Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
File: GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft (raw, json)
Hash identifier: TsUZylLyfEAA0wMMP0n8pTO9ZJVD4rtgdWjvrhZjLe8=
Subject key identifier: 6F:38:81:A7:49:4F:6F:26:54:2B:E6:14:C5:38:6E:72:AA:0E:69:7C
Authority key identifier: 19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
Certificate issuer: /CN=1925e6387b33e94069a89a5d1be68904e4090613
Certificate serial: 0194BD853830A6DBD43F714DB3122292F8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
Manifest number: 0104
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl (hash: ktS1x60+jby+wjyqTIeMW07e9rEGDVpUYLbx32JvFCw=)
2: KKovPP5k_vOQvmKc7t5x14I_gos.roa (hash: xTSJVhmS95WWwOtUsvBgdC5iNk4sqmcitObjOn9r3l4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:38:30:a6:db:d4:3f:71:4d:b3:12:22:92:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1925e6387b33e94069a89a5d1be68904e4090613
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=6f3881a7494f6f26542be614c5386e72aa0e697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:19:46:21:e9:dd:74:f4:57:52:b6:a5:fb:
34:08:6b:8e:d7:34:78:40:46:f4:ae:a1:d2:4b:3b:
d6:a1:39:76:f6:67:26:8c:d4:1e:b8:7f:7b:d8:17:
be:63:26:22:ab:9f:30:2c:cc:4c:79:91:de:25:0b:
0e:d2:8d:09:08:6a:3b:74:bf:19:a5:01:44:2a:fa:
a1:ea:48:63:39:95:8b:89:3c:94:de:18:f4:ce:11:
8d:16:41:50:3c:c6:6c:dc:7a:1b:bc:18:3d:a1:12:
3f:c8:4a:d3:0e:05:ea:19:20:d1:1f:87:9c:a8:74:
69:bd:42:09:46:76:ec:3c:e6:6b:e3:cd:40:b2:3e:
28:c2:9f:21:04:65:92:6c:14:c2:27:72:0e:68:e3:
f3:0b:8a:fa:ce:97:a6:26:92:80:c2:7d:a2:40:b7:
71:32:39:12:57:83:49:1c:9f:03:c1:fa:6b:63:a3:
95:98:3c:85:fc:f1:2c:40:30:c0:bd:e0:b8:03:c3:
8f:ac:98:cd:1e:70:a5:23:16:a8:e4:93:77:87:e1:
f8:0f:c2:f7:d9:38:b9:54:55:01:51:6c:ab:4e:6d:
5d:97:30:56:ca:1a:25:d9:6f:f7:f3:8d:23:45:aa:
3e:10:84:b2:d2:eb:3b:3c:7a:13:43:81:00:08:87:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:81:A7:49:4F:6F:26:54:2B:E6:14:C5:38:6E:72:AA:0E:69:7C
X509v3 Authority Key Identifier:
keyid:19:25:E6:38:7B:33:E9:40:69:A8:9A:5D:1B:E6:89:04:E4:09:06:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSXmOHsz6UBpqJpdG-aJBOQJBhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d4e0db-18c1-4483-8803-966685ea40f9/1/GSXmOHsz6UBpqJpdG-aJBOQJBhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d8:49:9d:31:20:ab:7b:e8:ca:f3:ec:86:1d:29:db:4c:7e:
88:65:a2:8b:3f:75:55:e7:67:ad:69:21:6b:9e:37:4e:2d:68:
b5:85:9f:d9:e5:94:33:3c:10:d2:44:18:06:ad:54:a6:88:1e:
7a:64:54:d7:f4:40:6a:ef:62:ee:e2:55:4b:24:5c:ce:7f:42:
cb:d8:41:42:ef:5c:32:98:89:4e:fa:8f:f3:15:ff:49:1f:16:
93:41:a2:52:af:af:4e:f8:24:63:ae:af:9f:29:4e:6c:52:14:
eb:06:ea:c2:1b:b6:34:83:4e:9c:83:71:5b:98:1f:dd:d7:ab:
41:47:ce:8e:4c:18:21:88:33:26:bf:b0:e1:9b:cb:4f:74:14:
c5:21:94:11:fe:77:7a:26:11:c9:0c:eb:2d:cc:6f:87:e7:9e:
52:52:85:e3:c3:25:c5:36:d3:bc:d6:00:17:94:24:fc:50:7c:
d3:a3:83:2b:49:7f:d4:e4:c0:15:74:47:ec:99:f5:0c:cb:65:
86:1d:19:42:b7:80:ed:07:48:7e:29:f0:8f:3c:1d:c6:4b:f7:
98:44:7c:24:5b:60:05:86:32:d9:77:9c:ff:c4:88:65:a9:67:
0b:74:52:b3:8c:49:06:d5:9f:93:76:fd:a0:e2:bd:d3:e3:68:
97:aa:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:46 2025 by rpki-client