Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: maDP6A96TW+LWOTKnMpVkwELjW47vUGVQvBkMznBu80=
Subject key identifier: A1:EA:3E:94:68:C2:F5:35:12:3B:FF:B6:02:7A:CA:E0:74:BD:5E:3B
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 0195E159B85936E238342487C946E6A8BE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 13BE
Signing time: Sat 29 Mar 2025 10:01:48 +0000
Manifest this update: Sat 29 Mar 2025 10:01:48 +0000
Manifest next update: Sun 30 Mar 2025 10:01:48 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: lP3HDvuDrapveGP+1HTvyqKvpQxprEAzJSPbewj9AU4=)
2: o1l5BPG8TRspXIfZdrd0blYAUfY.roa (hash: 5xBU1dsBZ1CJDSiFKF5L8bb4B1rGVOEs++4FXuZA5ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:b8:59:36:e2:38:34:24:87:c9:46:e6:a8:be:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Mar 29 10:01:48 2025 GMT
Not After : Mar 30 10:01:48 2025 GMT
Subject: CN=a1ea3e9468c2f535123bffb6027acae074bd5e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:42:7f:d0:76:2b:0f:ee:dc:28:d0:8e:52:
d3:e7:a2:ef:7c:b1:f8:6e:08:df:e7:38:51:b5:d1:
e6:3f:78:ec:d5:42:00:73:66:2d:ec:5a:76:ed:61:
b0:9c:a0:0d:5a:a9:64:04:85:17:39:4e:2c:40:6b:
cd:91:b4:0d:5f:6a:a6:06:61:1a:75:7f:21:25:3e:
68:26:31:e7:9b:99:15:24:52:07:e4:5c:a7:66:16:
52:d7:fe:db:50:b8:b2:89:47:ef:e5:b3:0d:27:e9:
81:73:87:11:f6:23:69:b5:71:31:04:b7:37:2c:24:
73:22:2a:73:30:3b:3e:a5:17:4b:53:56:c3:9e:0a:
30:dc:3c:b2:17:73:04:0a:cb:78:9d:83:be:0b:89:
79:ee:3d:7c:f1:26:ec:3f:b6:bf:2b:66:ca:e6:89:
43:89:d6:31:d0:72:cd:1d:40:25:48:66:a7:28:91:
e8:4f:f9:19:2e:93:93:21:6d:ef:b4:21:3c:4f:6c:
32:07:a0:ef:b8:46:36:06:4a:a0:fb:2d:a3:27:92:
66:4d:7e:fe:2c:18:56:b6:29:93:51:d3:1f:a8:9f:
5b:d2:2b:fe:26:a1:60:bd:df:36:05:aa:28:ec:f0:
2a:e0:41:ff:e1:0e:38:6f:a0:17:cd:8f:59:7e:5b:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EA:3E:94:68:C2:F5:35:12:3B:FF:B6:02:7A:CA:E0:74:BD:5E:3B
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fa:ef:0a:7f:4a:19:30:e3:a8:51:d1:2e:46:a6:fc:19:f9:
d8:3b:af:ee:cd:55:cc:18:d5:f3:63:b5:9e:fa:fa:1e:20:8e:
f0:16:bd:c9:f8:56:f6:61:da:31:6d:fe:f2:fa:9e:16:69:85:
c3:a0:8e:84:cf:61:f6:95:fb:dd:f2:70:6f:c7:ef:75:ba:a4:
84:44:08:52:39:3a:ac:bb:06:df:85:fb:20:d1:65:c7:e6:71:
3d:81:55:b0:aa:fb:03:5f:12:02:1a:3c:79:07:2a:23:88:42:
fe:2a:6e:df:47:1f:8e:d8:22:36:aa:49:ea:24:4d:96:fd:f8:
03:84:a1:77:16:ec:cc:36:63:80:34:39:3b:c4:4f:92:3b:45:
47:7b:66:55:7d:fa:5a:f9:a1:8d:f3:f9:f1:89:d9:26:f4:fd:
1c:34:f5:fe:3e:df:25:64:8c:2e:da:6b:b9:2b:4b:aa:fc:63:
6b:ad:f2:1c:30:9c:a6:88:59:86:28:34:6c:4a:88:0a:b5:03:
15:04:a1:2f:ad:19:0d:b6:8e:c7:d3:61:76:09:33:5d:16:62:
cb:a4:8a:d0:00:fd:46:9b:85:eb:1e:92:69:bf:94:69:ef:44:
31:f2:b1:a4:b8:b8:e5:87:80:b9:dd:3f:2c:13:47:8b:9a:4a:
95:5b:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:50 2025 by rpki-client