Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
File: GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft (raw, json)
Hash identifier: +ftjIumtQwQmgoTsG4sVU9K374k6bnsdDcHvxFbnHcE=
Subject key identifier: 9C:70:B3:FF:25:44:4F:E1:02:27:62:A1:BF:58:26:AE:75:6D:4A:39
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 0194BD855E8A719528941B42E1A50FF69371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl (hash: R4N8fXDT4o+/WnhdtQbOyZuekhhLU3F0o8xlRjdGLMg=)
2: MkwcxhmTqqlO9ybaQjVd3Wzx53k.roa (hash: ssoKV3keqcX11jGOWOD7O8J6pQqN7UFQxS+K2zNC/jk=)
3: s5P9ctGhSzInnfrzFBdgSAflUQE.roa (hash: Nr4M4gbzBHTv7mEYzFH6emb+JxfIUW2vC3EEtI2jw7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:8a:71:95:28:94:1b:42:e1:a5:0f:f6:93:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=9c70b3ff25444fe1022762a1bf5826ae756d4a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:88:e1:13:fe:77:0d:45:4f:82:cb:98:7c:
8e:92:02:17:77:9d:ee:61:3e:aa:69:11:96:57:3a:
b6:0e:f2:b8:92:76:9d:ce:f2:d0:0c:64:31:11:74:
80:64:16:44:d5:7d:71:5b:c0:f1:ce:36:d5:42:26:
c6:5f:44:88:07:bb:f0:de:f2:3c:2a:7a:7e:b7:3e:
0d:c9:fc:a4:a8:6e:90:f6:89:82:b5:c8:24:f5:a0:
16:1d:6c:cf:38:df:03:52:d3:61:07:67:54:49:c9:
8d:e0:81:56:d7:a8:e4:dc:44:f2:3f:32:3c:75:a3:
8d:c9:48:5a:9f:2e:e1:76:cb:23:95:59:c4:62:7e:
15:67:3d:75:ef:5d:4f:f8:24:71:cb:e7:c7:5f:31:
0e:a4:67:e0:3c:36:b4:11:cd:6a:d1:20:41:c2:e2:
56:26:4c:1b:96:b3:62:1d:84:ab:0c:97:bf:38:da:
55:7c:dc:32:e6:0b:cb:1e:71:64:38:13:32:a2:f8:
88:28:d8:c1:50:55:05:3e:aa:a2:15:23:8c:60:3e:
05:80:8b:49:e5:d1:71:51:55:e7:7a:ac:77:cc:d1:
68:24:f8:a3:32:02:72:b9:24:25:b5:c2:84:e5:d7:
e9:3a:00:2d:84:b1:b5:aa:e5:ba:29:7d:ef:77:ed:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:B3:FF:25:44:4F:E1:02:27:62:A1:BF:58:26:AE:75:6D:4A:39
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:6a:6a:6f:46:1d:cb:f6:e3:c8:74:62:3e:af:90:fe:28:30:
36:70:9e:6b:5d:22:d1:e9:56:d7:0b:b5:ac:04:79:cd:b7:db:
e3:95:f7:ff:7f:44:1c:52:02:d3:27:cb:24:62:5a:13:24:d6:
87:fc:76:d7:8e:5e:ad:c0:82:d9:d5:db:e7:6c:23:36:f4:6b:
7a:7c:0b:60:35:6c:78:a4:6e:1f:f6:27:53:dc:db:7f:37:52:
03:ea:a2:86:73:5c:55:28:40:20:7c:0e:28:64:16:df:d4:4d:
91:97:45:69:eb:45:1f:97:06:77:19:7a:8f:81:03:e4:53:21:
b6:d8:9b:78:22:ed:53:0d:b7:d4:32:ca:95:f7:d0:10:75:2c:
05:a7:ae:09:1c:ca:ff:0e:d4:55:d8:74:2d:61:5f:c8:e6:66:
f9:ed:3b:fe:a2:f4:34:b2:0b:ad:6a:f9:91:f4:72:a9:18:57:
12:3b:bb:2c:e4:dd:0b:63:c2:7c:8d:3a:f4:ae:37:b8:9b:df:
f9:61:60:c1:af:ec:c7:c1:0f:1e:ea:6d:8c:e9:cc:b9:15:44:
1e:dd:51:38:43:02:ad:d6:3e:90:6f:6c:25:41:05:9d:8f:1e:
4a:25:20:14:47:7d:92:9c:10:dd:a5:d5:d5:a5:17:da:09:e7:
a5:6a:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:09 2025 by rpki-client