Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File: GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier: 7RwcbWITLbu2h7Tkel0NF5TnfMIzMCPfm/7HaiK7BE8=
Subject key identifier: 9A:CB:B6:0C:9E:AD:8F:03:4C:70:E3:CB:F0:9F:AB:F6:FF:F8:70:A7
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 0194BC04C0660926B7612F8BCC21779FEC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: MtSnx5Xn6QH8Pii5ZTCKJ1hE//Aol7vAt+H7D1dBqQg=)
3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c0:66:09:26:b7:61:2f:8b:cc:21:77:9f:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=9acbb60c9ead8f034c70e3cbf09fabf6fff870a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:69:e3:63:1b:ab:ba:81:df:e3:8b:31:76:
00:e2:f4:41:90:c3:de:d3:25:4f:3c:93:10:96:df:
93:1d:06:97:e7:5d:de:b6:cb:32:25:3e:cd:5b:1b:
4e:0b:05:15:e6:ed:1b:fa:f9:f7:38:50:9d:ea:ca:
06:4d:36:b2:a8:01:43:59:b6:c7:94:16:1a:34:75:
2e:bd:fa:ed:9c:50:4e:92:f5:ad:eb:9b:51:cd:88:
6b:4b:ba:91:c7:e0:ff:00:28:65:a1:9c:78:1e:a4:
bf:fd:44:ed:41:bd:35:fb:b7:bf:e5:8e:d6:72:4c:
b1:d4:c6:c8:d4:58:08:fd:e7:25:1c:fe:95:c5:b7:
8e:19:18:f5:de:45:63:27:c1:75:c5:d7:60:e9:02:
2b:4b:5b:e9:19:d8:41:bd:03:b1:0d:e9:3f:96:91:
0a:05:16:a0:5a:7c:2e:d1:ec:04:0e:0b:20:93:31:
b6:fd:82:da:ae:c1:c6:02:54:8e:aa:32:5b:d7:62:
ef:73:de:5e:72:44:f8:9f:4c:20:ea:a1:93:75:5b:
6d:c5:59:aa:e0:d5:bb:06:aa:06:33:f3:65:11:ed:
89:b1:4c:c2:1c:15:e6:74:8f:21:3b:d2:b4:a8:35:
eb:30:59:c2:f0:d8:ba:db:90:8d:77:46:2b:be:aa:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:B6:0C:9E:AD:8F:03:4C:70:E3:CB:F0:9F:AB:F6:FF:F8:70:A7
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b6:7b:f4:b8:ed:37:1a:4b:48:88:14:f6:ac:b6:a5:bb:b2:
cf:d8:ff:bf:ff:7a:75:4b:12:ea:8f:bb:a9:78:0b:64:72:a3:
59:d7:7e:08:55:33:6f:fa:5b:55:95:91:03:f3:cc:e2:9e:8f:
ea:7a:f6:53:1d:61:34:f4:ce:24:67:23:bf:8e:df:1e:b9:fd:
f6:20:86:7d:ed:83:ed:81:51:77:57:fb:73:94:ab:60:c1:78:
87:c9:b0:6b:69:19:3b:f8:e5:60:64:30:26:a9:2c:30:42:84:
5c:e4:8a:90:82:20:56:df:52:1d:be:43:3e:4d:6d:25:85:50:
3e:6e:48:3f:65:5b:6d:44:30:92:a7:fb:47:78:f8:04:82:c1:
c8:2f:3c:53:c9:97:52:f8:28:88:25:ac:1c:be:e0:03:dd:63:
e6:39:1e:ff:5a:5f:15:ea:82:46:52:6d:53:c7:be:ef:32:3f:
cb:0d:ff:7d:da:4e:22:bb:4d:3e:79:bb:9e:36:ef:f5:6c:26:
00:61:ad:10:2b:5d:12:31:0d:b5:28:b1:bb:2d:7a:3b:d9:dd:
1d:5a:a8:10:2c:4c:a2:75:1a:76:54:23:58:47:28:b2:1f:97:
56:12:60:70:5a:3f:d3:a6:50:53:61:e4:e4:7b:87:0f:42:19:
df:8f:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:39 2025 by rpki-client