Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
File: GyZGgoqep7-NQLT58LpEzNyyzt0.mft (raw, json)
Hash identifier: koq/FxevknIsiXXkBT1piBUv92lucGTbxUFr4RAUONg=
Subject key identifier: 39:75:96:D6:7E:71:66:D8:91:D7:A7:39:41:81:A6:2C:7C:9F:28:86
Authority key identifier: 1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
Certificate issuer: /CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Certificate serial: 0194BC04CBF1E263858F3536C3DC4BBA5776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: GyZGgoqep7-NQLT58LpEzNyyzt0.crl (hash: LdVzxZWt6yUOZ79nz0HbW9fzGuvUQWKOuOYp3Azcjm4=)
2: cXeJCUogAaEPl1tXX88SkxpGNt0.roa (hash: Dh4HnPXXYE7MyBz3BsCQMLZhlOfs6wXwyiVfb9zL+aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:f1:e2:63:85:8f:35:36:c3:dc:4b:ba:57:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=397596d67e7166d891d7a7394181a62c7c9f2886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:ae:31:73:83:17:ed:60:18:f3:99:f4:fa:
75:ec:a7:c8:86:ee:e8:ff:6b:3e:75:5a:90:dc:8e:
85:7f:b1:4c:99:da:8d:f8:ae:fd:94:b9:35:b6:ff:
9c:56:ea:4c:7a:ac:26:29:ad:86:e0:b4:bc:33:29:
f5:4a:9f:23:e8:88:a8:e3:5a:11:6e:1c:c7:d2:52:
79:0d:e3:d7:3b:3b:ea:0a:84:60:e7:ed:80:ef:a7:
18:2f:56:a8:10:23:ca:71:cf:7b:13:d0:e6:c0:92:
62:33:03:be:66:d2:cd:fe:23:43:de:d3:00:64:8a:
51:a0:b9:bb:95:75:91:3e:4a:d4:7a:aa:00:5c:44:
70:3e:9b:f9:0a:3e:4d:0d:41:b0:7f:73:4e:9b:53:
a4:94:ca:ce:e7:62:17:fb:72:88:cd:4a:ec:e1:47:
99:bb:82:af:ec:61:fc:ec:6e:fc:cd:2a:9b:73:d6:
0e:51:cb:0a:d4:90:d2:0e:11:68:43:1c:bf:a4:c5:
8b:e8:28:5b:40:c0:f3:11:66:69:42:4c:3d:63:87:
0a:6a:fc:ec:57:a9:63:68:48:11:a2:fe:b9:c1:cc:
ec:a7:33:48:3e:43:0c:07:30:b5:05:da:c0:db:7f:
48:c9:d4:50:03:c5:d1:8a:fa:d7:1e:11:4b:f2:a5:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:96:D6:7E:71:66:D8:91:D7:A7:39:41:81:A6:2C:7C:9F:28:86
X509v3 Authority Key Identifier:
keyid:1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0d:9a:ff:e7:72:18:e5:60:b7:59:5d:75:94:ce:0e:15:5c:
47:20:21:fe:66:64:28:85:61:a4:94:88:18:53:e0:1c:cd:30:
e5:22:3e:c5:47:37:bd:71:ab:b5:f3:ec:99:69:bc:21:c2:b7:
bd:73:17:65:e9:e5:81:5e:7f:de:c0:67:c7:14:af:92:0c:22:
4f:c6:ca:1e:70:8d:08:59:64:ca:fb:6a:98:0e:bb:68:86:c1:
fd:c1:87:98:2c:94:c6:f8:8b:a7:e3:47:98:85:c9:15:94:24:
ca:f6:fc:bd:37:38:3b:e6:f2:2e:ad:5e:a0:14:98:fc:32:7a:
70:59:5f:a1:b8:b2:e3:34:df:15:90:45:83:98:92:ba:9f:45:
73:9b:36:ab:2f:9e:85:f9:79:5b:4b:eb:e4:db:c2:78:00:04:
58:d1:85:57:41:51:61:95:00:91:28:2e:de:a3:07:49:75:23:
38:67:0d:6a:39:77:8b:16:18:a3:1e:12:5b:ae:31:6a:13:02:
5e:ba:39:7e:61:22:77:87:59:ea:c8:ef:fd:97:53:7b:e1:d7:
60:65:2f:ee:dd:2a:8f:68:5a:58:9c:09:56:ad:36:dd:7f:09:
86:c6:cd:32:02:37:7a:03:7f:f3:7d:aa:30:2f:a8:af:e1:1d:
89:98:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:22 2025 by rpki-client