Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: q+BYKTSod4++wJwXyNiJFWV2pFbW96SvpaseohWPrnE=
Subject key identifier: AD:88:43:7E:12:A5:FC:BA:7D:D0:0F:DC:EB:84:F5:D1:89:52:1D:6B
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 0194BBCDF08BADBEA00FEE0A6E59DB7158EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: g63kvMFHlA1X8rtWLXq50eEhevsbVpJ6EZwR6csFZg4=)
2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f0:8b:ad:be:a0:0f:ee:0a:6e:59:db:71:58:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=ad88437e12a5fcba7dd00fdceb84f5d189521d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:d6:4b:c4:e8:8e:38:4b:c8:b6:e0:29:32:
0a:06:f8:a8:dd:ba:2c:b8:85:36:02:ae:b4:2d:b2:
ad:d0:ea:45:2f:e8:4d:88:01:c0:20:29:85:1e:7a:
b5:d4:fe:65:15:81:d0:06:80:43:ff:ac:55:3c:de:
39:03:90:38:ba:61:d4:d0:d7:93:c2:47:8e:97:41:
b7:e6:a1:db:5a:73:76:c6:e8:46:d3:26:81:92:05:
12:bb:0a:fa:25:c6:66:00:a6:46:89:dc:85:db:ca:
7b:1d:bd:61:31:f2:ad:77:c3:cc:2c:6f:03:12:a4:
39:51:a7:8e:19:7f:a7:88:64:d5:0b:71:95:b1:43:
88:7b:7a:48:92:66:47:d5:aa:a2:37:40:ff:0d:d9:
72:87:9d:06:cb:f3:1c:79:db:4b:31:c3:ab:78:a1:
31:79:c7:42:38:b7:49:fc:54:ba:52:79:e3:10:5e:
2d:cf:f5:ef:7f:a8:43:3e:57:8a:b8:d7:74:e5:68:
0c:71:4d:06:4a:70:71:6b:f0:0c:ec:0c:e7:e0:27:
00:6d:80:b4:47:b4:2b:87:f2:9b:a1:b2:2e:7a:61:
38:3a:7d:72:1f:3b:55:62:4b:85:a0:47:70:ba:fc:
d8:e7:03:a1:82:4c:ea:70:28:04:88:8f:c1:8e:d1:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:43:7E:12:A5:FC:BA:7D:D0:0F:DC:EB:84:F5:D1:89:52:1D:6B
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:b0:12:0d:ba:33:90:ed:1d:3d:6a:3e:02:30:00:82:de:
99:e0:2d:7b:61:90:92:cb:14:84:37:5c:f8:bb:b5:80:ab:0c:
91:90:b3:a4:55:82:e9:92:9a:78:61:62:c3:6c:10:78:a4:01:
39:8e:be:75:07:cc:80:8e:2f:a3:56:7d:6b:d6:54:dd:8f:19:
fd:84:36:73:de:07:e9:8d:ce:a4:4e:53:92:bd:5c:3d:ab:58:
28:ee:a5:f8:ff:5e:0f:5b:4f:ae:44:46:6c:32:d0:12:d4:50:
e0:ee:99:82:7f:0b:c7:20:35:2b:79:61:a6:ef:a3:17:2a:7d:
bc:f6:01:79:9e:6d:ec:01:ab:e0:51:8b:71:3b:3f:57:a3:c3:
0c:f6:81:8a:fa:d3:6b:42:a4:5e:5e:96:c1:d4:53:83:a4:5b:
1b:6b:89:e6:70:82:e2:25:56:19:2c:d7:12:ff:d2:f8:70:41:
03:c9:b9:3b:35:ec:f9:0a:b2:11:39:0b:bc:a9:e3:ed:cd:8e:
1f:7e:04:6f:5d:d0:78:12:86:7f:5e:a4:23:58:e3:6c:1d:9c:
2f:15:5d:5e:ee:e7:fc:d2:48:a6:13:57:05:ca:f4:19:e5:d2:
c4:98:fc:40:88:fd:f9:64:18:fb:b1:9f:be:1d:53:c0:05:06:
a5:3e:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:26:03 2025 by rpki-client