Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File: GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier: TAK/B84ix3CMjYHGjTuhk54sq8h/QaPGEzHxre9EFaM=
Subject key identifier: 86:E8:5B:D6:DB:A9:A2:9D:6F:7C:9A:62:82:E6:6D:B8:ED:EF:F9:21
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer: /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial: 0194BC72E0A9D0B272C900FFB0168D806008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number: 08D5
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: UcL1MBElilXDlGc0UF11W6wM90yiuRFyDPNyftT362c=)
2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e0:a9:d0:b2:72:c9:00:ff:b0:16:8d:80:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=86e85bd6dba9a29d6f7c9a6282e66db8edeff921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:e3:4c:3b:a1:cf:b0:b4:f5:c1:79:16:8c:
3e:52:e3:40:7c:53:cc:65:12:e5:ed:d9:1c:17:3a:
85:3b:c3:f2:ce:7c:72:67:56:ab:59:09:71:51:0f:
89:9f:b4:2c:cc:4b:bf:0c:7c:9a:6c:c8:83:17:4a:
59:e1:7b:80:f6:7a:95:19:b5:44:c4:92:ba:7e:db:
67:6b:b1:a7:e4:99:a7:39:86:cd:74:51:dc:03:05:
49:55:83:74:61:a4:53:98:56:39:c2:9e:3b:17:8c:
21:0d:48:ba:11:30:5a:6f:5a:1d:d8:7e:ef:5d:f0:
d3:b4:a7:c2:d6:c2:6e:fd:9f:75:25:a7:05:d4:94:
56:99:e7:7b:c9:bf:b5:66:1a:24:31:27:01:b0:5b:
75:a1:9a:b2:ba:d9:f0:b6:2d:27:88:e6:37:c6:47:
35:36:b1:19:81:95:6c:81:85:82:cc:8d:e9:fc:cf:
77:52:5a:46:1d:62:41:ca:21:f5:98:4a:c6:5e:37:
58:72:50:8d:61:90:e0:fc:ac:6d:6c:3f:52:0d:78:
2e:24:39:59:b8:31:2a:37:1e:61:e0:5c:de:d1:28:
86:7b:ad:71:1b:22:1a:51:e7:63:e2:d4:f1:41:5b:
44:d3:13:e0:70:f2:e6:63:68:19:41:66:66:e2:f2:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E8:5B:D6:DB:A9:A2:9D:6F:7C:9A:62:82:E6:6D:B8:ED:EF:F9:21
X509v3 Authority Key Identifier:
keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:14:01:2c:e0:70:2d:44:dc:dc:74:ac:76:04:98:c4:09:
32:3f:4d:f7:58:75:1a:0e:71:fb:8d:5c:41:df:f9:04:6c:2b:
3b:f8:ee:c8:a5:f6:df:9b:fe:e2:7b:9c:08:b3:dd:4d:e3:20:
c8:b3:e2:a1:54:20:3c:37:c8:ed:51:44:e8:94:5d:f3:73:ac:
af:55:76:42:ca:d7:7a:b6:2f:0d:ba:93:73:d6:a5:fb:87:22:
5f:b8:da:a6:a8:63:65:d0:15:89:02:e5:c5:ce:2a:f6:fa:90:
30:c0:29:47:4a:d7:8f:49:d7:0f:b8:97:24:4a:00:06:17:e7:
a3:64:ba:fe:b6:f0:42:69:1c:bd:e8:46:10:3a:9d:3b:76:d1:
ee:cd:07:3b:2f:e6:78:65:f9:09:12:e8:a6:b5:f9:8a:f8:a1:
a0:4a:a0:13:78:1f:72:e6:f7:3a:89:ae:d9:69:cd:4e:b6:07:
9c:c4:63:e8:3e:30:43:24:34:b3:54:2f:11:02:9a:c6:66:09:
ff:40:33:51:ac:d1:6a:60:b4:e1:e9:db:2b:14:f6:37:1e:23:
f5:72:d8:1e:c1:64:f4:9b:16:2a:2d:64:e0:73:22:75:b5:e0:
94:4b:dc:69:1e:44:1a:95:41:be:7b:15:44:fe:77:49:98:3e:
17:ae:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:28 2025 by rpki-client