Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
File: GWN5dpxXylsmosYfpdmsxSe-p4k.mft (raw, json)
Hash identifier: 9CMxK7kBYESFerLwwRV7yBzDFQD6Kh+nCNgcMFAu3oc=
Subject key identifier: F1:74:86:40:68:38:A5:AB:DB:6E:8D:94:96:A4:55:9F:C2:D9:2A:C8
Authority key identifier: 19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
Certificate issuer: /CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Certificate serial: 0194BBCE6DBCD91958455A80BC8E2447B1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: GWN5dpxXylsmosYfpdmsxSe-p4k.crl (hash: h9OKASpY6vlaM4LxV2JpZela6NzdGSOO17yh9FhqwJg=)
2: smR56PkXYVe9TX2HDTFHOdEfzmA.roa (hash: Sy1g3FvvZhbNKF9SZtRpU0M+VhDMdQVYf1yY8kTyMT0=)
3: z45Pl2HIpMthc8mWmMny5O7sL4E.roa (hash: Fh6l02AaD6oxps7qwBCXlSR7cWfTt60ybgfv5Z0qI7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:bc:d9:19:58:45:5a:80:bc:8e:24:47:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=196379769c57ca5b26a2c61fa5d9acc527bea789
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=f17486406838a5abdb6e8d9496a4559fc2d92ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:2f:e7:09:89:0b:96:60:5a:1f:96:d7:8f:
80:cc:7e:ac:28:21:0a:26:d7:be:52:33:59:a9:67:
00:2b:da:b4:a2:3e:29:af:27:6f:79:7e:5e:b1:22:
02:c1:27:49:d5:f6:2e:ca:6d:3a:99:e7:48:79:71:
f2:12:0f:50:3a:cf:fe:97:0f:ec:13:cb:3c:d0:92:
31:a0:84:38:94:9b:fa:d3:3f:0a:93:61:db:84:5f:
fa:88:1d:79:63:de:41:7e:70:36:a5:c2:4b:70:75:
97:77:44:43:37:16:95:f2:c1:9c:13:ec:08:8b:d5:
b3:99:90:a9:e0:3b:a3:b7:69:3c:93:20:41:2e:9d:
93:ba:32:29:8f:1d:2f:3a:1e:f2:41:04:ba:6d:33:
44:c1:6d:21:35:a6:59:32:b2:5b:88:18:32:67:56:
d1:67:bb:10:16:4f:93:bb:e0:3f:95:94:a7:cd:05:
2b:d7:c5:8b:17:87:84:7a:cc:45:74:2a:0d:d0:78:
5e:d3:5f:0e:b1:b9:73:8d:ea:c9:34:54:e3:57:9e:
25:0e:dc:e2:ab:01:9f:e6:5c:35:17:d1:40:99:27:
92:15:8b:71:fd:85:e0:fe:05:e8:f9:47:96:e8:d3:
d8:64:9a:42:d3:a5:e1:77:52:36:f3:50:4b:32:6d:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:86:40:68:38:A5:AB:DB:6E:8D:94:96:A4:55:9F:C2:D9:2A:C8
X509v3 Authority Key Identifier:
keyid:19:63:79:76:9C:57:CA:5B:26:A2:C6:1F:A5:D9:AC:C5:27:BE:A7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWN5dpxXylsmosYfpdmsxSe-p4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ea376d-8efc-4440-8f54-949aa5b75a45/1/GWN5dpxXylsmosYfpdmsxSe-p4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:0d:90:19:4f:3b:4d:bb:c8:ed:53:43:d3:1f:11:5c:48:
5c:23:8e:b7:3b:94:b3:c0:3b:43:de:34:ec:c1:3e:d9:41:21:
6d:8b:d8:38:ba:b9:8b:88:25:27:03:b7:86:6c:3e:6b:d2:b6:
4e:fc:db:64:b1:d5:ae:64:9d:de:ad:6a:0a:cc:8d:e6:b3:2d:
8d:8d:e7:85:16:1f:1d:50:71:5c:6e:94:29:d6:b3:df:8d:b6:
75:37:ae:60:10:02:9a:c7:0a:e8:4e:d0:d4:1f:bf:97:65:c4:
bf:a3:ec:6f:3a:cb:44:75:89:1f:69:ac:a2:0a:27:10:6f:fe:
ad:c4:e9:64:d8:e0:fa:18:49:b0:68:45:67:de:41:0a:b9:9a:
7f:03:22:7a:e6:d6:73:27:83:18:f4:0f:ca:2f:82:9e:42:62:
6a:96:f7:a7:7c:da:aa:78:f2:79:5c:27:ba:a9:5b:63:84:ac:
04:23:6d:3e:b4:c1:90:60:36:77:ae:3c:77:e1:7a:4c:0b:4a:
1c:ad:10:3e:bd:46:5e:7a:45:a8:86:90:64:b2:0d:ae:be:df:
c8:80:ca:c2:55:7d:0f:b5:1c:57:67:c2:26:d2:a8:64:8d:56:
29:c1:63:83:65:c5:22:d4:6c:f4:81:b2:cc:94:f2:c6:d6:a4:
5e:8f:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:36 2025 by rpki-client