Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
File: GjYLuKDpc6mKMX37qjesPBTFhwU.mft (raw, json)
Hash identifier: 3BnB/8sdTLBAwF9EIDkqIts+5X9N7/F6ZNrbfvi1bJg=
Subject key identifier: BF:02:FF:DB:BB:8A:7B:AA:69:38:A6:73:3E:4B:DC:98:D0:29:43:5F
Authority key identifier: 1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
Certificate issuer: /CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Certificate serial: 0194BBCDE91B7D145FA7820CC5019859D330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: Fo-0BOVrLJk4MeIxtH-OUY39SI4.roa (hash: VMlQPo02+nWPajybct86iEub80W0J6j/yx0Y3d+fqqk=)
2: GjYLuKDpc6mKMX37qjesPBTFhwU.crl (hash: k8TZuHBZLW102aqUqsaiIU9ojfIVrdhqMvvQUV13b/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:1b:7d:14:5f:a7:82:0c:c5:01:98:59:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a360bb8a0e973a98a317dfbaa37ac3c14c58705
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=bf02ffdbbb8a7baa6938a6733e4bdc98d029435f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:1a:90:4f:b3:be:30:c8:a7:48:bd:ae:21:
5b:62:2f:d0:54:49:3e:69:95:11:a6:dc:7b:7b:4c:
db:11:a0:57:31:6f:bd:c6:c1:20:3c:92:07:e4:39:
b6:10:85:ac:64:25:bd:13:f1:ae:ed:ba:e5:b2:1f:
03:b6:5f:6b:21:14:41:b3:e4:e0:bf:69:c8:30:21:
0f:6c:af:b6:04:f4:d5:56:6b:c9:8c:48:d9:c0:20:
21:b4:7c:65:84:6f:f6:4d:1f:14:c4:58:93:c5:69:
29:58:26:63:18:d3:e7:18:4a:66:2b:3a:ca:4a:dc:
c3:be:26:cb:6c:4c:b1:35:f1:85:6e:30:26:9e:42:
6e:3c:af:9a:ad:02:64:85:a8:9e:91:2c:08:21:7a:
1c:4a:63:92:8e:22:2a:b0:e0:ae:d0:0f:41:83:35:
f4:4b:38:4c:b9:8c:fb:c7:ba:d9:ed:09:b1:e9:2d:
af:a9:29:33:4a:6d:d6:86:12:28:c1:73:dc:87:66:
cb:99:54:0e:b4:ae:21:fd:95:e1:9b:46:71:0e:66:
70:5c:bf:68:2e:b7:29:4a:5a:c9:d8:10:b2:c6:db:
95:48:06:56:5c:04:ba:c4:44:69:1a:f7:c7:55:56:
b0:9f:af:2a:ec:5c:04:01:ad:f9:9f:22:2d:36:c6:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:FF:DB:BB:8A:7B:AA:69:38:A6:73:3E:4B:DC:98:D0:29:43:5F
X509v3 Authority Key Identifier:
keyid:1A:36:0B:B8:A0:E9:73:A9:8A:31:7D:FB:AA:37:AC:3C:14:C5:87:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjYLuKDpc6mKMX37qjesPBTFhwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/GjYLuKDpc6mKMX37qjesPBTFhwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:f3:eb:87:b6:f1:cc:a4:fb:cb:56:6b:c8:1e:56:a4:5c:
de:65:78:58:6e:de:7e:e8:37:68:4d:07:83:01:9d:9d:9c:3c:
fe:94:27:f8:22:b2:67:6d:83:f4:de:c0:6f:79:2e:d5:c6:aa:
99:50:bf:b9:0b:94:6b:19:4e:60:60:cf:2e:a2:8c:11:2e:85:
0c:08:5f:c3:e3:c1:cc:b8:bd:d4:aa:a8:c8:88:85:53:30:fc:
17:bc:90:a9:5b:bf:e9:62:bd:7d:52:9b:9f:a7:44:42:3f:f4:
ca:9d:ac:ac:d3:a6:78:27:00:ca:4b:75:1b:33:42:82:5b:31:
0e:4c:e3:e4:43:aa:0b:c7:fb:9f:04:b4:1e:78:b3:38:00:3d:
2b:07:29:67:b8:8a:df:4c:56:36:ce:9c:c2:f1:e3:d3:38:76:
c4:f3:46:53:ea:5b:43:42:9e:1d:99:5b:2a:a4:7d:a9:10:ce:
89:28:49:1f:ad:30:4d:ec:66:0c:71:25:57:3a:12:e6:6c:cb:
61:cd:e3:40:87:c0:a4:53:1c:78:ce:e5:92:db:be:59:f6:28:
ba:08:34:b5:1a:39:c6:1d:c8:41:1c:66:28:e5:6a:c8:10:47:
7f:f3:e2:78:39:33:8a:5e:9f:07:9c:da:c5:ab:f7:ff:c9:25:
da:ad:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:12 2025 by rpki-client