Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File: GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier: a+iCCITtrLzDRBOsONwgAPs92NPOwIKX63rGj45P/64=
Subject key identifier: 2A:BD:F6:F8:8C:FC:D0:41:BC:90:7E:16:A4:02:4B:1C:89:1A:18:02
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer: /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial: 0194BBCEB6D3AA9B8520C8CD24E54F2942AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number: 0B8A
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: 04NoALb8wxNp4KUR+lJwS+pdqEvTkUjWUU/QioX6PJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:d3:aa:9b:85:20:c8:cd:24:e5:4f:29:42:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=2abdf6f88cfcd041bc907e16a4024b1c891a1802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:54:59:01:21:d0:ee:6f:24:51:7d:8c:b7:
f0:46:14:e9:6a:c0:af:b9:ca:6f:14:2f:f5:87:2b:
08:b1:e6:99:33:da:fe:7a:cf:6a:83:41:83:39:cd:
ed:97:c3:51:c9:27:4e:fe:bd:cd:93:b7:a2:e7:ff:
24:7c:93:aa:73:ef:51:c1:86:4c:e1:4e:f0:88:ab:
c5:b0:68:53:7f:ea:df:0e:bf:10:d9:10:27:45:02:
9d:21:c9:a0:0a:cc:9e:34:a7:ee:3a:7e:d2:1a:70:
c4:80:9b:b3:ce:fc:61:6f:0e:2a:2f:28:4d:6e:e0:
b6:a6:65:60:b9:28:37:1b:4f:a5:58:49:6e:d5:66:
8a:fa:7f:11:b1:29:60:23:61:d8:98:38:99:59:d9:
11:aa:62:90:2e:de:78:17:63:fc:53:4d:f6:39:dd:
ec:1f:ba:fd:17:5b:a1:b2:dd:53:2c:33:ee:eb:d4:
eb:80:90:39:79:30:51:b0:a1:4f:b1:7d:17:b2:b5:
a3:18:e8:3d:d7:74:38:db:ec:1c:c7:3d:59:5d:3b:
de:e5:b8:f2:67:0e:ac:ae:21:8e:cb:87:b6:3e:26:
04:9e:f5:53:49:49:96:fb:85:65:c8:1d:4e:36:0b:
7f:d8:b6:9f:0c:7a:c7:d7:01:b3:4f:f5:30:62:4a:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:F6:F8:8C:FC:D0:41:BC:90:7E:16:A4:02:4B:1C:89:1A:18:02
X509v3 Authority Key Identifier:
keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:49:c3:06:79:8d:06:eb:32:f7:79:24:3d:26:06:bb:2e:83:
f0:c9:17:8f:aa:7d:87:97:85:c0:81:c0:1b:18:fc:11:e6:d3:
06:0e:30:dc:10:da:bf:f8:ca:5e:e8:97:7b:ae:65:77:3a:bd:
44:98:6d:93:8a:35:a3:2f:8d:d5:94:54:06:e0:06:97:9c:fe:
7e:1c:b6:d7:4d:f4:63:38:68:bb:4f:65:e3:12:db:d6:40:8a:
57:c5:61:bf:d6:3e:1f:fe:c3:be:ef:80:b8:e3:0f:fd:36:42:
9e:13:bc:68:fe:ae:19:3d:f7:fc:0e:9e:b7:70:b4:bd:96:7f:
7f:87:e8:c1:32:7b:cd:56:b0:e4:6f:6d:c4:58:c1:32:4b:ef:
e4:f8:e9:0b:da:0c:50:14:02:80:68:af:dd:fa:bf:83:0d:10:
45:5b:93:a3:af:6b:66:b6:b5:8f:54:49:6c:4f:7d:12:e1:a2:
cb:06:42:7e:8d:f3:24:35:73:f4:43:13:6b:c1:cf:0d:f9:c0:
73:fb:37:44:a4:73:df:20:04:00:38:53:54:4d:22:ac:d5:91:
a3:b5:1a:c1:6f:c3:78:cd:14:57:52:a9:e8:91:33:e9:9c:af:
7d:25:f0:71:f8:b7:2c:34:f5:bc:52:69:bf:f5:79:03:98:ea:
78:3b:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:00 2025 by rpki-client