Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
File: GJabxilVETwNBJme7JG92p0vo6U.mft (raw, json)
Hash identifier: Ul+s+wePKpDqte/EklFrZlwCQknjfrB7+tLaHd4Euc8=
Subject key identifier: D8:8C:2E:FD:3E:9F:F7:02:30:A4:79:6F:6F:38:3D:34:D8:45:3C:71
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Certificate issuer: /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial: 0194BC731274D18C6845A753022A5CBA2799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: 64hfXKK79DNnwBiHMNhcan7gApw.roa (hash: 1pILT2yG6cl/7OeMa23s3WaOano0QbCAXRD1Tm3/Qkg=)
2: GJabxilVETwNBJme7JG92p0vo6U.crl (hash: rQoPtFW2CizcbkGEGUeur4K+p4rp8bHKKoBZc4dE9YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:12:74:d1:8c:68:45:a7:53:02:2a:5c:ba:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=d88c2efd3e9ff70230a4796f6f383d34d8453c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:10:5b:d8:3c:02:64:1e:08:b0:da:a4:3e:
66:21:76:9f:c7:fa:8c:9c:23:83:7e:3b:34:6a:33:
cd:67:40:71:5f:03:ac:bc:a4:d1:eb:1b:b9:ef:9f:
5e:88:14:c2:b2:98:6c:e2:87:5f:a3:ee:5d:ff:dd:
7d:2a:45:06:48:cf:b6:d6:12:e0:75:57:33:fa:79:
53:07:f9:23:2f:05:09:1f:27:92:f1:68:a7:ea:1f:
84:f7:48:61:9d:d3:4f:77:e9:c9:7d:c2:a5:f3:0a:
cc:02:2a:28:ba:12:96:72:b6:14:6e:94:98:d9:ad:
97:6c:a6:c2:53:35:a8:e6:5a:2d:2a:06:a3:c9:f6:
07:44:5c:bd:5c:b6:5c:db:8e:f2:ad:be:8e:f9:a4:
b8:a1:1b:2c:f7:48:f8:ac:a3:ad:cc:9a:85:50:54:
35:37:fe:16:7b:80:cc:64:a0:b6:34:4e:ae:c5:79:
50:30:ba:40:1d:4b:f5:46:64:ca:15:b3:dd:37:03:
74:14:97:48:be:b6:f7:33:50:7a:0a:71:f9:22:31:
bb:49:8a:bc:18:c6:94:d0:a2:e4:02:da:dd:5c:3e:
c3:34:78:89:d6:be:e0:18:b7:07:ff:dc:ba:2d:eb:
2b:80:80:94:4d:63:33:57:a2:23:e3:b5:e7:ec:fd:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:2E:FD:3E:9F:F7:02:30:A4:79:6F:6F:38:3D:34:D8:45:3C:71
X509v3 Authority Key Identifier:
keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:7c:b5:54:4c:51:6a:de:c4:cc:af:5c:a7:e7:ea:63:8e:
42:61:a7:a9:63:9a:f4:e8:3a:c9:50:99:43:7d:0a:78:b8:ca:
18:49:10:8c:46:9a:2f:c9:f9:07:87:1f:95:e1:d2:08:87:16:
ff:b8:db:9c:70:79:b6:55:1f:65:5c:09:94:a6:1c:10:0a:38:
b5:52:65:4e:c3:eb:0d:a6:74:43:3c:8e:41:c2:a8:3c:1f:8f:
08:4f:20:0d:47:28:f8:fc:d5:a9:07:e8:17:1a:58:15:a8:87:
86:c2:98:3d:a0:1f:97:f4:8d:27:2d:c8:66:cb:fe:ca:a5:a8:
28:84:b1:79:62:61:fb:73:c0:61:0f:c4:72:e6:2b:e1:d7:85:
f0:ff:d1:7f:47:ac:17:18:5c:b0:a5:8c:e1:03:99:3a:3f:52:
dd:79:93:6e:9f:81:8f:d4:9c:5a:9e:13:9b:54:16:27:17:8a:
5b:03:fb:3e:a5:d0:c1:74:ed:a2:93:f8:36:67:a3:f3:48:3e:
4f:e9:3c:6a:c7:07:70:3a:c0:86:db:02:9e:61:81:3e:a4:83:
79:45:3c:43:33:2e:d9:f3:cb:ff:96:30:d9:35:36:a5:86:6d:
52:ff:ad:56:08:24:8b:b3:25:3f:ba:cf:fd:44:83:a0:86:1d:
d8:9e:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:17 2025 by rpki-client