Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
File: GDDmA-nKjAXUwbxisLdue9nRiQk.mft (raw, json)
Hash identifier: BSqRc7B/MR/qCUrPW1OYvoppTZznkSZnbqVt3JGxcsA=
Subject key identifier: C5:B6:CE:1C:3C:AC:19:37:8B:0A:AB:58:30:0B:B7:AE:F5:DD:C6:33
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 0194BC72EF59BDBF792F6693972D58B012CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: GDDmA-nKjAXUwbxisLdue9nRiQk.crl (hash: PHVYI+Lq0+NOVXKhdCT1YNZdWyx5HhK9jAlcRRIisOQ=)
2: o4yUZzbKz_wfUkXyIRtz_sPdHfw.roa (hash: BiVeXsHTenn/poTYlXrG4Bvxv5uxzXwbjeteQc7yW9U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ef:59:bd:bf:79:2f:66:93:97:2d:58:b0:12:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=c5b6ce1c3cac19378b0aab58300bb7aef5ddc633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:5b:22:e7:53:1f:f7:10:c4:a0:47:28:4a:
90:a0:95:8b:be:80:a4:14:d6:57:d4:ee:c4:99:5d:
a1:59:96:40:a0:16:67:49:c3:ca:74:f9:a7:08:04:
5f:3f:a4:b5:81:bd:ba:c3:50:7e:1b:02:8e:3a:21:
70:b1:50:a5:57:74:6e:ce:62:31:b1:d6:df:b6:11:
27:6c:30:b8:5f:72:8d:6b:d8:f3:52:b2:4d:da:51:
b2:ba:c1:22:61:90:e0:84:e4:1d:35:fd:86:09:13:
9d:ce:d3:01:2c:6a:de:4c:3c:20:e6:dc:4d:52:be:
a5:d9:fc:a1:f4:88:b0:90:a2:f2:7e:bd:dc:4b:08:
96:a9:1e:1d:de:af:b9:83:b8:49:a5:49:77:b5:0f:
2c:cf:76:9c:5e:1a:12:d5:f3:b8:7d:29:3f:1c:1f:
84:76:88:18:03:bf:4c:a6:4a:5b:19:5c:01:4e:5a:
59:3f:a5:10:d8:e6:2b:af:ee:0d:54:71:54:10:59:
f3:60:fb:f3:1b:65:17:6d:20:c4:b2:b0:38:e1:fd:
63:dd:47:3a:14:54:ab:ef:96:d4:5a:16:84:2b:8a:
0e:e2:35:d9:b5:a0:d2:e6:c6:14:c7:ec:19:e5:a6:
d2:2a:46:88:b9:85:97:67:be:43:e7:c0:8c:71:0c:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B6:CE:1C:3C:AC:19:37:8B:0A:AB:58:30:0B:B7:AE:F5:DD:C6:33
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c4:7e:90:d7:e6:ca:06:dc:8c:50:ed:48:7d:8d:f2:cc:86:
60:50:10:77:87:3d:54:47:6a:3f:47:1c:2f:b3:b0:65:d0:51:
0a:0b:1d:62:69:7d:b2:bf:ff:30:da:11:9e:e8:8b:91:b4:79:
36:c4:f3:e8:d2:8f:4f:f7:12:83:0e:b7:a9:e6:ed:68:0d:b2:
7d:44:86:33:e1:db:a1:84:5e:f2:e8:ea:34:9e:df:58:c4:94:
d6:85:5d:47:b4:92:3b:86:0b:06:4a:ab:bf:e3:5e:a9:07:a9:
49:9b:b2:d8:ff:b3:ea:c9:3f:5c:2f:09:46:86:22:4d:25:23:
08:c3:e2:ad:16:7b:4a:2c:4c:69:8c:35:dd:f8:de:35:93:71:
3f:aa:41:8c:2e:98:c7:d7:b5:be:33:3c:99:c1:f5:eb:6f:7e:
0d:4f:03:aa:2a:5e:b3:56:7a:0f:ba:02:2f:fa:3e:17:4c:36:
ad:70:31:e5:69:38:4f:1e:4f:ea:18:e6:56:c4:aa:e8:81:de:
96:e6:a4:4e:8d:a0:46:7e:a7:54:c8:2d:a9:90:6c:a3:c9:94:
e3:01:13:d2:c0:b1:ee:84:36:28:c2:56:88:86:01:66:69:07:
d3:21:d2:c8:5b:d0:c0:7b:8a:34:7a:59:72:9b:4d:45:13:89:
36:43:97:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:22 2025 by rpki-client