Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: gY0oxU0vlarLtqHBwh9Xq95yGnvddWVac57ecQDOlFo=
Subject key identifier: 61:0B:7D:AD:25:80:C8:10:41:EF:D2:7F:38:D0:28:AB:3E:C6:08:38
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 0194BBCDC65CA03212D55CDB30C094CE0271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 1249
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: ANPDuP4B2dV/UhS2QIDPjzruBqynmboR7/IssffFr98=)
2: bioMAYKF1qqrZbXGWoBChN2Rwsg.roa (hash: XBbDJ/525v0nDOlO1cf/FOJnRgOSNpcxMVq1T633zZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:5c:a0:32:12:d5:5c:db:30:c0:94:ce:02:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=610b7dad2580c81041efd27f38d028ab3ec60838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:a1:4c:d1:e8:b2:eb:2a:5c:bb:a8:0b:c6:
fa:66:44:b0:ea:30:1b:fc:d3:5a:d1:e3:00:0c:89:
b1:4b:ec:b7:f8:9d:ac:cc:83:56:b3:44:35:fd:9a:
5c:15:0e:db:09:17:7f:39:4a:ab:62:b2:96:29:72:
2e:87:d0:a6:e5:66:83:9c:fc:25:72:5e:b9:9f:fa:
de:55:7d:9b:2e:12:0d:80:f9:20:ba:e1:3c:13:65:
c8:4d:3d:a7:70:ee:ca:77:ee:5b:c7:97:ed:58:8a:
f4:21:46:5d:a7:97:e0:b1:09:48:2c:4a:3a:2c:3b:
eb:ba:2d:1a:8e:44:5d:eb:bd:d6:db:20:9f:a8:15:
35:91:73:7c:55:5f:59:c0:63:af:2e:70:20:12:fe:
61:4e:01:62:e5:6c:6a:54:1a:52:93:d8:b0:a4:6a:
10:8b:51:92:f5:d8:b1:3d:39:e4:6e:8f:d9:d0:ab:
c8:5f:90:23:03:0e:8f:05:45:a1:13:11:3a:81:18:
2b:6a:0c:d1:d9:19:8a:51:1e:04:a4:25:de:20:b9:
37:58:c3:b6:1b:98:64:75:2b:f9:6c:ce:c5:43:f1:
27:06:48:80:46:f1:ac:95:2c:f6:ab:68:da:45:4b:
67:64:58:d7:3a:c6:68:0a:a6:b3:40:c8:bc:c1:55:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:7D:AD:25:80:C8:10:41:EF:D2:7F:38:D0:28:AB:3E:C6:08:38
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:33:3d:e5:c5:fe:9d:cb:42:e9:95:5f:fd:8d:9f:c4:98:32:
4c:8e:80:fa:14:39:18:3f:15:52:9e:26:fd:bf:9f:99:17:5d:
36:a6:3b:68:3e:f7:71:f4:ef:0a:fe:43:14:07:cd:64:f3:ac:
a7:be:79:32:c6:a0:0e:e7:67:49:3e:e5:9a:6b:19:a0:4d:9a:
0b:76:95:90:d7:81:ef:99:35:cd:94:c0:40:86:08:c4:ae:9f:
bc:ef:62:c2:1f:32:20:ad:e2:d4:01:81:d0:be:f0:8b:cf:90:
30:5b:5a:a4:3b:16:bd:19:48:99:8a:af:a3:b5:cf:ea:7a:d6:
3f:e5:53:31:36:be:74:4b:04:37:0f:c4:58:4a:5d:05:21:b9:
04:38:9e:1f:0d:de:4b:73:58:42:aa:d5:a9:6f:de:dd:9e:9c:
05:6c:b8:7a:a6:78:59:89:c9:7f:7e:42:56:e3:fe:7e:5f:6b:
20:ac:c9:25:ed:1a:6e:92:8a:5c:1d:ab:ed:bc:96:1a:39:56:
b1:a9:85:2b:40:e8:da:2b:3e:83:e9:83:51:70:d6:57:51:cc:
7f:0b:f0:07:c3:ba:a6:ae:c1:59:63:b9:52:97:c3:85:05:29:
cf:83:20:3b:7d:df:58:c8:3d:8b:1a:6d:89:1a:b9:0a:5f:1f:
9c:06:9d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client