Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
File: GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft (raw, json)
Hash identifier: CpCS89eAm2ebJzF/1fxsnLzM6Zv6fdn++27USAzzxEE=
Subject key identifier: 91:92:03:99:10:1D:01:CC:10:EB:F8:77:B1:3B:21:ED:2C:43:FF:F9
Authority key identifier: 18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
Certificate issuer: /CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Certificate serial: 0194BC3C212C4354BB568DEC558257CBD135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl (hash: bgVydHwjsZ72TNn/cWsdYYZpXJmb2kxpvJ1JaDbVqaA=)
2: g9iZztKhPBfdB3SMkUVgLaoGa6I.roa (hash: 3cdl1mhf1MuyZrBGoECoS2FydheWQgVhXvTorzFZles=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:2c:43:54:bb:56:8d:ec:55:82:57:cb:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18090ed0027f0e33a754c259f7dc88bb7a72ffa8
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=91920399101d01cc10ebf877b13b21ed2c43fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:c5:cf:62:4f:39:2e:53:d2:f7:a5:f9:03:
74:99:62:59:6f:54:a6:4e:f9:ff:2c:87:a2:ff:0f:
38:7a:8a:72:fe:e5:db:bd:24:24:7e:bc:08:ff:e1:
33:b1:94:fc:1e:26:fd:83:92:7a:f7:40:0c:aa:e5:
12:83:82:a1:62:11:68:f5:45:2d:19:eb:fa:dc:9e:
fc:23:64:d2:09:aa:ca:2b:a4:17:a1:57:e8:bd:b6:
4c:72:ab:0a:74:07:a5:86:a2:d3:4b:41:b8:76:f2:
d7:65:6b:2f:b6:2b:4a:4f:30:82:9d:da:0d:79:79:
ad:cb:e8:6a:65:7a:3d:64:e2:ee:5f:66:98:5a:8c:
8b:84:90:35:d3:f0:0c:8a:75:13:95:fd:2b:d5:a4:
81:93:04:bf:9f:b0:4c:14:c5:79:13:5d:bb:78:df:
47:03:00:f0:4f:9b:d1:b9:ee:74:2f:4d:cb:85:3c:
8d:42:ce:c8:13:46:bd:c5:02:05:db:4d:59:ea:f5:
40:3b:95:12:49:51:e2:58:af:52:e4:17:e8:a6:2e:
b9:9a:31:35:a2:5e:8f:52:3e:c0:36:0a:11:dc:22:
79:5c:95:32:a6:d4:82:a0:35:91:b9:45:59:7d:a3:
d3:a0:cb:32:b1:bc:ac:a4:b5:ed:5c:5f:2a:2c:ca:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:92:03:99:10:1D:01:CC:10:EB:F8:77:B1:3B:21:ED:2C:43:FF:F9
X509v3 Authority Key Identifier:
keyid:18:09:0E:D0:02:7F:0E:33:A7:54:C2:59:F7:DC:88:BB:7A:72:FF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAkO0AJ_DjOnVMJZ99yIu3py_6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/10dd7f-5ed7-44dd-beb2-cffad53292ce/1/GAkO0AJ_DjOnVMJZ99yIu3py_6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:ba:10:7c:94:4e:09:1e:61:dc:b3:fd:a2:1e:4f:27:dd:
02:36:4a:f3:91:fe:a9:05:24:92:49:4c:ef:1f:a9:ad:ce:2e:
3c:d8:76:bd:48:b2:ec:f6:66:96:ae:27:f1:b4:0a:d4:3a:ff:
bc:d3:89:7d:e6:6d:de:0f:1d:b3:2b:9b:5f:3e:68:74:ab:22:
2a:88:35:2f:33:08:3b:77:47:b6:d8:f3:05:0d:29:65:1e:d8:
52:e7:a1:a1:d4:29:e2:7b:be:aa:85:ce:85:9f:80:21:79:ff:
c9:9d:a7:88:bf:7c:14:ef:14:7a:c9:b7:f4:87:3b:81:32:75:
b5:88:8d:b1:c7:5a:cf:b9:ec:78:18:8f:bc:3a:9f:db:25:03:
3b:53:54:55:a7:b0:02:24:ed:95:98:10:30:96:6c:80:3d:97:
2e:7d:37:3e:11:7b:e7:10:04:30:51:ec:8d:a7:c6:b0:91:6e:
e4:6a:c9:59:0f:73:37:89:45:76:04:84:1f:91:f6:ee:e6:f6:
6c:c2:31:08:54:2f:c9:bb:ff:3e:f3:8e:f2:08:36:38:25:aa:
7b:41:ac:60:35:82:39:fc:13:94:9b:4a:4a:38:7a:42:35:91:
a4:67:28:00:a5:c1:61:5b:cc:55:f8:b5:28:5c:aa:e4:22:b5:
fb:e5:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:08 2025 by rpki-client