Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
File: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft (raw, json)
Hash identifier: IBhWQGTHL9LjuokHZC4t0Fdecf/2RC1rU52w0zsVfrU=
Subject key identifier: 67:24:C0:21:5F:FD:F1:31:14:F4:AA:42:57:FD:EC:6F:78:D8:F8:A3
Authority key identifier: 19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
Certificate issuer: /CN=19e3d11f72ddbed8361285b499b932191203b756
Certificate serial: 0194BBCEDAB678323210C9D36B73A1E868D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
Manifest number: 031E
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl (hash: V83hNRcaonj/oghCdunANu2fEGGKwcuzJ49q9sw8qcc=)
2: h_pQhnrE430cVPVrVeHdwNqGdWQ.roa (hash: jiL4T5HKXcvptd8nzfsvbD/UWOoD6EiqjHWGsrec+qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:b6:78:32:32:10:c9:d3:6b:73:a1:e8:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19e3d11f72ddbed8361285b499b932191203b756
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=6724c0215ffdf13114f4aa4257fdec6f78d8f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:0f:31:58:11:6b:92:28:3a:39:c3:46:cd:
e1:00:2e:b4:17:88:27:94:cc:22:7b:14:ae:e1:f0:
7c:6c:70:15:30:2f:f1:b8:ac:9a:18:62:a5:10:0d:
7a:be:7f:f3:22:34:5b:c3:0c:6f:c1:1a:2d:38:00:
a4:da:99:03:61:2c:15:3d:49:82:89:9e:5f:d9:cd:
9d:bb:9e:bf:db:eb:15:94:4f:ea:7d:07:4e:34:90:
03:36:82:28:d1:aa:a8:01:bf:0c:7f:68:21:92:66:
d9:b2:eb:a9:e0:90:2c:b6:ed:a7:19:dc:52:ee:f4:
58:56:c4:d1:62:02:de:95:4f:00:af:81:6b:8e:30:
a8:5b:a7:7c:ae:e2:36:35:54:a8:a3:b5:6f:75:70:
e9:c1:3b:63:3f:21:f3:5f:84:f1:22:32:6e:85:42:
13:d7:70:8e:c6:a8:01:aa:e3:30:f1:02:0f:f7:d4:
77:6d:c9:75:3b:13:c8:18:fc:96:5b:90:87:bc:3f:
07:74:8e:7c:d8:a2:9d:be:39:4d:12:09:df:a0:3d:
61:14:3e:47:2b:35:fb:d3:a3:6e:4b:ac:8e:01:76:
b0:07:9c:67:9b:b5:f8:a9:01:5e:cd:e4:65:9e:14:
1a:65:57:07:4f:2a:58:73:af:dc:e7:ac:1d:07:a4:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:C0:21:5F:FD:F1:31:14:F4:AA:42:57:FD:EC:6F:78:D8:F8:A3
X509v3 Authority Key Identifier:
keyid:19:E3:D1:1F:72:DD:BE:D8:36:12:85:B4:99:B9:32:19:12:03:B7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5f7b8-d2c1-46de-9db4-069bfaf2bce4/1/GePRH3Ldvtg2EoW0mbkyGRIDt1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:95:24:f7:be:85:4a:af:4d:ee:4f:33:42:8c:49:86:a5:c7:
af:27:a7:f1:f5:7a:bc:51:ac:52:ad:4b:d5:62:d8:34:0d:89:
55:b5:c4:dd:46:af:6c:78:ad:8d:48:ba:7c:13:b7:da:cc:0a:
c0:12:8e:21:9e:49:0d:56:cf:25:81:1f:17:61:c8:b3:48:7e:
22:38:46:20:11:76:8a:15:1a:f6:00:f6:35:d3:b3:42:01:68:
2a:3b:37:54:c5:77:80:35:c0:91:e5:5c:17:0d:2c:fc:10:8a:
e3:ed:11:11:1b:07:4e:0e:36:3b:05:6e:42:79:e5:cd:2d:f5:
36:84:b3:ac:fe:e0:2a:79:29:3e:33:5e:16:9f:cc:ed:5c:7f:
ac:42:66:5f:8c:0e:68:c3:31:84:d4:95:80:3c:25:6b:f0:ff:
c8:de:28:9b:24:db:43:28:81:1d:e2:72:2f:cd:c3:5d:de:25:
e6:a5:94:59:90:a2:41:6f:d2:f8:75:f0:da:de:2e:cf:19:99:
9c:df:17:36:a4:aa:1b:fa:70:ab:35:69:10:10:91:e2:f4:57:
46:fe:96:b1:18:0e:be:5a:53:0d:f1:79:36:54:b0:e4:7d:23:
28:b1:e3:68:2a:84:ab:e3:79:29:4b:ba:a8:ee:ea:72:ab:61:
1f:c8:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:34 2025 by rpki-client