Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: OsTxJibi2jwsGf927FflaTJ+SzprQWA5y/R8W9jPzFE=
Subject key identifier: F8:72:17:43:C5:4A:59:11:5F:47:86:8E:79:AA:D3:A7:6D:80:04:36
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 0194BC73089C344F7BE29200673A435F2D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: TaN5P3HqqwGb1po0YVy2ijCEy6guAG5kXxFmOPV+AXE=)
2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:08:9c:34:4f:7b:e2:92:00:67:3a:43:5f:2d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=f8721743c54a59115f47868e79aad3a76d800436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:76:be:0d:26:b4:10:ad:0c:ba:92:b3:d2:
c0:4c:78:9e:28:79:63:b5:1d:39:68:c6:d3:b4:bf:
7f:74:c3:39:97:dc:72:39:4e:47:4b:21:f7:b3:d5:
fb:e0:64:38:ec:0b:07:2c:40:99:99:24:7e:c4:a7:
41:21:ee:ae:29:c2:01:9d:62:c2:57:18:60:63:3b:
c0:7f:96:0d:7a:99:6a:42:8c:54:3e:9a:91:9f:52:
2d:13:5c:30:12:29:e6:af:8f:7d:62:af:ad:f2:48:
c2:af:13:81:20:53:82:9d:a7:4e:c1:43:82:fd:05:
df:af:0c:82:6f:80:f2:91:0b:ee:2d:68:06:4b:9b:
e1:b1:c5:fc:fb:26:7a:a3:02:c8:37:e5:be:cf:38:
99:86:0f:9b:66:65:08:ed:4e:ed:5b:74:09:75:0e:
89:ad:58:20:01:5c:42:12:14:a1:8a:6c:fa:ca:a2:
ef:ad:88:ae:43:c5:6d:12:56:3a:45:d8:1c:e4:da:
e5:9e:3b:76:cb:ea:d5:b1:ea:9d:8c:01:ab:60:aa:
7b:b6:e7:57:45:c5:a9:a1:c3:4c:e4:40:ec:ab:3e:
89:1a:8a:5c:3a:ab:20:e9:1b:e4:1e:78:3d:52:27:
b0:3d:37:ea:88:19:78:c9:f1:7a:ea:dc:8d:d9:93:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:17:43:C5:4A:59:11:5F:47:86:8E:79:AA:D3:A7:6D:80:04:36
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:90:06:2b:c4:7b:7c:d6:2a:7e:c5:c4:66:f6:48:3c:37:c9:
c3:d8:d8:29:41:9e:38:de:10:ce:f9:36:2e:b0:74:36:02:54:
65:2e:60:9e:20:b1:60:79:44:2d:cd:d2:da:e1:2e:55:c7:eb:
b2:f0:0f:14:6c:93:f5:47:1e:97:5b:44:57:d4:8e:2b:02:95:
1d:25:46:f6:ab:ec:fa:ae:ac:64:c6:25:a0:e4:c7:ab:4f:0d:
ef:f5:38:e8:3c:fb:03:59:0c:50:2e:00:5d:68:03:6e:d5:8d:
52:0d:62:6e:fe:df:60:27:03:e4:f0:af:5b:0a:55:c5:6b:a0:
9a:0e:c3:9f:35:ea:91:1c:c1:72:0d:b6:f9:c9:6b:df:89:28:
ee:5e:23:6b:a3:f7:f5:dd:db:9b:61:b6:de:9a:98:3d:2a:4f:
67:7d:41:ba:cc:c0:ac:36:0d:d2:88:10:b2:62:49:f0:53:7d:
78:d0:6b:3e:5a:a0:ab:59:01:9a:1e:75:76:1c:d3:3e:65:0a:
53:6e:dd:8e:61:27:2e:a1:31:1d:f5:e0:90:bb:56:69:30:b3:
0e:8f:f4:e2:ab:e3:20:39:82:cb:86:79:8e:a1:80:e0:0f:9b:
e1:64:32:0d:77:52:28:d0:38:b3:95:7e:1f:72:ea:a2:96:4b:
a7:52:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:45 2025 by rpki-client