Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
File: GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft (raw, json)
Hash identifier: 85k6GjgSzWAbSm2oVjdG94GVu5diI4v2K/TVjriaMq4=
Subject key identifier: 6A:5D:3D:B7:88:D9:01:4C:F8:94:59:63:5E:8E:B4:14:CE:57:81:0C
Authority key identifier: 19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
Certificate issuer: /CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Certificate serial: 0194BCA9732716682EB68B469C0336AFB744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: D2QGXtZvmL4KeLGdXQs__twf4cc.roa (hash: yx8HKD3i4ZtDorjPhtWxamWyQ9PcoYYTYwiIZAy3Cf4=)
2: GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl (hash: QqqAcaan7N7+gy0f05OD/EaLYLBykY1fFCPzxd/gvsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:27:16:68:2e:b6:8b:46:9c:03:36:af:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d199c3d20f434d8c0a0a2ef5e52346665ca864
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=6a5d3db788d9014cf89459635e8eb414ce57810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:ee:95:a5:d0:07:97:4c:cf:c4:3e:87:41:
61:d4:3e:2e:e5:04:50:fe:bd:7e:7a:52:40:a6:d2:
88:ef:d9:15:19:81:49:e6:d4:03:18:d5:26:ce:8b:
f6:83:2c:0f:95:c9:27:c6:5c:21:8a:8e:b5:2a:51:
ae:b7:e1:41:4d:84:15:bc:0c:af:07:59:20:72:c1:
e5:76:04:cc:ff:02:c3:13:56:0c:dc:94:1e:06:23:
99:b7:15:8e:d1:00:aa:97:80:3b:eb:31:f2:fc:b2:
7c:d9:de:91:1a:11:14:ed:ce:f4:4b:17:41:60:86:
98:33:06:ae:fb:3d:47:93:fe:81:fb:66:6a:26:52:
39:40:e7:cb:6d:48:cb:bd:be:4c:f8:65:93:25:a6:
97:de:49:32:29:27:34:52:06:8d:b2:4f:cf:45:bf:
8c:cf:d0:99:74:78:51:11:87:a3:4e:a5:6c:01:e6:
1e:a3:eb:ec:d4:a3:7c:a9:a0:06:f5:57:c7:a6:eb:
17:1f:a9:16:bd:16:75:e3:76:78:b0:f8:ef:73:05:
c8:66:cf:2e:25:2a:44:48:69:a6:b0:16:e5:39:21:
3e:c2:83:f6:25:0e:23:85:b2:35:50:25:2b:06:1b:
e3:1e:ee:f0:d1:28:ca:1c:38:d9:b4:bc:8b:29:8c:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:3D:B7:88:D9:01:4C:F8:94:59:63:5E:8E:B4:14:CE:57:81:0C
X509v3 Authority Key Identifier:
keyid:19:D1:99:C3:D2:0F:43:4D:8C:0A:0A:2E:F5:E5:23:46:66:5C:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdGZw9IPQ02MCgou9eUjRmZcqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5b78f4-771d-4756-a389-b42fa00f57de/1/GdGZw9IPQ02MCgou9eUjRmZcqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3d:ae:75:04:ae:ae:0d:3f:91:5f:52:e6:de:09:56:85:5b:
8d:60:c4:5c:2b:26:96:36:6c:5e:4f:cf:7c:b0:ed:2e:e8:b7:
bf:40:b0:b5:f5:4b:66:8c:d8:75:b0:61:ab:e3:d1:69:b1:7d:
4a:e2:69:ee:ca:17:3d:84:ba:95:7e:7e:0c:d9:81:0b:11:11:
7a:9f:80:f0:29:b0:97:25:8c:08:64:d3:39:b0:19:8f:e8:91:
75:f9:86:7d:5d:8b:fe:9f:e9:aa:7a:41:3b:ed:75:34:73:c0:
91:42:bd:45:37:0f:7e:e9:c7:c6:b5:36:99:85:b1:e9:63:5e:
16:7e:63:e2:70:61:71:2e:34:4f:16:05:cd:dd:8e:e0:b7:8e:
f0:b4:7e:68:ae:de:cb:63:41:48:1c:8a:fa:e5:f4:fc:d5:95:
d0:e3:6c:c2:d1:15:c6:5e:18:ab:67:36:21:3c:c0:47:56:58:
7f:b0:0f:09:3c:37:f8:66:54:dd:03:6c:da:7b:a6:d5:a2:8c:
3a:b5:3e:d9:f8:1a:5b:47:d7:8d:16:d1:ef:26:8b:13:bf:a8:
5e:99:54:df:17:53:2a:a7:bf:00:22:76:47:7b:4d:27:7f:a6:
f3:ad:1b:e1:9c:2c:97:2a:db:ee:df:c8:9a:08:32:8f:ea:22:
02:4f:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client