Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
File: GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft (raw, json)
Hash identifier: eZJL8TT2gI5G8D0s5mcNuFo6tbF5+vUJD65zCJLjZy4=
Subject key identifier: FF:76:4E:6D:EA:D2:C8:4C:7A:75:2D:F9:27:F6:22:62:5C:25:5E:F4
Authority key identifier: 1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A
Certificate issuer: /CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
Certificate serial: 019416CBCAAE146E2F05E6D84FD0080F4D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
Manifest number: 0207
Signing time: Mon 30 Dec 2024 09:00:41 +0000
Manifest this update: Mon 30 Dec 2024 09:00:41 +0000
Manifest next update: Tue 31 Dec 2024 09:00:41 +0000
Files and hashes: 1: GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl (hash: nqGI5pq/gZXg3J0wwBUI8bTVURck7xVnkQPU5bzVeaI=)
2: NJXziIlJYgbBGydQaQPeI4MJjpI.roa (hash: ujGy/n3hEVnZYpUbwco1uYfl/4NT+/I1rgR6gTcP/pw=)
3: QR-zQIVibRJB9ns_9zLe6nWD96k.roa (hash: jMrO0doBp+THPWATLIAWRCiu1D+dZsrkTGuCrPHOfLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:16:cb:ca:ae:14:6e:2f:05:e6:d8:4f:d0:08:0f:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12f8b5681f554a03b30e2e4f805c66f8315e0a
Validity
Not Before: Dec 30 09:00:41 2024 GMT
Not After : Dec 31 09:00:41 2024 GMT
Subject: CN=ff764e6dead2c84c7a752df927f622625c255ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:68:2c:c9:1c:77:4b:a3:d2:d7:73:2e:ba:
f8:6c:7d:cd:9e:10:3b:59:3f:4c:04:de:50:0c:a0:
ff:00:fe:a8:c5:1c:87:52:06:e2:6a:85:12:1d:a5:
97:fd:fe:18:92:c7:5b:70:a0:be:86:ea:92:fa:7c:
5c:e0:47:50:b0:14:49:d2:a7:be:c8:1a:26:63:15:
f7:fa:e4:f9:af:4a:09:70:7c:ca:17:45:46:15:39:
68:e5:a4:d2:f0:49:01:0b:63:e6:9b:ff:1f:05:de:
af:6c:e6:9d:05:ab:05:89:db:9e:eb:fc:73:98:da:
73:87:20:3c:7e:cb:7e:c0:53:af:6a:a3:68:4a:84:
d5:93:b9:67:50:f5:5b:1a:0f:b7:5d:9e:c9:1a:29:
e8:52:cb:ed:1c:fd:74:47:71:3b:b0:92:9e:a1:49:
df:78:ac:5e:2a:9d:61:b5:16:ea:e8:74:92:1f:5d:
a1:94:5d:a1:fb:0f:03:d7:8c:e3:a3:1e:5a:be:1c:
8c:28:7d:7e:85:ce:bc:8e:5c:c0:6b:16:66:a1:f0:
64:be:37:c2:74:86:9c:69:95:4d:0b:e7:c3:b9:3a:
95:82:83:af:04:66:3b:be:c6:02:61:22:3e:64:72:
0b:5f:66:e3:5f:65:69:af:df:4d:20:85:81:61:76:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:4E:6D:EA:D2:C8:4C:7A:75:2D:F9:27:F6:22:62:5C:25:5E:F4
X509v3 Authority Key Identifier:
keyid:1B:12:F8:B5:68:1F:55:4A:03:B3:0E:2E:4F:80:5C:66:F8:31:5E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxL4tWgfVUoDsw4uT4BcZvgxXgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fdafd2-3dcf-4043-86e6-3e801694e048/1/GxL4tWgfVUoDsw4uT4BcZvgxXgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e8:16:3c:f8:3d:ac:7f:fc:81:62:3e:ac:8c:e8:61:2a:0d:
ea:16:82:be:82:05:7e:a4:75:96:2d:76:e8:92:ab:f6:d2:09:
8d:21:66:2e:bd:f6:b4:22:b2:a0:78:68:f4:0c:88:15:17:39:
53:44:6b:40:02:d7:8c:35:16:58:8a:d2:ad:d9:1e:a8:f2:b9:
c9:65:a5:27:4a:ff:b1:54:45:1a:37:a2:d9:51:9d:d3:4d:96:
0a:d2:40:7b:66:97:fe:1b:2d:09:6f:d7:56:d2:35:92:ea:2a:
ac:fe:92:7d:ec:bd:b4:bb:6a:8a:c2:76:cf:c2:ff:22:c8:e1:
e7:d1:a5:92:43:ef:a4:bf:70:4d:18:ff:3e:6c:9e:46:e8:7c:
7c:05:1e:db:f0:e5:b8:aa:8e:f1:74:34:2c:f6:1b:f0:a3:b0:
6f:3e:e5:3e:f8:f6:7d:ed:91:fa:d6:c4:cc:e9:87:10:22:74:
ce:9f:1d:a6:6d:52:a1:33:7a:de:dc:8b:f5:5d:2e:7f:31:f4:
90:1b:a4:16:70:fc:bf:d9:f9:60:2e:82:57:22:23:1e:6f:a9:
fb:85:a9:68:7f:7e:01:d7:d6:34:5d:a7:2c:ec:bf:3d:f3:45:
95:65:67:3c:10:5d:3b:8f:50:2d:95:d2:4c:67:26:fa:47:2d:
d5:e9:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:50:09 2025 by rpki-client