Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
File: GkIazkbF3ViinUbNkfso_DnFb-4.mft (raw, json)
Hash identifier: p75SYqrm8QLnhVGtv653gB7FiRTrWKOAdpdIitFZSs4=
Subject key identifier: 3F:4F:72:C3:18:1F:A8:60:4A:1C:03:C0:77:E6:C0:34:EA:F3:A9:D1
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 0194BC3C41C39A03FF7C26013266185C9FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: GkIazkbF3ViinUbNkfso_DnFb-4.crl (hash: QRRbTIxQ3+o7HKBoMG+ZsO9vmzv5Qqyh5rvMOCgohes=)
2: Q3zBBX-aYmQxouSjQDIx6WeyYB8.roa (hash: V4ZjRVPUW9lk8qotnPpjhgvHeApYlc70WdpbVZxrAPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:c3:9a:03:ff:7c:26:01:32:66:18:5c:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=3f4f72c3181fa8604a1c03c077e6c034eaf3a9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:76:10:4a:0e:01:4d:fb:8b:91:5b:63:cb:
8c:fd:d3:56:a6:1d:7f:0d:da:8b:26:32:05:cb:3f:
8b:a9:31:ae:b4:63:07:16:e5:92:f5:0a:d7:47:48:
17:02:cc:e7:56:6d:de:98:35:b0:dc:c7:0d:c9:5c:
4c:a9:24:32:99:03:c8:5a:e7:18:d3:a4:24:a8:d7:
f4:50:2d:a1:a7:d9:66:54:c0:f9:1e:da:1c:d4:d3:
10:de:5f:b4:90:df:a4:f8:b1:4f:5b:32:b0:35:9f:
05:f8:dd:39:d1:25:4a:e3:65:6b:51:17:74:23:28:
e9:e9:3a:3c:41:52:9d:bb:af:37:86:0f:3f:22:85:
3a:c5:1d:fb:26:6a:db:be:1f:5c:27:c5:00:58:63:
46:ba:78:b6:42:de:d3:c6:59:15:ef:e8:e4:63:41:
ad:6a:b5:ab:1c:6c:29:ed:fb:c4:f0:1c:06:99:6d:
52:ed:4b:cf:bf:63:a7:89:4b:75:5a:d2:81:52:57:
1a:8b:20:20:49:99:c1:f2:39:99:71:42:71:ea:d0:
ce:3e:9f:52:5c:56:b2:d3:88:dc:5d:c9:02:d8:88:
86:93:24:1c:b5:26:98:34:59:79:42:ff:25:c9:e9:
17:b8:47:91:0f:8b:25:08:16:f1:94:0a:ea:fe:8d:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:72:C3:18:1F:A8:60:4A:1C:03:C0:77:E6:C0:34:EA:F3:A9:D1
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:58:d2:af:67:7b:35:af:10:23:5f:11:c4:4c:d2:ab:76:89:
b4:1a:82:64:a9:76:05:f7:f8:c7:01:92:3c:7e:71:28:b8:a2:
9e:6f:1f:b8:50:31:b6:c2:4e:50:94:03:69:7e:97:e7:37:b4:
9b:d9:ba:5a:c6:af:c7:09:f5:9e:07:b9:93:6c:36:8a:34:ab:
b6:f5:0e:4d:8f:93:26:f7:ac:a5:e4:b5:ce:30:43:c4:ea:a4:
da:bf:bb:f3:fa:02:07:67:0c:61:26:ae:e0:20:ec:df:b1:df:
c8:5a:65:b6:b9:77:ab:9c:b3:e9:0d:33:be:ee:19:ce:49:a3:
2b:f2:18:0b:81:cf:a0:67:88:36:75:4e:9b:a5:1f:71:6f:4e:
d1:7e:19:5b:c2:a8:4d:08:4d:16:23:17:0e:ad:4b:02:f8:38:
c7:66:65:c6:5a:ee:10:0a:b3:1c:87:8d:4c:b8:41:a0:1b:3f:
87:ae:dd:42:a7:31:2d:87:48:35:48:17:0e:02:c8:5a:97:3a:
86:94:77:2f:82:33:45:ed:20:d1:9d:9e:a4:76:11:fc:f0:cc:
2c:f4:5f:d4:01:50:bd:b1:f0:9b:e0:d0:25:f0:75:00:4d:27:
83:a1:57:ae:8f:6c:a3:e5:5d:f1:ec:86:ba:f0:8d:21:fe:18:
3c:a4:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:48 2025 by rpki-client