Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: +4YjAhEflQODx5r08BDtFjqTElsKhmfjgj1UEC+q3RY=
Subject key identifier: 03:79:74:D3:FF:C7:28:09:A4:52:66:71:3E:7F:2B:22:29:94:56:BC
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 0194BD1748E6412FF13049B61B654E29FA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0505
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: gHlWaZXa6wn6EZVnQ8eV706wRKqHBtN0f6s6AMoe4m8=)
2: YdrEYumUdtVM8J8IIs8UcIvimLU.roa (hash: Q1VxicqBbCeOUqKh1Ex9vJAFuLnRZwsg3d3+Cv9fZao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:e6:41:2f:f1:30:49:b6:1b:65:4e:29:fa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=037974d3ffc72809a45266713e7f2b22299456bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:f1:80:e3:d5:bd:d9:2b:9f:70:d8:40:70:
d3:4e:65:a0:86:bd:55:7f:c0:f1:08:6e:94:aa:d0:
7e:53:49:d1:4d:04:09:e8:3a:83:00:25:84:71:84:
ce:f6:b9:14:79:12:32:51:39:58:1b:00:3f:0c:2c:
63:cc:2e:c4:d9:0b:20:04:d5:8e:34:ad:42:d7:49:
6d:94:15:3f:15:da:4e:2b:5a:ae:92:0e:28:03:11:
d0:96:9e:c7:06:48:57:01:a5:93:d7:a6:53:6d:0c:
60:d5:28:91:dc:28:7f:96:54:d7:90:d6:13:e1:af:
11:91:d6:64:d3:1e:13:84:0d:69:7b:aa:64:e0:9f:
b0:7d:06:35:1b:29:cd:a0:4c:b6:c0:fb:a0:01:43:
ec:02:5c:60:65:a4:c0:d3:4a:7b:3c:65:0e:e9:d4:
d3:c6:c1:e5:ce:51:6b:49:a4:91:90:bc:42:a4:89:
f4:dc:90:d5:ef:cd:a1:05:ef:9f:f0:0b:3d:65:1b:
d5:34:88:56:14:03:da:f5:f9:a3:03:1b:fa:ad:8c:
bd:10:37:ae:b8:6d:23:85:69:15:c6:01:31:0c:9c:
d3:bd:e7:63:f0:d4:77:f3:7b:0e:d7:35:0a:fd:95:
05:a5:a9:73:6c:61:ec:78:c3:3c:35:50:26:91:7f:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:74:D3:FF:C7:28:09:A4:52:66:71:3E:7F:2B:22:29:94:56:BC
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f3:d9:2a:f2:c6:b9:e8:55:4e:2c:4b:68:1c:0d:b6:24:2a:
2e:8c:08:7d:be:4c:b2:9c:e6:58:44:3d:02:2c:53:b8:0d:ce:
c5:36:4b:78:44:da:46:89:3b:68:3b:3d:f8:a2:c7:e2:6f:88:
4f:81:91:33:5f:6d:d3:9c:bc:9a:ac:24:b0:23:87:a3:c3:54:
d9:3b:12:87:97:f9:32:cf:6a:01:98:6a:27:30:70:d0:f4:76:
7c:dd:c7:15:44:e8:fc:89:95:f6:af:b2:6a:84:04:bf:78:2a:
1e:56:8d:b3:a7:45:62:7d:06:b9:2f:01:13:2e:8a:1a:8c:73:
9d:58:b5:95:4d:67:7e:77:e9:f7:03:4e:a6:b6:5d:77:53:09:
f1:48:08:f6:32:5f:73:ef:aa:ee:fb:07:9d:d0:65:b1:52:d5:
e4:06:86:65:17:dc:30:a9:58:12:49:5f:28:8c:ad:0f:bc:a6:
11:61:51:67:e2:37:c2:be:96:72:98:c1:67:4b:28:9d:a4:ec:
81:d2:8d:a0:18:70:33:66:38:63:ee:57:5e:24:0b:b6:7d:9d:
ba:0e:c3:9b:e8:af:60:77:04:80:bb:8e:fb:b4:5a:c3:f7:66:
7f:b6:8c:94:6a:20:fa:ff:b9:90:a3:53:77:50:63:7d:f7:9b:
ac:18:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:21 2025 by rpki-client