Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier: +CQlTbmLj1H0bGHQ+4rXYlczgri71CItLd8aI3G07hw=
Subject key identifier: E9:06:16:BA:11:F0:E1:29:33:81:DF:71:3A:60:CC:57:58:5A:BF:38
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer: /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial: 0194BCE0651F37C7C0CAE47A1180EEE6B36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: JyNIUdgJv5ee9RHRKxTIPdZ7/DjVhEFE6Bou+uh0AhY=)
2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:65:1f:37:c7:c0:ca:e4:7a:11:80:ee:e6:b3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=e90616ba11f0e1293381df713a60cc57585abf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:61:3c:19:c4:fd:60:2f:e3:ed:b7:2a:02:
c2:9f:b4:25:c9:06:d1:ea:f7:45:76:e2:ef:75:da:
f7:1e:76:2a:e6:44:19:61:de:b0:65:0f:92:56:42:
f0:ec:9f:55:20:b0:1b:3b:de:8b:e5:be:51:5e:4e:
1e:3a:7b:cf:42:7e:56:de:b0:c7:0c:9a:57:d2:5a:
1a:4c:7f:0b:eb:2f:21:48:29:3a:89:4f:7e:f8:b2:
4a:5b:65:df:7b:0e:ba:57:5f:7e:cb:b1:57:85:66:
81:d8:c7:cd:a7:d2:6f:0e:7a:63:74:e0:72:6d:7a:
b5:08:fd:e9:ac:64:1e:e6:c0:8f:64:06:d8:4a:8e:
b6:18:d0:58:94:05:e2:52:d3:52:22:5e:18:62:22:
21:46:18:24:59:26:8c:0b:43:8a:dc:c3:e0:08:5c:
e1:3b:61:8b:7b:ac:8f:a1:69:fb:b4:22:98:78:ea:
8b:d5:84:25:d6:f7:a5:3b:31:cc:f2:b7:d9:4b:f5:
46:bc:4f:41:bc:c3:8c:2a:48:9c:9d:ed:41:98:50:
4a:09:3b:db:80:88:36:14:a6:65:81:13:90:0c:46:
7d:c4:b6:1b:4b:e3:e4:d7:4c:dd:50:6b:bf:6f:a0:
c5:9a:1c:d8:ae:7c:c2:47:e3:34:31:a7:28:13:26:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:16:BA:11:F0:E1:29:33:81:DF:71:3A:60:CC:57:58:5A:BF:38
X509v3 Authority Key Identifier:
keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9d:b2:11:7b:4b:d2:22:6c:f6:74:57:ef:e1:51:b2:f7:13:
3e:df:f5:f1:47:51:a0:4c:5c:75:a3:93:52:6f:53:c0:08:d1:
5b:3b:36:d5:42:73:1b:6d:0e:d8:1d:82:cb:d9:75:57:b5:cb:
69:a4:cb:41:fa:09:ac:12:11:83:a6:43:1b:62:32:b4:c0:7b:
0f:b0:eb:3d:e6:c3:7c:b6:7f:10:de:ff:73:65:c8:ea:bc:73:
09:e8:3e:01:d9:fe:06:84:ed:ef:cb:c1:e9:2f:bd:df:c5:7e:
48:33:76:89:be:b0:08:2b:d5:8f:82:31:19:79:1f:fb:d6:b9:
fb:6e:5b:e9:c7:6d:33:a2:49:c2:83:46:55:a5:bd:0a:93:65:
5e:fc:da:0b:d9:3e:d6:fe:94:b3:6c:2b:5b:48:e2:0b:1f:5e:
e2:a2:3c:27:10:38:0a:f5:bb:1a:f0:b2:08:89:e2:f9:b4:51:
41:54:73:87:d0:d1:ae:99:d3:01:a2:5b:be:ce:9a:9a:55:91:
72:05:66:3f:5b:9f:66:b0:4e:60:9c:e8:9d:24:9a:98:af:e2:
88:13:22:d6:b9:fe:0a:1f:13:91:34:f5:7a:75:fb:90:76:9c:
43:b8:b0:a9:3a:3e:81:5a:86:33:d6:86:d9:71:e8:23:33:f2:
3e:0b:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:03 2025 by rpki-client