Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier: aIsIjKNDTuMg+vXRwHCnQlPAoZ63yuh3EXCoAL8JwJw=
Subject key identifier: 39:14:CD:80:6C:F2:90:29:AB:99:F1:C9:F5:11:19:F9:D1:23:69:02
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial: 0194BCAA423F30BDF10E64D702DF47E3553F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number: 014B
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: nR8OAWslZaiRfOljJdR9YfDc7M9wdM+6emGf1szX06c=)
2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:42:3f:30:bd:f1:0e:64:d7:02:df:47:e3:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=3914cd806cf29029ab99f1c9f51119f9d1236902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5b:24:9c:61:bc:9e:5f:f0:eb:3b:ca:9b:67:
41:9b:35:de:87:92:2d:6c:b4:c0:fe:a4:3b:12:80:
4b:f3:8a:b0:53:54:a6:56:8a:a1:40:ba:54:ee:ec:
e3:f6:f7:47:31:30:42:65:83:8c:8a:26:f9:09:5e:
79:f6:5f:7f:a7:9e:14:be:3f:a2:f0:76:ec:ad:c3:
06:35:f6:67:0c:cc:67:f6:32:86:b0:73:b4:ed:e8:
09:76:b6:66:4a:04:fd:be:bd:6e:b4:b5:bf:a3:44:
63:ac:3f:8a:bc:94:e8:6b:0d:84:f2:11:17:80:ee:
44:56:d7:c6:b1:52:16:e5:06:0f:c4:99:6f:0e:fa:
df:1e:b6:f1:bf:d3:db:54:5f:87:75:4e:16:0f:f8:
3f:09:46:ce:49:db:03:2d:27:f6:1b:32:62:35:a3:
52:54:9b:76:41:51:56:91:00:ae:d4:e9:87:f1:92:
fe:9e:67:ac:9d:e1:77:4e:11:e8:03:5f:b2:53:43:
91:10:63:66:15:e3:66:74:ec:c7:82:f8:3b:c2:2e:
60:9e:f4:ca:7d:96:bf:f6:9d:62:54:21:23:6f:1f:
5c:ec:17:63:22:ab:fb:63:1f:56:68:7b:10:3d:b0:
17:53:dc:0d:40:ba:0f:df:2f:41:13:e3:ca:2a:a4:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:CD:80:6C:F2:90:29:AB:99:F1:C9:F5:11:19:F9:D1:23:69:02
X509v3 Authority Key Identifier:
keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b5:a6:65:14:91:2c:2a:13:3d:b5:c7:54:fa:1e:e2:ec:35:
3c:9c:db:bf:c4:e6:61:ed:60:e7:98:50:03:0c:9d:3c:30:f9:
9d:02:de:c4:b9:73:10:65:c3:06:9b:99:03:b1:2a:81:b3:be:
ab:78:08:78:17:b1:ab:e1:ca:59:31:84:e9:be:fe:41:ac:68:
b5:5b:f3:e0:53:20:f2:85:5e:f3:11:9f:ad:ff:2c:d0:bc:96:
bc:d2:da:57:95:2d:3d:4a:00:8a:22:1c:78:9b:d3:c7:01:a5:
ef:99:c8:d4:69:1b:fe:f2:a7:c8:3c:c6:ac:72:26:54:d6:b2:
43:b6:24:a9:98:df:9b:d9:3c:3c:62:3d:59:59:fc:c5:fc:e1:
6b:00:8a:ac:81:6a:c1:ba:85:ee:33:b9:cb:95:de:9c:ba:78:
26:4d:d7:2e:23:d8:c9:e5:2c:a0:f7:01:2f:13:9a:8b:63:87:
e4:7f:08:5a:40:6d:88:2f:9a:15:ac:a3:d6:e6:78:8b:70:a2:
83:a8:3f:21:e7:db:7b:56:11:ce:8a:48:00:86:df:fc:e8:8e:
02:e5:02:f1:2f:24:50:ac:16:67:8a:1e:74:f6:70:31:b0:fa:
ba:71:6c:5e:7e:34:5f:94:1c:a5:9b:e7:24:72:1b:91:8e:30:
f2:fc:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client