Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
File: ggYltmnomnWueN8AgdbwG2fHs88.mft (raw, json)
Hash identifier: IQ3XxmHojvjwHC5A6+SHIEycrWCIfhkAA8fV9+1yH+4=
Subject key identifier: A0:5F:A3:B6:67:BC:09:1C:AE:1B:FB:F7:6A:0C:CD:15:02:9E:06:FD
Authority key identifier: 82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
Certificate issuer: /CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Certificate serial: 0195DBC4B228AC3349A8C97B2EF5E865B04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
Manifest number: 0800
Signing time: Fri 28 Mar 2025 08:00:55 +0000
Manifest this update: Fri 28 Mar 2025 08:00:55 +0000
Manifest next update: Sat 29 Mar 2025 08:00:55 +0000
Files and hashes: 1: 9I-u6ADQVIEsYEnt-98udkV7KQs.roa (hash: G/Ydupvv9a8XmxtOC6F7xHpIIcne60flzttt+W4vJNA=)
2: ggYltmnomnWueN8AgdbwG2fHs88.crl (hash: v7qwV387bcURML8W1HgQ0l+06RYYwkSdKrxLKUQAD5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:c4:b2:28:ac:33:49:a8:c9:7b:2e:f5:e8:65:b0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Validity
Not Before: Mar 28 08:00:55 2025 GMT
Not After : Mar 29 08:00:55 2025 GMT
Subject: CN=a05fa3b667bc091cae1bfbf76a0ccd15029e06fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:54:c4:ad:4e:47:6c:55:6d:82:ee:80:1a:
33:c0:7c:1e:bb:f6:25:dd:bc:39:3b:18:a0:06:57:
76:5f:7a:20:e9:b3:49:e7:d2:f5:fe:33:72:48:f6:
df:5e:18:45:b1:2b:2c:d5:41:83:61:6f:f5:1f:cb:
fd:8d:b8:95:d0:93:c6:f3:69:78:4a:40:77:f0:29:
58:1c:df:4c:8e:5c:db:ce:dd:65:e3:a0:a4:c0:ca:
29:ee:a2:5c:a2:11:ef:d9:74:94:0f:e2:2d:71:f9:
73:4a:4b:23:6a:dd:76:0c:f9:26:95:a4:eb:bb:cc:
f7:6a:07:f9:61:e8:59:ca:d9:36:96:ed:6e:92:46:
82:5f:07:f2:65:bb:0d:2d:64:b2:3a:05:0e:1e:bf:
5e:fc:1c:0e:cb:cb:cc:71:04:63:17:7f:e0:6a:ff:
df:d6:17:27:2f:1a:5e:46:bc:78:35:0b:02:0d:1d:
b1:9c:d2:8e:7d:91:4b:ae:d4:3c:18:91:dc:8d:a1:
78:77:1c:01:86:2c:ec:bd:00:0c:c4:fe:21:fd:a4:
e5:2a:ce:f7:fd:66:49:f4:dd:85:60:e9:88:ae:21:
64:e3:c6:e4:2d:4e:1f:d7:70:59:48:79:50:e0:f3:
d1:b0:6a:fb:47:02:0a:96:46:3b:62:e8:ff:f1:3f:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:A3:B6:67:BC:09:1C:AE:1B:FB:F7:6A:0C:CD:15:02:9E:06:FD
X509v3 Authority Key Identifier:
keyid:82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a3:22:9f:9d:28:0f:0c:a5:c3:45:5d:90:14:b2:56:de:11:
63:a6:d7:d5:4e:6f:ac:4b:8d:67:b0:fb:1a:99:0e:ee:da:23:
90:8c:17:5c:d3:72:2c:93:35:fe:06:3e:13:d9:fb:86:b1:e8:
a7:b2:3a:f8:64:1a:e3:92:14:94:24:59:9e:aa:f8:e8:82:c2:
61:26:79:c4:cc:f6:34:f9:95:23:3d:52:c1:dc:fe:30:8b:95:
03:27:3d:f6:6c:ad:f3:1f:a4:e1:2c:22:28:9d:4d:e1:cb:67:
03:c4:ba:ec:75:39:24:14:47:7c:90:6c:81:54:e9:9f:23:5f:
9c:97:67:ce:07:a6:b6:30:bd:01:07:8f:2d:e8:57:cb:8a:95:
69:3d:b5:c4:29:48:3e:20:3b:c3:02:79:61:ae:67:57:e8:f6:
3a:12:be:a2:1b:06:95:4e:40:ea:3d:9b:4f:f0:78:e5:f0:51:
ad:ff:36:56:1f:f1:1a:cd:98:58:e7:ea:3e:4e:62:8f:3a:92:
0b:b4:60:00:91:16:0b:75:df:01:4e:fe:25:77:90:92:7a:01:
ba:4c:e5:0b:24:b2:e4:bc:e3:4b:70:09:26:e3:d1:12:1f:bf:
67:be:be:b9:e1:6a:99:d8:e5:6b:ac:df:4f:34:da:8e:ce:db:
82:4b:ed:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:51:51 2025 by rpki-client