Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: 2yoWDCJRrVBGnVSKm7oTp7swgMUtBqzn6B9AOS+Og8c=
Subject key identifier: 3B:70:C1:39:C4:13:82:4E:63:64:4F:98:F3:64:44:BC:F8:FD:72:C5
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0194BC3C51ABB9FC81880F4001FEBA834F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: lQ9YXlgR2Anw8DTT3DQb2+YF7fiQiarS1UE1lM9gQL0=)
3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:ab:b9:fc:81:88:0f:40:01:fe:ba:83:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=3b70c139c413824e63644f98f36444bcf8fd72c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:1f:3f:d5:40:7c:47:cc:25:0f:c9:80:24:
15:77:10:8a:4f:71:ee:95:3a:18:e2:49:7b:63:f7:
42:23:03:84:ba:1c:45:f2:e5:bf:6c:a0:25:95:07:
2d:bf:ef:30:16:71:06:b4:66:91:88:5c:d4:aa:7f:
85:aa:b3:2b:45:5e:44:5d:83:20:84:2c:01:86:b4:
3e:de:d4:c8:1a:2c:8d:48:93:61:c0:58:bd:7e:d4:
4e:01:62:6e:3d:19:9e:1f:2d:cd:c7:bf:ab:47:fa:
77:81:8e:5b:d7:3d:73:09:94:23:9d:80:86:33:88:
bc:db:63:a0:c9:5f:ff:da:9a:c9:d3:3e:8e:9a:9a:
63:ff:64:e7:d3:f3:75:d9:13:ac:39:33:18:62:68:
3c:cd:95:8f:a7:86:ca:c3:5c:95:78:00:5e:84:dc:
e5:3f:6c:69:fd:9f:49:3f:5c:9a:21:a9:16:7a:83:
9c:00:16:c9:7c:83:f4:29:ce:9f:ed:52:77:fa:b0:
5c:7f:b8:32:6c:97:fc:ca:03:4a:7e:0c:ee:f8:cc:
b9:e8:67:7e:9c:df:da:a7:ac:b3:75:d7:17:85:07:
8a:18:75:ef:ef:87:c5:a3:36:5e:02:b5:c8:c2:2a:
b7:ca:b2:1f:34:f9:fd:93:d4:08:13:06:1c:d8:d3:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:C1:39:C4:13:82:4E:63:64:4F:98:F3:64:44:BC:F8:FD:72:C5
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c6:bc:75:ce:25:52:5d:72:cf:01:b2:ce:5f:cb:cf:fa:2a:
14:f8:d6:61:5b:62:40:36:c4:b5:d5:c8:13:24:2e:e4:bc:4f:
d2:54:65:da:86:ad:a2:ac:43:eb:31:11:73:81:e8:19:eb:a9:
4b:4b:3b:af:54:14:96:44:58:0e:67:f0:e6:76:66:50:18:07:
d8:8d:bd:4f:30:de:32:ea:b2:30:84:16:ba:44:80:53:f7:c5:
ca:ef:8e:36:95:b8:04:5e:74:7c:fe:65:e3:09:67:bd:e3:c7:
a0:b0:59:b9:98:04:a6:e9:b7:8f:d5:81:cf:81:4f:b2:10:d9:
50:f3:29:b0:19:dc:8b:5b:42:80:46:ce:0e:c5:ea:e3:46:ad:
2b:17:38:70:85:ba:84:1e:c2:ef:55:1d:b1:3c:df:28:94:27:
24:b1:ab:af:1b:b7:ab:5a:16:28:75:ac:57:44:b2:f1:b9:75:
c8:ce:d9:02:a6:e4:bb:dd:5b:d7:f3:b0:12:ba:d2:20:80:d4:
12:4a:76:a8:26:23:9c:d8:e1:4c:56:ab:8d:86:46:e0:7a:8e:
ee:02:6d:a9:ba:86:e3:a2:db:e9:e8:03:b2:87:fa:85:42:8b:
a3:ec:6d:1c:a8:49:62:b6:56:26:fd:a7:be:fc:0b:a8:6f:31:
50:89:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client