Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier: WejmnJXaoWRByzS0Oq2C8Ps5MfAY+kgf7G77Jrluoyw=
Subject key identifier: E6:19:72:B1:D5:D2:CD:BB:56:AF:54:B0:C2:FA:DA:D0:26:9B:F3:31
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 0194BC3BE6ECC6FE14ED8A8C12484BB3325A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number: 0588
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: kAO4lYiT0F2owg6s8W1vXdq78ldEDyX0DYuGn3P71G0=)
2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:ec:c6:fe:14:ed:8a:8c:12:48:4b:b3:32:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=e61972b1d5d2cdbb56af54b0c2fadad0269bf331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:46:33:fe:91:40:96:97:09:18:78:3d:e6:
dd:99:d1:76:77:d5:00:2c:be:3d:2b:25:f1:8b:b8:
69:8f:fe:c9:7e:de:9f:96:41:4a:a9:b6:9e:bc:e3:
9f:c8:5a:4b:dc:59:b2:26:be:23:65:91:bb:8e:72:
a2:d0:da:6c:8e:23:85:9f:a6:fd:a3:f5:98:e9:e8:
7d:e4:c4:46:e4:ef:9c:da:c9:57:49:b1:aa:60:34:
37:b6:37:54:36:7f:67:8b:49:e4:83:45:52:b1:99:
49:29:35:da:fc:c5:3d:94:d1:45:a3:0d:0e:0d:16:
a7:6d:c4:08:ad:9d:2b:c7:93:eb:c8:02:86:1d:63:
2e:a2:0f:28:c2:d5:28:48:11:e6:15:c9:82:28:21:
63:33:e4:77:a0:fe:4c:19:8e:cf:24:69:16:5d:eb:
bd:8e:29:b9:cc:a3:a8:c8:07:3c:0f:b1:32:29:f8:
16:70:04:d4:79:74:32:ca:7e:fa:0a:b1:41:e1:c9:
21:88:4e:80:ba:4e:29:6e:28:f3:04:4f:5f:e9:e2:
8b:6d:f9:49:20:83:4e:38:de:d8:68:b9:df:fd:c2:
c5:0d:20:ed:1f:30:6b:72:87:ea:93:65:fd:6e:97:
b3:f4:21:80:89:0e:09:3e:f0:9a:54:2d:54:1b:e6:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:72:B1:D5:D2:CD:BB:56:AF:54:B0:C2:FA:DA:D0:26:9B:F3:31
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:08:5c:1c:35:38:30:c1:bc:61:af:1c:a5:f1:00:86:df:
d1:dd:f9:59:40:bc:24:95:9f:cf:2e:cb:fd:62:20:98:9c:41:
83:bd:4f:55:e2:7d:e6:1b:af:d4:44:d8:f0:b5:a2:a0:77:78:
f4:48:a9:3b:6c:fe:6c:6d:25:79:6d:81:0b:d5:3f:3d:b9:65:
50:83:21:c9:22:79:a3:76:cb:95:3e:d8:6a:cf:12:c1:27:b3:
f7:cd:e0:e1:9e:ad:13:4f:a1:8a:b5:3d:f2:aa:62:c3:bc:8d:
75:d9:49:b3:0c:79:3e:ba:8f:16:2a:50:da:46:36:a0:b9:da:
3b:36:95:67:81:7d:5a:36:b6:c4:e5:7f:06:1a:7c:64:7f:e7:
62:7d:b5:87:34:d5:40:3f:e0:f6:9a:71:53:5b:b5:74:d3:91:
b3:48:35:03:0f:a9:8e:ad:0c:2b:fc:4d:4b:3e:ab:dc:ee:bd:
3e:eb:d6:5c:1b:3e:fe:66:57:09:cc:b1:3a:32:c9:18:e3:3b:
ab:30:16:67:09:5c:08:4f:86:c1:99:e8:99:9c:4d:e3:e0:9d:
bc:2b:37:1d:22:d9:9d:d2:29:2f:9b:a4:b6:e4:d9:e7:f7:ff:
78:b9:7c:96:bc:8f:e6:fa:c9:86:92:7a:00:75:03:80:b8:9c:
d0:9c:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:56 2025 by rpki-client