Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
File: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft (raw, json)
Hash identifier: XKMf2exRynyoNZ8dlHlgNpKtgXAzP9RXnbxkTyKbID0=
Subject key identifier: 4F:88:15:6E:14:38:A9:46:B8:05:9A:19:38:80:19:E2:56:AF:4A:31
Authority key identifier: 19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
Certificate issuer: /CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Certificate serial: 0194BBCE18235CF022DA708AA5FF9B3FA8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
Manifest number: 0152
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl (hash: jVMnOUiU6yShGuaSy7vH5xoTPf/SQmZ3dVfJxt/VUE4=)
2: dD6GIMFFXfcUZKikgptCTP1SjMg.roa (hash: R7h9/T2YRhEDBxQsNxpJ6+ajaERwVVA7HS/wWVJDGB8=)
3: n1LYpQBp74CBUc1iCkyyz1kpuDI.roa (hash: dntlfrX6kYRLASagUJhBDGwAMZaEo7XW+NU8zsgCpzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:23:5c:f0:22:da:70:8a:a5:ff:9b:3f:a8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a6046e37c7e2075b41d6fef70d2312303c5f39
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=4f88156e1438a946b8059a19388019e256af4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:3c:cc:63:88:8f:be:e8:4a:16:be:ec:38:
fe:87:fa:f7:44:dd:94:8d:44:61:34:4d:b9:6b:7d:
89:7a:e1:ac:c3:e8:84:81:0a:fb:ce:05:13:4e:63:
54:8e:84:53:d3:0c:30:69:69:0b:c8:67:ed:a2:1c:
1b:d2:e5:8d:b7:9f:4b:d0:31:1a:a8:96:4e:3b:ed:
48:2b:3a:e7:e4:cb:56:24:6e:0d:fb:b7:7a:d0:f9:
0c:5f:62:9c:62:cd:c2:d6:38:33:86:bf:b9:c8:f6:
7a:47:0c:26:0c:c3:ff:61:74:51:63:98:01:34:a6:
dc:3c:0b:8e:10:d5:a9:fa:88:e1:93:23:22:a7:4f:
7c:3d:b5:3a:ea:71:9a:89:79:ad:03:1a:42:ee:6d:
cc:e3:f9:95:c3:11:5b:a3:6e:19:62:c7:eb:e3:27:
f1:4f:0e:5e:12:56:79:85:5e:b6:5c:c5:be:78:3a:
40:79:4a:d8:5b:94:a2:36:62:21:24:dd:7d:44:10:
f5:a6:55:19:f3:b7:47:1a:a7:06:0a:aa:8e:43:d3:
ef:84:39:c7:2d:dc:2d:c7:45:b4:cc:26:10:9a:37:
43:80:92:bb:eb:85:f8:fb:5b:ea:31:48:df:3f:31:
ec:3d:f9:f7:3a:ac:72:f8:64:bf:86:54:74:38:6f:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:88:15:6E:14:38:A9:46:B8:05:9A:19:38:80:19:E2:56:AF:4A:31
X509v3 Authority Key Identifier:
keyid:19:A6:04:6E:37:C7:E2:07:5B:41:D6:FE:F7:0D:23:12:30:3C:5F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/799e5c-1594-409f-8c54-3fec58614c4b/1/GaYEbjfH4gdbQdb-9w0jEjA8Xzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f8:43:a6:ba:2a:0b:f9:0b:94:1a:fb:35:ca:af:ac:3b:03:
94:ba:8c:81:06:f3:98:6e:07:b2:4f:31:ae:52:27:5f:e2:21:
0a:38:f7:fd:13:4d:09:06:cd:7a:0d:dc:3c:24:0c:03:26:8a:
e7:27:49:cc:d7:0c:8a:54:7d:e6:ec:24:8e:fe:03:87:fe:70:
91:5e:57:3a:74:ae:6d:61:12:ea:f3:93:66:03:5a:18:b6:c6:
7b:fc:9c:79:8f:b8:e8:ee:75:6b:2b:c9:45:a7:88:2a:f0:db:
99:97:31:44:6e:2c:f4:a3:53:1d:8f:87:8a:1a:3d:e2:ce:cb:
43:bf:61:e2:1f:1c:cc:da:fc:37:b3:2a:06:f4:20:d9:72:9b:
ca:95:9b:ce:17:ba:0a:09:a4:21:2b:a1:d6:f3:32:10:b5:3b:
a4:d4:04:47:c1:f3:ad:fa:06:7d:e3:ea:33:ec:59:9b:94:26:
65:16:f8:55:9c:51:1d:3f:6d:1c:92:21:73:a1:48:b6:af:2a:
9b:b8:0e:b3:f4:65:3c:65:80:e5:eb:72:74:06:99:ac:0a:e0:
72:ca:60:71:88:d6:dd:74:02:c1:30:35:02:7a:93:d6:86:31:
9f:88:b5:6c:5b:cd:f1:cf:5c:04:a1:ea:ee:36:ca:b6:ee:8b:
e7:ec:6f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:11 2025 by rpki-client