Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: XWKqokS6mM/dALLA9ScL+RMjiyX2udcQGpPu7rj/1Eo=
Subject key identifier: A6:08:F4:07:4F:D5:1B:A5:54:18:3D:56:B4:11:B9:EF:2D:7A:DD:07
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 0194BD177103E5C8F4416B2A4FF52E24D4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0AFB
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: VpIAQ/woE4HyhSMOyQEILgzvvybrVdbFaGeGmdo5qhQ=)
2: X3uPBxzPVXv3n_QN1aGdKbmuIRY.roa (hash: hUPc8yRkBzbeF7M/RRJW79E+lPzVmxoaNEB54waojEo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:03:e5:c8:f4:41:6b:2a:4f:f5:2e:24:d4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=a608f4074fd51ba554183d56b411b9ef2d7add07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:1a:c8:b3:72:08:df:ba:10:b2:89:01:08:
23:11:7a:d5:a1:68:26:d3:75:0f:b4:3a:31:c1:9f:
73:a9:ac:98:e9:61:f1:06:c5:af:c2:06:a1:36:bc:
49:13:85:2e:30:17:7b:b6:ac:2c:c4:0e:f8:6e:28:
67:1c:3b:47:0a:5f:98:76:3f:83:3e:8a:d4:fc:45:
21:97:71:07:5c:f4:c6:4c:a6:a5:a8:27:f2:87:04:
45:4c:14:d7:11:1c:c0:f7:81:af:0e:9b:ac:9c:38:
e7:ff:6a:bc:27:a4:ab:35:44:ed:29:e7:d5:3d:61:
75:68:94:27:77:f2:7f:79:60:b9:b4:a2:1c:1c:87:
34:7c:0e:bf:46:af:29:08:19:75:e6:3e:5a:9f:49:
60:34:f4:60:06:f6:d1:e8:09:86:7e:4f:01:66:9f:
9f:0d:fd:26:1a:d1:2c:fb:b4:f8:d8:ff:bb:f6:f9:
e3:2b:55:41:39:13:c2:7d:fb:23:51:38:36:c0:87:
9a:5f:b0:c2:b3:09:3a:f6:37:25:cd:64:f0:42:0e:
87:60:bb:f7:9b:79:41:a6:cb:ae:8a:3e:fa:54:28:
9d:6a:ce:bc:a5:fb:fe:33:7f:a8:53:97:03:14:3b:
34:4e:0c:67:0e:06:d4:77:41:c7:49:55:51:09:12:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:F4:07:4F:D5:1B:A5:54:18:3D:56:B4:11:B9:EF:2D:7A:DD:07
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:d1:7a:10:a2:fa:e1:75:02:36:5c:c2:cb:44:64:f2:99:
f3:e4:26:ee:53:ad:bd:f6:7d:87:92:e7:7d:e8:d7:58:95:ac:
39:37:26:db:0a:76:bf:20:c7:27:9f:93:a8:33:c5:66:95:2e:
78:f1:93:0c:3a:90:09:d7:5e:94:65:9e:16:f3:8d:1c:a9:47:
f2:e5:e7:7c:3b:ae:b6:08:a4:94:cf:82:59:e8:f1:3d:80:21:
d6:e3:59:af:bf:6b:12:cd:1d:cc:8c:db:10:bc:43:f9:86:1e:
f6:56:26:59:20:1f:90:38:35:c7:79:67:0d:2b:7c:e0:fb:9f:
bc:2b:d4:0a:e8:2c:35:20:ef:b2:e7:73:d4:da:d0:89:27:5c:
c1:f5:9c:dc:fa:d5:1a:48:5b:0b:ff:e5:a4:90:ff:b6:45:b4:
ee:78:8c:bc:89:ae:ca:87:21:90:0a:21:5b:40:51:3d:54:8a:
56:b3:e0:13:77:29:12:26:3e:7c:3c:4a:a9:80:4d:06:a7:4d:
62:82:88:f7:4b:d0:c3:2b:8f:d6:8c:9c:c9:7b:1d:94:e1:ef:
88:97:62:1a:c2:a7:a4:aa:c9:0e:a1:b4:44:cc:30:c0:14:1c:
0c:e8:cf:25:c6:28:10:44:62:79:2c:9e:83:24:df:9a:16:18:
df:74:da:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client