Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: /zdYG/nojH5ExmMbas60tryntbSmyfuwU0JLD+CpGg8=
Subject key identifier: 58:9E:F9:4F:39:B1:DF:52:F3:28:BA:7B:66:74:10:11:57:53:34:21
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 0194BCAA0D4B48E6337DEAE1F93FD58B1D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 5xsZ7Oipko7ivcKkVK1/YrRFxjHd5IJf8tq3GGbLFD4=)
2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0d:4b:48:e6:33:7d:ea:e1:f9:3f:d5:8b:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=589ef94f39b1df52f328ba7b6674101157533421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:a5:48:98:33:bb:6f:27:d7:5f:f3:f4:46:
58:92:f0:02:db:9e:61:8a:61:95:dc:eb:ec:7b:7f:
7f:1c:43:3f:82:3c:76:ca:b9:7f:12:98:0b:39:55:
ae:7b:fd:69:c8:4c:13:99:cd:d0:14:99:81:1e:cb:
a7:20:80:7c:88:84:7a:fa:0c:10:26:32:fb:7f:77:
5d:66:06:cd:8d:4c:fd:aa:22:e8:b1:a0:4e:79:58:
93:5e:34:0c:c7:99:2b:fd:63:4e:2e:a8:f4:06:66:
4f:32:81:33:cc:6f:f8:0b:b6:92:5f:e3:fc:e6:92:
6b:d6:4a:bd:d0:13:5d:ee:be:e8:10:fb:85:b5:79:
f9:8e:22:b8:ae:7c:0d:65:5a:5d:98:d8:20:e3:84:
22:83:5e:a1:13:65:00:db:e8:1b:68:9e:2c:8b:c4:
ca:44:c3:84:cb:f0:43:46:cc:a1:7b:79:3f:13:fe:
cb:c4:dd:a2:ec:dd:b5:c4:fd:aa:e9:d2:9e:0f:92:
04:e9:4d:59:23:47:88:94:14:ab:e6:0a:70:a6:1f:
6f:d4:23:ed:a8:fa:25:8a:aa:5b:16:42:a5:d5:35:
bf:40:db:05:22:80:38:57:f2:8e:bc:ba:40:4c:d5:
1a:18:e3:10:ec:b2:b2:6c:38:75:82:2a:67:a7:cc:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:F9:4F:39:B1:DF:52:F3:28:BA:7B:66:74:10:11:57:53:34:21
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c6:29:ba:07:39:ce:e8:ed:33:10:16:b7:f9:5f:25:5e:84:
42:5c:f1:f9:64:6d:3b:c9:4d:ff:e4:00:da:f6:f2:3a:95:81:
45:50:c4:33:65:06:b3:9a:75:18:0e:6b:9e:59:30:ab:fa:63:
ef:b6:55:5f:d9:98:82:d8:a9:69:a7:19:97:c9:a8:20:e3:d6:
cf:8f:7b:f6:4b:ba:74:6c:79:54:6b:f6:cf:c8:3a:12:92:58:
34:08:54:96:03:f8:ef:01:9c:f8:64:5c:98:45:97:df:fa:f7:
d0:c6:8f:11:f1:11:c5:8a:ee:39:4e:82:9d:27:6e:e2:5e:b0:
64:68:24:90:63:cb:e4:53:39:b7:05:e0:a6:d0:90:86:fe:69:
08:ef:b6:7a:86:3f:39:60:c1:de:eb:3b:4f:a7:f2:d6:fc:2b:
4d:e0:87:49:b6:92:c5:e4:88:91:fb:eb:f8:a9:52:6a:be:b6:
6f:d4:a9:99:94:50:27:f0:c5:28:0f:ca:d7:d1:a2:aa:8c:fd:
00:e5:b9:09:f0:d6:9f:26:02:42:b2:6b:41:a0:e6:ac:5f:c2:
a5:1b:4b:ea:9b:6d:cf:87:cb:f2:eb:a4:40:77:ad:ec:f6:ad:
ca:3d:47:69:95:86:24:75:aa:c3:2c:5b:01:fb:7b:08:34:f2:
5a:07:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:44 2025 by rpki-client