Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: 7BFcMQLDeDFnWts88vmwdf+Szb60pvq5VbIK2t+AYmM=
Subject key identifier: 2B:0D:FB:4C:3E:45:13:B1:C0:D8:67:82:C6:56:D5:2C:01:56:52:D6
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0194BD8578AE6126D65592FD80561B600A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: PmhSs/zLDM3WdC7JhEIUfBq+69v72jNCZm4baxU891s=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:ae:61:26:d6:55:92:fd:80:56:1b:60:0a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=2b0dfb4c3e4513b1c0d86782c656d52c015652d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:ab:57:30:0f:5c:d7:94:14:e1:90:a1:b4:
43:29:e3:68:67:83:16:55:a4:b2:7e:5e:36:f1:41:
a9:85:49:2f:dc:16:9a:7d:25:4d:7d:24:15:97:bb:
9c:98:b1:1a:51:f1:c6:3d:35:11:e5:13:36:43:89:
e4:26:a8:10:89:ea:b0:74:4b:0b:19:19:38:0d:d1:
74:7a:5b:92:e5:dc:ce:00:36:ad:e7:31:e2:77:9a:
31:cb:b5:bb:74:d2:27:33:43:13:5e:00:d6:fb:48:
15:c5:bc:9e:b9:a4:ce:f9:17:5b:12:53:46:e1:4f:
44:b2:01:c2:da:52:af:9f:24:78:01:bc:64:2e:23:
ca:c5:1f:57:a9:2c:75:b7:55:38:56:fc:43:95:9d:
04:1a:a7:47:11:9e:d2:0b:0b:4a:4d:bc:fe:8d:88:
7d:76:c5:ac:f5:bb:fc:87:e4:94:3f:3c:d6:c9:86:
60:29:16:d9:f7:51:a2:fd:22:ba:eb:14:d8:8c:15:
1b:5f:96:ad:2b:a5:3e:6f:b8:b2:5d:bf:cd:65:9a:
2a:66:d7:e7:ba:c2:ae:bf:64:a4:3d:f1:2b:26:ed:
4f:5a:cb:c4:5b:26:cb:59:7a:76:9a:ec:87:1b:d8:
11:e7:ba:df:38:de:8f:36:0c:f3:10:44:15:fa:62:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0D:FB:4C:3E:45:13:B1:C0:D8:67:82:C6:56:D5:2C:01:56:52:D6
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:31:cb:a7:5c:c3:37:2d:99:a4:35:36:ce:ea:47:93:b0:29:
6f:66:b4:41:75:a7:ec:1f:09:2e:38:0d:ae:00:49:43:b7:02:
12:4c:06:73:c8:0f:9b:5b:75:b6:42:8e:be:c2:32:0d:e0:c6:
58:c2:19:ba:83:da:2f:db:db:20:14:73:ae:a3:91:89:76:4c:
90:0f:71:a2:64:53:99:9a:a6:96:93:bb:91:3d:c7:37:17:34:
bd:0a:72:c0:25:de:60:a0:ab:59:b7:8b:0a:13:37:24:a1:c0:
72:c2:01:de:32:99:a5:45:c6:f4:75:48:c0:71:98:ee:bf:ea:
a5:0e:58:85:64:6d:b1:67:aa:94:b3:81:49:44:70:fe:a3:57:
8e:3a:23:59:43:bc:38:d8:40:39:bd:ce:cc:5e:b3:8a:04:aa:
13:cf:20:6a:a5:97:64:8b:a3:fa:5f:65:f5:dc:e2:b6:47:78:
64:b6:87:d5:f5:ed:2b:d5:30:b0:c6:33:b0:52:94:f7:1a:52:
e8:ca:02:a1:be:7e:b9:7c:da:9f:de:bb:af:9f:b8:5f:c4:17:
72:8a:b1:80:66:d3:cc:36:21:a2:3e:3e:fc:80:7e:52:c0:b5:
cf:82:32:d6:af:aa:34:23:ab:38:36:45:a6:31:7c:48:c9:bc:
57:b3:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client