Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File: GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier: ocjBBZuqpnYJMqniqcf/Otyd/Ey1gVtFfJyk/zExL3U=
Subject key identifier: 54:5F:73:FB:A5:A7:CB:61:2E:99:15:F3:57:A7:5A:78:2D:C5:90:A2
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer: /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial: 0194BCE0ED2FE8FECE1D97F3C46BA72C8724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: FYNUEsm/ro3wGYO3VOyEpGuTHcrIsID0BZQj8yq/qLg=)
2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ed:2f:e8:fe:ce:1d:97:f3:c4:6b:a7:2c:87:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=545f73fba5a7cb612e9915f357a75a782dc590a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:aa:bb:47:64:34:57:63:1b:3f:70:57:89:
1d:b5:d4:52:7f:8a:5b:32:3c:1b:be:29:3c:f1:bd:
2a:6d:fe:0e:cc:aa:51:65:07:f9:31:c5:b4:45:6a:
2a:93:8b:a5:5a:08:ee:e2:cb:86:27:f9:59:dd:6f:
18:23:3a:f6:3a:ff:92:af:8d:d6:18:71:00:42:d9:
fa:e0:88:44:4c:74:3b:28:bd:02:9e:59:5c:02:bd:
6a:75:b8:79:1f:67:81:4a:50:df:50:ec:17:f8:62:
17:bf:41:25:c7:a4:29:c2:61:cb:8a:da:4d:21:cd:
7b:24:93:0a:60:69:d2:4b:78:9e:17:65:35:d2:a2:
97:6c:bf:c5:be:d4:92:c4:e5:c8:90:f1:cd:80:87:
59:d6:56:2c:dd:13:17:9b:eb:80:5e:58:91:8d:72:
ef:cb:3a:5d:c0:f8:78:12:e0:59:34:8d:84:0b:cd:
b1:e3:ea:e9:aa:13:64:27:ca:7f:17:cf:40:6a:c8:
a1:f8:bf:b9:4f:b3:5d:59:6b:41:5f:5d:30:51:b3:
70:dc:14:2b:05:5c:76:44:f0:e3:ef:d6:34:39:9c:
95:e0:83:ae:81:eb:d2:44:b7:da:16:16:ce:52:bc:
5e:18:f1:bc:e6:18:7b:cd:21:b0:c6:23:7e:54:b0:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:73:FB:A5:A7:CB:61:2E:99:15:F3:57:A7:5A:78:2D:C5:90:A2
X509v3 Authority Key Identifier:
keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:09:e6:07:ed:f4:93:a3:c4:73:df:d5:e8:bc:3e:01:8c:
a9:30:00:df:90:1e:bd:29:b9:23:94:74:f2:88:37:71:f3:26:
7f:b7:af:be:72:64:6f:cd:f9:3f:1e:a6:22:c2:b9:be:c7:90:
00:aa:ff:05:3d:b3:2d:35:22:9d:dd:78:11:2e:e8:1c:13:99:
0b:f3:4d:fc:ac:03:cb:e1:f0:69:c5:9d:cf:4e:74:2c:14:a9:
ee:c8:aa:6d:bc:04:4b:db:55:4d:25:54:4a:b9:90:a8:0a:2d:
4d:a3:89:82:08:7f:29:71:f9:7a:91:39:23:23:c1:8d:55:c0:
dc:f7:8c:ea:0a:32:ba:d9:cd:11:92:3e:ad:47:c7:59:de:c1:
eb:75:c1:ed:6a:4f:5d:26:b3:53:8c:f2:36:22:8d:2e:d6:43:
56:a3:12:70:b5:aa:d2:43:84:92:c3:50:91:71:32:4d:b2:e0:
78:b2:05:1c:07:91:ff:ad:e9:ae:3b:0f:1f:51:60:a9:d4:90:
64:c5:db:b8:3f:de:86:11:12:2b:d6:3c:c0:3d:5f:b9:8b:fc:
c1:22:d4:3d:27:13:82:b0:ad:fd:9f:2e:a9:de:a6:f4:fc:09:
23:07:1e:a5:12:38:2a:a0:fc:fe:41:fa:3e:e4:c8:03:b1:e0:
da:a0:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:35 2025 by rpki-client