Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
File: Gk0JI-wQZndgrYguavmhVpnAXvg.mft (raw, json)
Hash identifier: l+E/+j3gEHLt4Jb26CkVICQGWMzI2Jvzqbo3CRByJgA=
Subject key identifier: F9:F0:CD:9E:E4:B3:1E:93:EC:88:DB:D6:DA:17:5B:63:9D:15:49:02
Authority key identifier: 1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
Certificate issuer: /CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Certificate serial: 0194BBCEE147F79995F08E7C4E43579F53D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
Manifest number: 0CBF
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: Gk0JI-wQZndgrYguavmhVpnAXvg.crl (hash: DDAS5BjtDvz8S7OzMMVEjyz4tk/kHjz1mPhxk2PCS4M=)
2: ZdLIbn9HJxp8pdvNeDczvn0TQ4Q.roa (hash: rg+IefpKLZ6BZTDP0ZlvyqCjjEypkuxTFlnDiZulEgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e1:47:f7:99:95:f0:8e:7c:4e:43:57:9f:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4d0923ec10667760ad882e6af9a15699c05ef8
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=f9f0cd9ee4b31e93ec88dbd6da175b639d154902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:fb:17:07:51:83:89:78:3c:64:a2:ba:d3:
0e:d1:04:0e:b6:27:2e:fb:2a:40:15:d4:d0:bf:e6:
b9:0a:10:6d:52:15:1e:0d:e2:17:60:ad:b0:42:30:
23:42:bd:c4:4d:e6:bc:43:f1:da:74:9b:82:18:3b:
96:3c:a9:a8:2b:08:18:cf:3d:0a:2c:df:a0:0a:ae:
50:21:fc:43:04:1c:46:42:63:e1:c6:70:2c:88:98:
5e:bc:dc:49:e5:c7:4e:e9:bb:3c:dd:56:d5:54:00:
76:8f:d9:a7:82:6a:ed:64:80:47:9a:56:11:07:80:
81:0a:47:3b:ea:6a:16:0a:b2:b3:19:6e:ab:fe:dd:
a0:69:4c:39:35:58:56:f3:3c:c8:08:21:43:b2:7d:
db:0b:9b:2c:10:83:9b:fc:98:35:a0:1c:57:13:c0:
e1:02:3a:5b:6f:85:29:d3:d5:44:0c:6c:d3:c8:fb:
13:bd:17:ed:8d:db:37:f4:78:7a:45:8f:25:d8:45:
cc:19:d1:23:9f:42:e2:d6:80:e4:0c:89:01:42:4e:
6d:2c:5d:80:e6:da:0b:90:70:6b:6e:ef:f6:e7:4a:
44:91:8d:0a:de:2b:54:2e:4b:ad:70:38:13:c3:7f:
69:7a:2c:cb:6d:ea:c3:57:5d:8e:f0:bb:9e:00:1b:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:CD:9E:E4:B3:1E:93:EC:88:DB:D6:DA:17:5B:63:9D:15:49:02
X509v3 Authority Key Identifier:
keyid:1A:4D:09:23:EC:10:66:77:60:AD:88:2E:6A:F9:A1:56:99:C0:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk0JI-wQZndgrYguavmhVpnAXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3564e7-11d4-4d7a-8bcc-a953768fde2f/1/Gk0JI-wQZndgrYguavmhVpnAXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:53:56:a3:22:30:46:47:4a:8a:7c:66:96:01:71:9c:ee:22:
ff:1d:0d:6e:b9:88:40:98:fa:f1:91:8e:3d:ee:78:b1:01:c4:
6b:2a:29:ee:b2:13:4d:89:ea:a8:ca:ee:b7:87:4c:b8:03:1f:
03:fd:b2:7d:28:1b:63:f2:39:38:74:9e:66:29:aa:49:6c:9d:
04:6c:03:8b:b7:40:01:29:99:c1:92:44:75:00:9c:58:e6:cc:
f2:ae:a1:fe:e3:81:d5:85:7d:3e:04:fe:c3:48:92:10:22:08:
8c:50:80:a1:eb:5f:1c:c8:6f:f2:f0:c6:96:99:86:32:d0:01:
58:68:c8:e7:f6:9c:ba:89:16:6b:80:78:ce:0b:36:d8:e8:3b:
ab:dd:62:08:16:96:4e:51:5a:d9:f9:db:a8:3e:62:09:54:ce:
2e:0f:00:c6:21:b0:61:5c:8e:53:0d:14:c2:13:9d:10:10:43:
54:04:d3:00:bf:2e:90:9a:64:c0:d9:a9:b8:aa:14:ea:33:ba:
db:77:e3:f2:53:e1:5c:88:27:b0:78:7b:e6:4b:1a:60:a4:dd:
63:c1:6b:50:80:eb:99:42:a2:3f:f4:8a:2d:13:4d:46:4d:30:
d6:0e:62:db:a2:0e:d8:21:c7:1e:23:57:5b:06:49:ed:c8:65:
a5:42:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:38 2025 by rpki-client