Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File: GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier: ih9woNNuGr7Vcx9tdi2qoQobTdM7Jha9ATCg19fqUGE=
Subject key identifier: 78:C9:7F:FD:A5:91:4A:C1:7E:51:07:C1:BE:BC:EB:BA:95:9B:07:E5
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer: /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial: 0194BC3C3EBA1F4D3611DF025B5F7833B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number: 90
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: WQhroB/nM5ADU87L2SFMJLJ0+5fzwffZTXpyAneC87M=)
2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:ba:1f:4d:36:11:df:02:5b:5f:78:33:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=78c97ffda5914ac17e5107c1bebcebba959b07e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:91:84:56:b1:37:4f:3a:4d:57:e6:d6:ac:
45:ec:13:38:20:f7:27:40:62:bc:64:c6:35:7c:08:
c8:26:60:75:c6:73:85:ca:fb:ce:35:b1:e4:5d:64:
d9:c0:0b:cc:9d:e2:9d:e8:78:1e:52:b2:83:c3:43:
d1:21:36:73:f7:5b:dd:8e:26:6d:58:2b:bf:0b:01:
7b:1f:5f:2c:5c:7f:bc:53:8e:2a:fa:ff:88:51:5a:
89:2e:77:d4:40:91:47:f5:2d:da:99:0f:0a:16:eb:
21:1c:16:7d:f0:e7:a8:94:23:fc:0a:ec:dd:79:2c:
b8:03:d0:f5:d5:69:14:37:6b:c7:a2:ac:28:4a:e7:
98:b7:f1:e9:55:a6:95:cd:96:f0:6e:64:99:d9:d6:
98:ea:27:1b:37:9e:09:27:59:a3:97:a6:d0:04:d3:
51:23:a5:10:d5:a6:e5:1d:5b:b0:93:33:2b:6d:c4:
66:32:37:64:9e:6f:fa:0a:ae:6e:c1:7e:82:49:fa:
95:7b:83:21:77:20:0f:0a:e1:a0:f6:47:d6:ac:01:
38:6e:95:64:a7:b9:86:e4:63:19:3a:53:02:ea:17:
42:08:39:f8:bb:dd:37:21:01:f5:e3:b6:2f:c8:6a:
f1:ff:1c:e3:0a:60:a3:fe:6e:5f:a5:52:92:bc:95:
eb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:7F:FD:A5:91:4A:C1:7E:51:07:C1:BE:BC:EB:BA:95:9B:07:E5
X509v3 Authority Key Identifier:
keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:e0:dc:06:93:c9:ad:d7:c7:0c:c9:8a:a9:18:60:27:74:
56:66:0c:6b:d5:40:d7:88:91:2f:74:da:9d:77:b0:a8:2e:7d:
34:89:75:04:4d:ce:cf:ef:bf:82:84:c9:cb:c8:ea:c0:b2:95:
c8:95:c9:a2:fc:aa:d2:aa:13:f4:f7:d6:0f:7e:57:d0:ec:e1:
b2:cc:5f:01:ba:a3:21:5b:08:2f:b6:26:6b:2b:f7:42:3a:1d:
90:f1:6a:35:70:ea:95:f2:67:0e:f7:49:0f:7e:15:bd:33:d4:
47:b2:36:f4:04:2d:c8:61:01:0d:b1:9a:2f:a1:57:dd:2c:46:
15:48:19:a1:ce:0d:6c:e7:65:ce:78:7b:6b:8d:4f:57:48:01:
6e:60:2c:17:e6:8d:c6:df:28:11:06:87:93:3b:ea:60:cf:24:
30:4e:f2:cb:30:1b:69:29:4e:a8:48:ca:e6:29:73:14:e3:a2:
6c:93:dc:a5:b0:5a:ab:d6:58:61:fb:2d:a0:36:2c:28:1e:d0:
be:64:42:b2:95:a6:42:e4:53:17:5d:d5:02:13:d3:6f:a2:c1:
fa:11:5f:0f:63:7d:9f:8c:cf:4a:0e:56:f6:fa:d4:13:b8:9f:
48:a3:8d:0a:de:01:01:b4:98:82:74:0e:80:fb:95:de:8b:81:
74:aa:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:09 2025 by rpki-client