Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File: GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier: wlTItFMLRaTp23uApiH7kn8A6JMPxrx67moH2AnNXgc=
Subject key identifier: 65:27:6F:FF:8E:54:0F:0E:E3:E0:1E:D7:0C:10:8A:3F:62:3E:76:78
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer: /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial: 0194BCAA21A88F4FD3BDBD95B1881DBBC8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: RBtK/3aPYGazbLZwYt/CGeqoNdoxp0/VegZCk8EUqXM=)
2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:a8:8f:4f:d3:bd:bd:95:b1:88:1d:bb:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=65276fff8e540f0ee3e01ed70c108a3f623e7678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c2:d4:29:a5:4c:03:dd:4b:68:3f:cc:97:b1:
81:98:54:58:18:8c:f8:c4:ef:35:ae:4f:e7:c1:13:
66:29:fd:01:7e:41:38:dd:25:19:c6:74:ae:29:ce:
2d:fc:d6:9d:9d:54:9a:c8:ce:78:f6:0f:78:08:36:
8a:9f:1c:29:c9:cb:96:c7:4a:66:12:f0:a0:19:91:
54:65:c2:c5:94:41:cb:a4:7d:51:e5:6d:b1:37:33:
a5:b5:78:50:5f:c7:1d:ec:06:7b:9f:ac:49:fd:63:
5a:97:25:36:30:f2:ba:59:16:02:31:0e:eb:01:4f:
d4:d3:4b:00:3c:e9:b8:e8:3c:63:b9:91:f3:81:af:
28:40:25:df:e2:26:f3:9a:8b:5c:13:d3:61:7c:13:
3f:c2:46:4e:8f:6f:51:e5:6e:8b:21:06:ac:25:5a:
72:89:65:94:e8:13:97:72:76:3e:76:45:bb:2d:b8:
6d:35:30:f5:5e:34:c3:cf:3c:e5:bf:dc:fa:47:39:
7d:cd:36:fb:5a:6f:6f:c5:44:c6:5a:35:d4:ab:94:
ce:9c:fa:46:3e:1d:54:03:63:7d:3e:40:9f:20:4c:
0c:9e:e4:76:42:ff:5b:d4:c3:f7:f4:0a:a6:cf:97:
00:93:e2:f6:75:f2:04:26:0b:c6:2e:36:bd:53:df:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:27:6F:FF:8E:54:0F:0E:E3:E0:1E:D7:0C:10:8A:3F:62:3E:76:78
X509v3 Authority Key Identifier:
keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:51:0b:4f:34:aa:1f:13:be:c2:2b:15:e5:fc:0f:76:08:75:
cb:6a:7b:07:2e:bf:7e:60:30:56:a2:7c:67:f4:d6:bf:f3:7e:
04:f7:e2:fa:1e:cb:c9:db:36:64:49:f9:9b:f2:55:44:13:3a:
1b:26:b5:ea:fc:27:6b:58:25:9d:4b:9f:4a:35:cb:53:29:8f:
ad:d1:95:8f:e4:62:91:ee:48:9b:80:2c:3b:fa:78:fd:35:c8:
17:dc:37:9e:e7:a9:1e:fd:bb:ca:d8:22:8f:0c:f7:6e:dd:14:
c7:4d:0e:2d:df:09:4a:a2:1f:35:42:e6:9a:94:9d:5e:8e:60:
03:1c:99:f6:cd:81:15:1c:cb:6b:9d:ce:60:ee:81:7b:2c:a7:
9b:7e:90:82:09:22:ae:29:0d:5a:e3:e2:ab:c2:3d:3b:7a:69:
49:a2:61:4b:d0:3b:0b:3e:99:28:ce:6f:00:51:db:15:cc:62:
f7:a4:d0:29:c3:2c:d1:c0:a7:50:9f:2a:f5:f0:f7:71:e4:07:
e3:7f:55:ff:09:f0:17:0a:04:d0:d0:7f:5f:c5:34:02:e1:28:
d6:9c:71:d4:56:49:ae:66:6d:5e:f8:f2:5e:b5:40:4c:fa:7a:
e5:bc:91:a5:84:bc:9a:2b:05:96:08:dd:9e:21:9c:e1:8d:51:
7f:68:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:14 2025 by rpki-client