Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
File: GckfHLCHQjKgT7wJK6poiszsydc.mft (raw, json)
Hash identifier: ez3Ny50qTehpX7/tSxqUHroEzEaxPBxGVVDTzeKHKJk=
Subject key identifier: 23:4F:C5:AC:A5:96:36:CD:86:2B:46:3F:65:EE:4A:D7:F0:9E:8C:73
Authority key identifier: 19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
Certificate issuer: /CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Certificate serial: 0194BC049F92428D84F416012361B1CD101C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:06 +0000
Manifest this update: Fri 31 Jan 2025 11:00:06 +0000
Manifest next update: Sat 01 Feb 2025 11:00:06 +0000
Files and hashes: 1: GckfHLCHQjKgT7wJK6poiszsydc.crl (hash: FSKzi+qmlWwF1WXiKZa88wo04ZNFtxKek8ZxJZ/4oXM=)
2: vIkXi13duBYnSxCNLM5pa4ja5hM.roa (hash: AZhzU1QaQiAy9JJdY72EUz3F5Q2aGcy4usPFgiaTx0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:92:42:8d:84:f4:16:01:23:61:b1:cd:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c91f1cb0874232a04fbc092baa688accecc9d7
Validity
Not Before: Jan 31 11:00:06 2025 GMT
Not After : Feb 1 11:00:06 2025 GMT
Subject: CN=234fc5aca59636cd862b463f65ee4ad7f09e8c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:e5:36:c5:91:fa:fb:a0:21:93:55:37:9a:
1d:d1:ec:43:04:af:91:f8:9d:25:f0:c7:d5:40:a7:
75:47:8b:24:04:21:e5:26:f6:4a:ae:60:27:d0:a2:
76:a2:aa:0a:42:e6:fc:b0:31:05:d2:fe:99:3e:22:
65:ab:58:fe:4a:61:8f:ce:e9:d7:ba:5d:5f:c0:26:
4b:e7:00:10:59:cb:d9:ba:b1:f8:52:61:10:6e:34:
30:43:14:8c:b9:e4:2c:43:40:e0:ca:9f:ad:69:13:
6b:fb:c7:38:e6:45:ec:5b:a0:1f:7d:a4:54:ba:b0:
ad:53:21:41:ac:31:ad:3b:6b:05:76:9d:49:22:ba:
dc:f7:59:20:81:25:7d:04:33:2c:fa:d1:45:49:b3:
1a:dd:ec:84:50:71:21:3d:31:b6:4e:97:05:35:36:
44:04:98:40:dd:87:cd:84:5b:c1:08:b7:05:1c:cd:
b2:94:38:eb:bf:6a:43:39:8a:85:b7:9a:5d:24:56:
96:7d:bf:3d:10:d5:58:42:bd:2b:a2:de:00:e7:89:
bd:56:63:de:8b:81:a4:61:44:5f:fb:8b:17:54:f8:
dc:f2:8d:0f:3b:0e:b6:ce:25:2b:aa:f9:34:8c:e4:
4e:fd:3c:3b:f9:cd:54:0a:d8:87:d9:86:a2:7c:2e:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4F:C5:AC:A5:96:36:CD:86:2B:46:3F:65:EE:4A:D7:F0:9E:8C:73
X509v3 Authority Key Identifier:
keyid:19:C9:1F:1C:B0:87:42:32:A0:4F:BC:09:2B:AA:68:8A:CC:EC:C9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckfHLCHQjKgT7wJK6poiszsydc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/046337-4f1f-444e-83d7-054d65d7247f/1/GckfHLCHQjKgT7wJK6poiszsydc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:81:97:92:2e:22:80:00:71:ea:42:88:a6:c8:f7:99:ca:
14:86:1a:22:32:97:30:9b:8e:b3:54:73:d2:5a:af:89:bd:bf:
14:ac:4d:1a:7a:e2:5e:bf:8b:90:95:ec:dc:45:01:9a:d5:e0:
11:20:57:fe:d1:93:cc:3b:ff:3e:c5:a1:26:6b:08:e1:bb:e4:
6e:28:4c:53:fc:a1:dc:ea:55:52:fd:68:ff:6c:8d:15:d3:63:
6c:c6:0c:fb:e3:94:39:82:ce:4e:dd:28:29:a4:2c:92:7c:9f:
a6:97:c5:bd:e5:a0:05:a8:5f:9e:33:b3:83:09:56:5d:77:1c:
da:71:aa:15:6c:42:2c:3c:48:75:4d:e9:75:28:88:f8:00:15:
4a:f0:c8:d3:8f:d3:87:d3:38:d7:df:2c:1f:8d:73:49:3f:7b:
4b:88:63:57:b1:2c:9a:09:d9:69:48:3b:5e:66:1b:d2:ce:49:
f8:0e:4c:3a:36:c4:25:6b:64:bb:2a:88:23:a3:79:66:47:90:
6e:a4:1d:96:57:a8:f8:be:29:9c:84:c2:e0:7e:2a:7f:52:29:
06:ab:d5:dd:5c:e6:b5:12:67:91:53:e5:40:37:b1:a2:b4:25:
96:58:e8:dc:6c:47:d0:86:f0:e3:0d:55:51:02:f7:4b:61:82:
d9:c7:c3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:12 2025 by rpki-client