+tzqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:dd:4a:c5:2c:68:3a:b6:9b:df:98:ac:4b:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8324c5df19789d5259104e0ae0dcd4672a8e2bab
Validity
Not Before: Mar 29 07:01:44 2025 GMT
Not After : Mar 30 07:01:44 2025 GMT
Subject: CN=6b7f6921672a4d77266ac006eaee67ce839d4c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:d1:00:6e:3a:5a:af:a1:4d:46:bf:30:c2:
8f:b0:3c:5d:db:b8:2a:6b:d0:45:c9:96:6f:b6:b5:
d0:71:0b:dc:f1:e7:80:a0:b6:6f:fd:c0:44:c8:c4:
70:b3:c3:14:30:2a:e1:79:51:bb:fd:f6:bb:4b:61:
05:5b:3a:5c:69:f2:94:e3:af:2a:a1:4d:e2:4b:a0:
0e:b4:72:68:25:fd:90:76:02:c9:53:2a:4a:1c:db:
5a:40:7e:28:6a:fd:6c:8c:92:d2:10:9d:4a:cb:28:
1e:2f:12:6a:66:f2:11:d0:60:33:96:8f:3f:2a:3e:
f8:18:96:ff:41:ba:ed:39:09:20:fd:ed:56:7a:9d:
93:b1:af:f8:19:53:be:80:0d:4b:35:2e:d7:83:29:
b8:cd:c3:82:b8:ea:36:aa:14:7b:92:22:6f:e6:a8:
e3:f2:f0:12:94:15:a1:56:67:4d:40:dd:18:3b:5e:
0a:d1:43:f3:34:4e:c8:03:83:c7:ac:03:ed:b0:d4:
dd:dd:91:9b:f6:c3:f4:fe:f1:d5:89:a4:91:b4:48:
f5:b5:ca:53:8a:ca:fb:0b:dc:5f:ea:0d:c8:fa:74:
43:5a:9a:3d:96:a1:3e:37:9d:78:3c:2a:c2:5a:a2:
d6:2c:bf:d8:e0:9a:02:c6:05:1a:3c:9a:59:2e:d2:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:69:21:67:2A:4D:77:26:6A:C0:06:EA:EE:67:CE:83:9D:4C:1F
X509v3 Authority Key Identifier:
keyid:83:24:C5:DF:19:78:9D:52:59:10:4E:0A:E0:DC:D4:67:2A:8E:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyTF3xl4nVJZEE4K4NzUZyqOK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4b2e49-f667-494a-afe9-6df3e4a4eeb1/1/gyTF3xl4nVJZEE4K4NzUZyqOK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:79:78:85:22:61:db:73:51:05:ad:65:4c:8c:53:0c:52:d1:
89:19:07:f8:14:72:cd:de:56:a1:eb:ee:91:63:a7:7d:cd:e7:
7a:75:37:80:f3:8f:74:c5:09:8d:08:38:c0:80:31:c3:ba:ff:
59:d9:5a:99:e9:74:c9:8f:52:59:8f:a5:83:f1:39:eb:27:75:
e1:ac:3c:48:aa:74:fe:ce:fd:cc:7e:c4:fc:2b:9f:67:ae:ed:
96:f9:77:f4:ca:e4:af:ec:66:3f:b8:db:5f:65:f6:af:8e:0d:
14:a1:5f:a9:38:0b:51:ae:87:26:82:82:9f:9d:f4:a0:da:fc:
5b:19:20:ad:35:5d:e0:d8:ea:56:62:d7:f8:36:61:fa:e1:b6:
81:a6:b9:b6:28:95:6b:01:e3:53:81:af:6c:46:4c:61:42:7b:
f7:d5:bc:5a:68:31:f2:9a:e1:db:2e:83:64:8e:a4:7c:85:6d:
d8:39:cf:9a:89:e2:a3:c3:6e:29:c2:b5:a8:e5:d6:83:cc:b6:
83:46:3d:59:bb:a3:d6:5e:df:8b:49:87:c8:59:48:d5:77:37:
e2:6c:b4:ad:2b:06:68:72:9a:17:1b:39:0f:8e:0f:08:a4:fc:
17:93:7d:55:5c:ad:37:9f:66:27:75:89:ac:c7:cc:ff:17:3c:
15:d5:68:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:51 2025 by rpki-client