Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: W7bLQpTcZf1GQm2nsLY+K68wK4LsDKWTytvR3r4oWgM=
Subject key identifier: 0D:BA:3E:EC:02:88:FD:94:95:DF:AD:0D:F5:8A:D1:F4:F1:03:CE:4D
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 0194BC3C9FFEC7DE99F050818620945FD104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: wHb16dxmzDsjF/rj8PFvrrc2+ntaNwOoZkd4+h9h/Sw=)
2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:fe:c7:de:99:f0:50:81:86:20:94:5f:d1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=0dba3eec0288fd9495dfad0df58ad1f4f103ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:99:b4:20:07:84:f9:83:88:a1:38:c8:4a:
b2:c2:c3:83:b1:4f:2f:8b:c0:9c:c7:d0:8a:dd:ee:
cf:7b:9b:61:60:35:18:3d:22:0b:ba:54:0c:bb:99:
d0:63:20:dd:36:a1:46:eb:02:81:9f:c1:61:1a:ea:
d7:66:fc:18:bc:10:a7:4e:a9:e6:fe:9c:cd:d0:80:
4e:c4:9c:50:22:b7:16:42:b3:0d:0b:5d:c0:2a:16:
e0:bb:e0:00:76:3e:3a:aa:eb:5d:70:03:5b:fe:b3:
f8:a7:91:a9:73:11:6d:05:5f:f6:39:74:d9:10:78:
c0:6a:00:da:3a:c1:af:7f:4f:8d:db:2a:e8:23:73:
68:65:d9:df:3d:ba:49:fe:2f:12:68:0f:80:09:0c:
96:de:8c:f1:09:35:9a:7a:7e:d1:6a:63:92:41:14:
fa:aa:1b:8b:88:d1:60:77:47:68:e6:ea:d8:49:83:
b6:d1:af:36:cd:10:5d:ad:19:54:56:3c:e2:23:ff:
0a:fe:98:4c:09:8c:f3:44:7c:b0:61:ec:6b:19:fe:
9d:a4:7a:28:90:9c:1f:b4:a6:f6:7d:27:40:cd:2b:
c9:f5:60:5f:af:38:f4:73:13:8e:0c:79:71:1c:3f:
8f:f5:dc:7b:b5:f8:11:20:cd:4b:fb:c1:8c:b9:f1:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:3E:EC:02:88:FD:94:95:DF:AD:0D:F5:8A:D1:F4:F1:03:CE:4D
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:93:d6:67:24:bd:52:5c:15:a0:72:34:5a:39:bd:8b:09:51:
38:67:94:c4:33:3b:be:18:72:36:f5:e2:4e:c2:4d:a1:b7:70:
ea:c6:40:6e:3a:6a:89:23:07:b1:70:9a:01:ef:a7:67:0e:d0:
53:64:9f:e1:aa:84:46:7e:bb:04:c1:5a:5a:21:df:a9:2e:68:
e7:99:2d:94:55:4d:a5:28:10:6b:a2:23:2a:c3:b0:5c:a7:56:
c8:e0:40:39:3b:95:52:43:42:5a:dd:64:a5:aa:4f:93:e2:25:
3b:b7:2b:5f:e6:d0:7e:42:ea:c3:c7:f0:a1:4a:5f:de:bd:bf:
21:2b:ee:19:02:af:39:b8:b3:c0:ad:54:24:25:22:89:4a:c1:
51:f3:dd:b8:2d:55:0f:ef:3c:fe:0c:54:d8:56:00:8d:29:35:
a5:dc:88:ee:18:02:20:8c:7c:de:6e:f7:1c:85:b1:36:77:f8:
96:39:af:ad:b8:ca:9a:86:c8:db:83:50:dd:f0:33:af:e9:fd:
12:a6:7b:a9:bf:8b:a1:a7:13:54:dc:63:2a:c6:bf:fb:0e:7b:
d1:58:69:8c:ad:f2:32:05:be:ee:a6:db:42:c8:c5:4c:3b:96:
f6:7d:48:74:f5:ee:9e:7a:25:ae:fd:ae:ea:09:59:06:60:c2:
3b:81:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client