Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File: Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier: Uu8Cm6jL16AZQjW4pIQ9p0UTXyBMMBqw9HbaUqQB4JU=
Subject key identifier: 55:93:C4:1B:13:AB:5A:C1:F2:B7:B9:B8:EB:FC:65:90:A8:9F:51:AF
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer: /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial: 0194BCE0680F6E54E632FB1C6144C3FD121C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: wPSFcQj9sr5XF7r9HVHQ973j27tzQXxWIwvu8I8pjrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:68:0f:6e:54:e6:32:fb:1c:61:44:c3:fd:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=5593c41b13ab5ac1f2b7b9b8ebfc6590a89f51af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:bd:b7:2e:be:8b:60:62:80:84:74:da:94:
61:56:97:66:f1:be:4c:a0:cf:43:5e:60:98:ba:b3:
81:b5:a1:41:ed:99:15:d9:16:2e:9b:00:bf:68:e1:
ff:60:f2:64:9f:97:31:cf:a4:9e:79:a1:ae:e7:5f:
d0:39:c2:34:b2:db:93:44:09:1d:2a:30:a8:06:69:
6e:6f:9b:6e:93:8d:70:bf:1e:9f:c5:e7:0a:63:17:
b8:10:b5:20:3d:7d:22:5e:e4:63:40:68:fe:2a:7d:
3b:87:4a:fc:68:3d:7c:87:eb:e5:32:6a:71:a4:35:
aa:57:1b:fa:df:b7:ec:42:7d:54:ac:2c:8d:5e:7d:
d3:96:c7:14:c7:f3:23:07:85:41:28:9c:ea:d2:ae:
8e:0d:53:a3:7a:74:2d:d5:5b:95:c9:e1:0a:31:2f:
8e:2f:7d:3e:ce:b0:b8:e1:e0:0d:d1:e3:d9:18:95:
c9:9d:4e:38:4b:92:54:38:65:5f:25:18:31:4c:7c:
fe:02:6d:2c:55:13:6b:ed:0e:c9:db:a8:43:d6:d8:
be:41:d9:e1:cc:05:fb:da:a2:8a:9e:92:d5:9a:1b:
04:b0:a0:aa:d9:94:92:36:6b:7e:e1:4b:8f:13:9a:
fc:13:d2:04:8b:69:0a:7b:b0:6e:b0:a3:6b:7b:05:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:C4:1B:13:AB:5A:C1:F2:B7:B9:B8:EB:FC:65:90:A8:9F:51:AF
X509v3 Authority Key Identifier:
keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:80:84:0a:67:f1:f5:82:00:8d:84:c1:b9:bd:2d:a3:21:4d:
57:44:39:30:e9:12:9c:d0:2c:2e:10:8e:fa:e9:57:b6:4b:47:
db:a6:f1:eb:8d:ea:df:5b:f9:0a:6c:79:bf:3e:49:0e:ac:b3:
f4:bc:44:af:fc:0c:14:1d:d3:1d:d1:d6:63:77:39:18:c4:b9:
2e:6a:f3:2f:25:87:d2:bf:bf:a3:c9:8d:23:0f:35:d7:ae:6d:
b2:2a:c3:e6:0c:55:24:74:b9:b0:21:cc:f9:55:86:d3:0d:10:
cc:f5:6c:27:d6:31:61:40:51:a0:d4:0f:36:14:4b:a4:24:20:
60:fe:5c:a4:48:a7:37:48:a1:ee:af:59:09:d8:a1:6d:86:2c:
4c:e8:78:5a:b5:df:c9:50:88:1c:ae:e4:de:73:37:30:34:bb:
1e:86:08:84:da:27:3b:81:5c:6f:43:f9:ea:03:94:a7:60:62:
22:75:5c:51:a5:09:d5:3a:e5:f3:4d:91:30:09:fa:47:ea:ba:
65:2b:5b:7b:07:1e:f3:04:09:90:6d:51:c4:63:b8:9e:c9:da:
8c:4a:f7:d8:02:58:4a:a0:7d:c5:03:16:26:d1:87:e9:01:24:
65:ed:05:20:50:a4:fe:b5:61:90:aa:11:4b:1f:3a:4e:1f:19:
09:d0:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:44 2025 by rpki-client