Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: MALhE5Pqo2JbaaWnFd598YHEvUnNuVPSK4xN+LXDzlc=
Subject key identifier: BE:C5:B7:37:68:56:2A:A5:73:39:C1:C4:A7:F2:CE:2B:C2:EB:A5:1E
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 0194BD1778EA8B4838FC1AEBB19784037020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 110C
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (hash: 2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=)
2: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: /K1iGv9Qnw0DNHEgAR45amxY0rqPQtnSe/rfkVfJ2+U=)
3: JkUk0RwhqW1iBr4hL3arEunrp2M.roa (hash: /IEYmQsTDHtYubFLhftis+nToWQhtnU5kLG/4NerSmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:78:ea:8b:48:38:fc:1a:eb:b1:97:84:03:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=bec5b73768562aa57339c1c4a7f2ce2bc2eba51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:79:e0:b4:9d:5c:3e:50:07:c7:be:9c:b8:
a1:80:97:cb:9c:db:1a:8b:c9:f3:a1:61:c2:ea:09:
be:5a:e1:9a:2f:b8:39:77:27:28:68:1d:1f:f2:d7:
58:76:44:2f:52:f0:1b:93:3a:12:d6:a0:0b:9a:f3:
35:30:a2:30:75:d0:90:b3:a8:ef:2a:22:0f:44:95:
b2:65:25:53:41:3f:76:29:b4:d5:5b:05:63:ba:c7:
3e:67:5f:17:be:93:0a:e9:6c:ed:94:45:e8:34:cf:
07:0c:5c:8d:aa:60:96:67:87:b1:a4:d3:f9:45:6c:
79:bd:ca:16:41:4e:24:b1:e5:57:8d:26:2f:23:31:
66:29:7c:ac:65:09:e8:e8:c1:c7:68:9f:03:7c:c3:
6c:97:86:6d:59:8e:b1:ff:80:e2:03:ad:bd:8c:d8:
0c:07:23:b5:d9:cb:0e:fc:bb:ce:14:80:cd:21:fc:
d5:16:27:c2:82:b8:81:38:78:bc:89:48:ae:1e:f7:
e4:27:10:aa:fb:68:b7:a1:9d:36:ab:37:18:5e:01:
5a:53:79:1a:68:0f:2b:e6:00:d0:33:ef:d2:e0:d2:
87:5b:0d:9d:06:31:45:32:2d:1b:38:30:34:0e:bb:
56:da:1c:a3:73:f5:f5:2d:b9:6e:c8:0e:09:89:71:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C5:B7:37:68:56:2A:A5:73:39:C1:C4:A7:F2:CE:2B:C2:EB:A5:1E
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:aa:8d:b5:53:f8:ac:47:56:5c:e8:68:a8:35:29:53:88:91:
6b:46:58:69:e4:79:c7:66:89:c0:bc:97:7f:13:91:b6:b4:a6:
18:12:72:cf:c7:58:8a:ed:0d:03:3b:81:0b:ac:25:0f:5a:5a:
32:95:f4:f9:69:01:85:09:11:13:25:63:2f:24:ad:66:8f:e2:
25:b0:4d:55:f4:95:a0:8c:a1:76:43:49:03:f4:ff:fc:1a:d9:
31:41:36:0b:7f:75:56:b5:5e:a9:9e:93:4a:0c:35:66:23:89:
df:dd:0c:e1:70:6b:d2:c6:31:2b:2b:eb:a6:da:42:2b:6c:49:
8a:13:b1:1c:db:78:2b:4b:5a:56:d0:dc:f6:df:e9:04:94:0b:
fc:d2:a2:d1:bb:cd:4e:45:20:b0:d5:14:98:21:02:c2:5c:ac:
9b:c5:fb:34:73:ac:c3:a2:8c:f0:02:d1:c5:5c:d6:75:ef:bf:
94:99:f2:08:70:60:00:35:08:9a:72:2d:20:db:1b:d8:fd:4e:
a9:36:a9:27:6c:b6:5a:47:b6:08:47:cc:84:65:16:52:29:18:
8a:09:b4:01:35:97:d1:74:b5:bb:d8:7e:dc:7c:e2:66:1f:2b:
f3:b1:91:1f:82:a7:e3:b6:1a:d6:5f:34:aa:fb:ec:f7:94:96:
36:33:c9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:13 2025 by rpki-client