Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
File: GzVUSY88jdU5wlqdhTSPq4F-2iM.mft (raw, json)
Hash identifier: vs9TYL/HNSXoZOtaPzAytyRiEbH2/wwtFdqtINYIxbI=
Subject key identifier: 76:93:1E:3E:58:8B:B7:7D:F7:54:32:24:CF:77:B9:D2:16:7A:0A:2E
Authority key identifier: 1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
Certificate issuer: /CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Certificate serial: 0194BD855FD54B8A0BBFB0CCA9C5350215CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
Manifest number: 091F
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: GzVUSY88jdU5wlqdhTSPq4F-2iM.crl (hash: HD2U+Hscrk3sPwEV9/7fkSQykxO/Kq7NkhSLYZhflVg=)
2: TJqYJ8PgowX2_0fLvr-J92tN24Y.roa (hash: SyEDMYr3gmhjsEM3DpobXAPSbcOSlzfmvEvbnyrm1xs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:d5:4b:8a:0b:bf:b0:cc:a9:c5:35:02:15:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3554498f3c8dd539c25a9d85348fab817eda23
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=76931e3e588bb77df7543224cf77b9d2167a0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:56:1b:aa:25:a2:14:ec:0d:45:1a:55:a3:
96:79:3a:49:fa:2d:b0:78:8e:71:29:5f:6e:0f:2b:
2c:79:fd:33:66:92:41:2c:ce:00:1d:23:94:ed:aa:
63:cf:36:75:98:3a:fb:de:81:db:51:4d:2b:86:a2:
a5:fc:d6:67:fe:7e:73:51:4e:77:7d:31:46:92:03:
54:80:bf:c5:79:8f:50:b3:ba:f9:29:62:c9:64:b9:
ea:8c:52:49:e9:4a:14:6b:75:a8:df:fe:69:c7:48:
26:80:6c:83:70:92:49:10:f7:f8:c0:de:64:95:69:
cc:f2:1c:d2:ba:75:b0:70:6d:fd:9a:44:54:94:38:
0f:9f:ba:d3:38:9a:54:4d:16:ea:53:4f:94:ad:05:
18:3f:04:c7:c9:4b:19:f0:38:19:07:d6:06:b2:9a:
8e:4e:38:14:a6:1e:f1:81:2d:a3:4a:4e:1d:18:53:
e2:77:8c:dc:5e:01:4c:3f:15:4c:1c:b6:42:6d:b6:
4e:43:e4:f3:e2:80:22:3d:b0:fb:3e:b1:98:57:7b:
b2:06:54:9d:86:3e:5f:02:08:41:40:66:f8:9d:98:
6e:02:e1:4a:af:1e:83:81:81:6c:49:7f:67:9c:de:
a7:05:8f:40:8e:ec:7b:bc:00:25:f4:f9:b3:f3:8a:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:1E:3E:58:8B:B7:7D:F7:54:32:24:CF:77:B9:D2:16:7A:0A:2E
X509v3 Authority Key Identifier:
keyid:1B:35:54:49:8F:3C:8D:D5:39:C2:5A:9D:85:34:8F:AB:81:7E:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzVUSY88jdU5wlqdhTSPq4F-2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7b03d1-0e68-444f-9188-76e5ceb03fd9/1/GzVUSY88jdU5wlqdhTSPq4F-2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:10:0b:c0:a4:6a:e0:a9:97:48:b7:94:b9:88:b5:17:22:30:
a2:b6:7f:8c:77:51:7a:02:e1:bc:57:e4:14:14:c6:d7:05:c6:
b2:98:a6:bd:60:3a:f2:ab:6c:9f:53:59:a7:35:72:4b:7b:68:
bb:21:58:0f:2c:30:a1:0b:63:e3:8e:62:e6:2e:b8:61:e1:8d:
a5:0c:9e:f2:e7:38:fe:1f:cb:56:76:8b:cb:7f:05:72:66:7f:
54:b8:ae:15:cf:45:89:ce:5b:b5:8e:77:e6:2a:31:ba:00:1a:
36:b9:3a:dc:8f:e5:44:e3:7a:1a:61:14:fc:6f:9e:01:ab:45:
19:dc:63:26:2b:bb:5e:ed:20:5f:2d:ea:fa:b8:1d:ee:cb:3b:
e8:30:41:ce:1d:f2:40:bc:4b:4c:c6:c1:87:2a:12:ce:bb:26:
fc:54:6c:68:15:2d:d4:0a:b2:db:e0:bf:11:3f:3f:ee:08:83:
7a:b4:c4:84:f1:09:1a:d8:c5:23:fd:94:27:a3:3f:50:9c:11:
36:89:7e:06:8f:97:16:8e:5a:ca:87:20:31:32:c0:70:3e:f5:
62:fc:31:4e:7c:57:f3:3d:ce:85:00:ce:a6:e1:f7:64:cc:d1:
f1:7c:85:02:8c:25:c8:11:99:cd:8e:80:c7:cf:7d:0f:d7:8f:
88:7a:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:59 2025 by rpki-client