Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier: 0+WRgrm0ctEomRVs42Db76iyVlH/Y2xZEmC8eZ3iowE=
Subject key identifier: A1:C6:A3:5F:07:EC:B6:4A:98:13:D1:39:74:86:69:66:89:59:AC:6B
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 0194BD85AB895E7D968E955929F80E00AE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number: 0C86
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: JaFVvOEcQQ9WW9yfft8AHv1lq4m0dpHG6xXMtypp+hg=)
2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:89:5e:7d:96:8e:95:59:29:f8:0e:00:ae:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=a1c6a35f07ecb64a9813d139748669668959ac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:a6:92:71:85:2a:fa:0d:a0:2e:3e:ba:11:
de:cc:a4:60:38:da:ae:5d:ab:84:1e:60:7e:2a:72:
56:cd:c6:2e:0c:21:00:8a:14:33:3b:07:5a:24:46:
af:a7:fe:69:bb:93:7e:fc:66:a6:de:5c:52:b2:31:
b7:35:46:9a:06:fd:de:2c:98:ed:eb:59:15:d7:22:
86:1e:47:4d:ca:eb:2a:f1:96:07:30:c5:ee:f1:dd:
61:9d:61:24:5f:e0:85:80:b2:4c:86:fd:79:b9:70:
72:f2:99:93:25:fb:c1:25:d6:e0:ac:6e:8e:cb:8a:
ee:d5:84:83:ba:e0:ce:ca:f9:67:97:a1:ac:a9:dd:
5f:6f:88:99:9c:0f:f7:18:c7:bb:1e:e2:a7:20:74:
63:a1:79:c7:b7:01:93:7e:18:74:d6:e8:07:e4:8e:
27:38:fa:a7:d3:27:f2:54:a7:60:4c:93:6c:31:bf:
25:13:8b:28:46:ca:93:a7:82:7c:61:1e:1c:ba:cb:
d0:c1:6d:01:dd:e3:36:ad:ea:1e:7d:ea:b7:78:fe:
12:96:7e:c1:aa:1f:80:98:a6:28:cc:72:1b:05:2b:
86:f3:a9:e4:c6:00:ce:96:22:71:b7:f2:7b:eb:af:
74:bd:dc:c3:b8:78:13:d9:8c:52:c7:f9:52:98:5c:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:A3:5F:07:EC:B6:4A:98:13:D1:39:74:86:69:66:89:59:AC:6B
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:05:08:15:ff:33:c5:7e:76:1c:cb:0a:cc:48:43:a2:59:a4:
51:56:e0:6b:a2:d9:b1:86:bd:d9:10:61:d1:91:86:3a:10:d0:
17:eb:af:00:e2:ee:45:2c:b9:ee:95:18:d4:ad:47:c2:2d:6c:
cc:98:cd:76:62:0d:7d:d2:c6:a1:c0:02:62:08:62:ee:43:5d:
b4:bf:9c:7f:cb:33:54:7c:d7:c1:c4:6a:ae:e3:c0:fa:81:83:
ba:cf:b7:3e:4c:c1:62:fe:c4:4a:bb:01:b4:d4:96:1c:03:48:
7f:47:b2:44:f9:05:0e:ee:4f:49:32:d1:07:16:cf:7c:6a:52:
9a:08:9a:ff:15:9d:ab:fe:03:4a:ac:c8:07:e5:cd:0c:1f:a1:
4f:87:1d:0d:39:d9:5f:d5:ea:ba:4c:b9:a8:05:6a:ba:66:73:
e0:83:c7:b0:e2:39:40:8e:c2:7f:99:16:5a:fc:27:ff:ef:e4:
ca:8f:ed:5b:93:b5:71:29:0c:44:68:6e:48:df:f6:d3:a4:e3:
98:4d:3b:a3:5e:97:b5:c3:45:ee:c5:ea:a6:a6:8e:7b:a0:54:
e4:33:10:ab:7b:b1:02:7b:b7:27:17:bc:f7:14:9e:76:a9:bf:
ec:19:3d:03:98:c1:f7:65:5a:52:49:d5:f0:d3:28:d9:64:8a:
2d:96:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:23 2025 by rpki-client