Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
File: GgEAlDqHCAKL5A1PpPKcmtnMVos.mft (raw, json)
Hash identifier: 3daXM0L3FlxoI1Yjc1ZWsgdfLyZDap3m61VKkMKmm8A=
Subject key identifier: E5:3D:B6:F5:52:60:E4:05:BA:8F:AD:C4:4C:38:63:95:D4:A2:E8:69
Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Certificate serial: 0194BD179F5C466B103D8453B224D651833B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
Manifest number: 046C
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: GgEAlDqHCAKL5A1PpPKcmtnMVos.crl (hash: AlS1vqmUe87xTk1SnyAMgRmlPrxvvyM9hNBfnkqAz1I=)
2: ZTIBKgjTaXW_ZnWc7123527kr5M.roa (hash: nKgH3xdgZjr7Kq7o7yKNcoST/uR2S0ghz6FcpqSglbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:5c:46:6b:10:3d:84:53:b2:24:d6:51:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=e53db6f55260e405ba8fadc44c386395d4a2e869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:93:e4:a3:fb:c7:f8:41:51:43:dc:ce:29:
05:b4:13:d5:2a:55:24:50:a7:ed:6d:17:44:ab:14:
e4:5c:39:86:63:b5:6b:63:9d:2a:15:30:b5:5c:1d:
a4:33:34:5c:35:96:70:72:58:3b:b0:b8:4d:4c:45:
5a:a5:8b:cd:31:45:e0:17:57:95:e3:37:45:f7:33:
89:7f:ff:ad:34:fc:47:88:67:a2:0c:29:23:72:10:
36:29:41:91:52:92:b1:36:54:ae:db:b8:4f:37:75:
2a:65:e3:09:05:fc:1a:21:77:8f:bc:ed:e6:36:2e:
aa:e1:28:44:d3:b1:27:88:5d:d7:4b:45:07:2d:ad:
ab:6f:53:2b:4a:e7:c4:f6:8c:94:37:0a:e1:1a:28:
ff:d4:76:d4:93:62:02:79:8e:90:9d:45:11:e4:fc:
54:47:03:9e:34:aa:41:83:b2:7f:3d:4a:cd:c8:d0:
7e:77:7a:7f:0d:02:40:78:3b:df:0c:3c:b1:16:75:
38:78:5e:cc:ab:c9:4b:6b:2d:f7:e2:b1:28:7a:bd:
1f:58:fa:df:04:84:2e:f8:54:67:d7:19:0d:92:00:
b0:86:22:2f:5e:c9:3b:39:9a:ca:3c:75:8f:8b:77:
39:75:7e:c2:ce:71:f0:3d:d6:6a:6a:ca:c0:26:ac:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:B6:F5:52:60:E4:05:BA:8F:AD:C4:4C:38:63:95:D4:A2:E8:69
X509v3 Authority Key Identifier:
keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1b:2f:1b:38:e2:e7:c1:6d:65:94:1f:a5:4b:2c:76:e7:a3:
c1:f9:20:7f:9d:f7:a2:b1:88:e7:83:1c:e7:bd:86:52:75:55:
f5:4d:d3:c3:a1:86:89:1b:89:9a:94:9f:f0:1f:82:00:1f:e4:
a8:53:a1:a8:20:76:f8:ff:85:27:94:c5:74:59:91:3f:6c:95:
ae:d7:5d:cc:5a:52:8f:a9:e1:98:50:3c:ab:57:10:37:54:b2:
1d:7e:07:2a:f9:3c:ca:da:07:75:22:f9:a4:60:ba:61:07:5c:
2e:ae:9f:7e:30:c8:52:e6:e6:fd:ee:c9:07:76:81:8d:1f:70:
8c:45:9e:33:26:bb:7b:48:2e:f6:b7:50:99:ab:50:74:74:d7:
1f:c6:c0:d5:f4:c5:c9:5f:a1:be:32:b2:2e:1f:1d:be:6a:be:
09:de:38:cd:67:61:cc:15:b6:8b:6d:bc:b2:6b:58:a0:32:26:
a4:31:6c:24:18:72:5d:fa:d4:49:1c:49:93:b2:3b:30:05:b7:
66:04:47:5f:d1:ed:5d:b5:e4:57:b6:ef:9d:58:49:63:16:ce:
f5:30:39:96:97:48:9e:17:6f:ba:da:c1:56:b8:0e:f1:0c:2f:
db:14:cf:8c:0d:2e:a0:3f:9a:e1:28:6b:c2:af:9e:67:c7:f9:
63:99:0b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:38:53 2025 by rpki-client