Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: XahZ6wHbcU5VU7AEAuAuP+lsHTZdPVTSF4+JrlFStK0=
Subject key identifier: 1D:32:B9:7A:B2:8B:4C:17:13:26:4D:4A:80:75:36:4D:9E:6D:B0:56
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 0195E0B48A51EDCEE2BCED5B51F407FA541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 07:01:23 +0000
Manifest this update: Sat 29 Mar 2025 07:01:23 +0000
Manifest next update: Sun 30 Mar 2025 07:01:23 +0000
Files and hashes: 1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: VcYwZf7W+hxaXs23IICzLfcWB2uJ05dNcAKDrUxCbmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:8a:51:ed:ce:e2:bc:ed:5b:51:f4:07:fa:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Mar 29 07:01:23 2025 GMT
Not After : Mar 30 07:01:23 2025 GMT
Subject: CN=1d32b97ab28b4c1713264d4a8075364d9e6db056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:5e:e4:a7:82:12:7f:90:67:3b:aa:f4:2d:
dc:0b:50:83:8f:7f:d8:43:0f:05:fe:0f:26:1b:66:
8c:f1:e7:c9:43:d4:27:bc:61:5d:07:79:4b:85:77:
e7:ad:68:b2:d3:80:cb:70:ad:0d:d6:ed:2c:82:7a:
50:02:f6:11:34:6b:d9:cf:fa:13:32:e0:35:aa:08:
e7:37:f3:eb:1c:42:98:4f:ae:b2:30:d0:25:6a:9d:
e0:c7:83:49:42:9a:29:d4:68:0b:57:a1:69:0b:df:
d3:8d:e1:a1:f7:db:f3:50:41:68:37:16:fc:60:40:
cc:99:dc:1e:a1:1f:35:6b:9c:02:a0:9d:a7:ed:1a:
44:b5:cb:d8:a5:5c:68:a7:5e:c0:e0:18:11:06:a1:
35:0b:0f:5a:79:88:70:7c:a2:a1:70:b8:78:10:0e:
e5:ed:4f:61:02:12:fe:ad:db:76:c0:9c:c4:90:2f:
3c:3b:10:34:1f:a7:f8:11:ac:5d:0c:73:93:56:08:
ef:f1:98:30:33:eb:8b:0a:72:72:cc:45:33:7b:58:
27:42:7e:52:6d:97:5a:12:75:68:a8:23:2d:44:f0:
0d:dd:0a:b8:14:81:78:5e:4a:60:99:57:10:22:75:
b0:87:43:81:2a:1b:46:ef:49:ea:a5:c2:d0:64:db:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:B9:7A:B2:8B:4C:17:13:26:4D:4A:80:75:36:4D:9E:6D:B0:56
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:40:63:7b:84:6c:d2:be:72:e4:8a:5a:2d:d0:82:8e:b1:
90:55:ac:27:ad:7d:1c:40:3c:3b:24:ac:3a:c0:44:1e:18:88:
f2:17:18:4b:7c:e5:48:28:f5:72:ee:77:76:50:a5:bf:33:ee:
21:9e:d1:5e:cb:f6:49:36:7d:4b:66:67:cc:01:18:d3:87:84:
1e:31:4c:54:35:6a:29:3d:a7:44:a9:a5:fe:cb:f1:a9:cf:64:
d5:01:fc:b9:4b:01:c5:86:49:40:2b:56:74:07:d6:34:57:bc:
87:6e:83:94:9a:bd:ed:c1:87:10:f8:1b:29:fb:e3:4d:14:97:
1f:e7:7e:58:ed:4f:8d:de:a5:7d:35:5e:bc:4d:e9:c5:0b:a0:
1e:77:7e:c1:6c:7c:13:5d:92:9c:58:8f:36:cc:9c:22:a2:75:
47:03:8b:25:65:b4:dd:c6:64:77:f0:62:2a:1a:af:d5:7e:87:
55:30:f4:16:19:59:e0:be:00:ce:ae:fa:29:93:7a:3c:16:9a:
8a:da:e5:b2:5a:1e:4b:bc:ed:0e:97:f8:fc:34:e9:15:9f:4b:
83:8b:89:97:d3:d9:9a:e1:9e:d7:f9:34:21:1f:b2:85:d6:60:
6a:d4:51:d4:5d:43:d5:78:05:10:e9:d3:41:38:45:7f:76:e7:
ba:47:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:34 2025 by rpki-client