Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: A9BWmVl6arkAR1UlMYT4vZLVoG81x/OlRWcRnjrZz/U=
Subject key identifier: 1E:15:75:A3:FE:B4:70:59:34:E8:B4:0B:92:CB:77:94:D9:13:6B:82
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 0194BC05196F860173A4647212D556469301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: 4rKwcelpj62ma0rH43l43fnntJ/WbtFJUhvuBbKGYDE=)
2: awiZZNgesWW0Sbd6K5IRMUenzBI.roa (hash: OVxRXVan7pYiQ6GVr4WHU+GWhPaWUbbRmfzBGki3zjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:19:6f:86:01:73:a4:64:72:12:d5:56:46:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=1e1575a3feb4705934e8b40b92cb7794d9136b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:99:fe:8f:c8:4c:55:82:30:86:8f:e3:1a:54:
14:f3:50:05:19:09:68:97:e1:f9:b8:9e:7d:f5:66:
f9:d2:a5:80:1c:be:87:05:c8:8b:c9:18:bd:34:40:
33:8c:8d:c6:7c:89:31:22:d7:bb:1d:47:35:d3:5c:
cb:7b:db:81:54:87:fa:e1:79:0d:5f:a7:11:aa:d3:
64:20:57:01:cd:08:8f:11:23:6a:e8:c8:d6:e9:7c:
14:8b:e2:02:ad:80:c8:6c:01:44:d9:17:6b:be:18:
67:6b:c8:28:1b:f9:be:55:b0:a3:7e:81:be:b9:88:
ad:7c:fe:d7:09:6c:98:1d:c9:9d:91:38:dd:2b:3c:
0c:74:c8:17:e3:b8:d5:ce:11:9f:b1:da:c2:4b:1d:
6d:88:8e:4a:33:c9:bc:da:38:6b:e3:fd:4c:c8:44:
93:1b:9d:a0:f7:98:fc:4e:98:de:20:07:fe:ef:ef:
8b:9f:3f:ac:29:10:54:c3:20:14:f4:f4:fd:82:e5:
4f:2e:6c:7b:96:4d:b4:5e:b3:d1:dc:4e:9b:34:34:
f2:9d:2a:6e:18:be:f3:b5:0d:6b:01:d8:29:df:84:
0e:3a:69:be:75:ca:a3:52:bb:89:00:79:d5:21:77:
21:ed:0d:14:ee:c6:67:83:38:8b:31:9d:73:bf:bc:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:15:75:A3:FE:B4:70:59:34:E8:B4:0B:92:CB:77:94:D9:13:6B:82
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:24:c3:7b:fe:61:d9:39:ac:81:e8:4c:38:2b:4e:f0:0a:65:
47:54:b5:ac:2b:53:43:95:ba:2d:04:3f:aa:2c:2c:a1:8f:c2:
72:3c:fd:84:92:65:ea:13:88:71:b1:5e:d3:0b:2c:0a:85:98:
1a:6d:16:f4:d1:0f:27:60:89:a9:65:11:41:ff:de:38:51:6f:
26:5d:b8:36:f6:46:eb:5a:43:bc:6d:ad:fb:8a:52:2c:12:bb:
87:ca:67:1a:bd:76:45:dd:07:90:6c:c3:54:50:8a:77:3f:ac:
1f:2d:9f:1a:ce:93:90:32:37:8f:a2:51:19:fc:59:16:96:bc:
bf:05:ae:bd:49:e8:14:a0:74:a3:c8:09:8a:cc:0b:39:39:9e:
a7:36:a0:12:3c:6e:57:65:53:ea:f1:d9:b5:c3:9d:78:99:07:
df:7d:26:b4:ae:b1:e9:5d:9b:e1:65:d6:f4:ad:c3:2b:41:c4:
c1:a8:f5:bb:07:f3:e6:be:20:27:90:90:07:d5:27:2d:82:34:
9c:d8:37:3d:ce:b3:03:ee:57:48:4b:7f:33:fc:52:3a:1f:ce:
e4:8b:e7:27:4f:db:5a:37:68:6a:e0:dc:76:18:51:0a:b4:82:
4a:fb:4f:2b:8f:c2:69:20:20:f6:eb:b1:98:8d:4c:a0:d4:c2:
20:1c:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:22 2025 by rpki-client