Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
File: GyZGgoqep7-NQLT58LpEzNyyzt0.mft (raw, json)
Hash identifier: cUOQx62LV3G9lwxwOQiKb2xcbQSBP20pxOFgOaFdSRI=
Subject key identifier: 5E:16:FE:1C:10:94:28:B6:C5:83:19:7A:D0:7F:EF:BD:D2:E8:AC:4C
Authority key identifier: 1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
Certificate issuer: /CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Certificate serial: 019514DABDFE0C476E1A2FD00F1AB90E1632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 17:00:34 +0000
Manifest this update: Mon 17 Feb 2025 17:00:34 +0000
Manifest next update: Tue 18 Feb 2025 17:00:34 +0000
Files and hashes: 1: GyZGgoqep7-NQLT58LpEzNyyzt0.crl (hash: FkXJWkizPCHPe7k48diGgCZqE/6HKBzJmC2eM4fb7m8=)
2: cXeJCUogAaEPl1tXX88SkxpGNt0.roa (hash: Dh4HnPXXYE7MyBz3BsCQMLZhlOfs6wXwyiVfb9zL+aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:da:bd:fe:0c:47:6e:1a:2f:d0:0f:1a:b9:0e:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Validity
Not Before: Feb 17 17:00:34 2025 GMT
Not After : Feb 18 17:00:34 2025 GMT
Subject: CN=5e16fe1c109428b6c583197ad07fefbdd2e8ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:13:96:66:4d:de:a1:da:8b:18:05:fb:65:
8e:90:76:37:59:ab:c0:f5:59:7e:bb:34:1d:d5:76:
7c:16:92:61:e8:e7:1a:e9:da:07:27:6f:a5:6c:06:
4b:5b:60:34:76:ee:45:3b:27:02:12:77:1b:27:74:
88:d9:ad:f4:d6:b6:2e:f0:d5:b6:a9:5c:d3:25:5d:
8a:01:69:07:a8:47:5e:8d:3d:74:22:d1:1d:15:7e:
f3:f0:27:ac:45:23:87:f5:43:ad:00:55:6e:a5:f0:
b1:c7:62:76:80:82:0c:8e:65:28:bc:6f:27:86:7e:
ed:dc:2b:c3:5e:50:3c:a5:85:57:ea:ed:4d:fc:40:
5d:e8:17:d4:18:57:ba:01:e0:5e:11:a4:4c:38:04:
03:0b:60:81:d6:0f:9f:cb:bf:cf:d0:f4:13:38:76:
a6:49:0d:23:59:b0:e3:31:64:5e:21:c5:0d:9a:47:
a2:5b:76:60:81:46:25:33:c1:5d:9c:e0:24:9f:c7:
51:d9:2c:c1:3f:d2:f4:99:8f:49:90:cb:d2:97:71:
9d:f2:82:c5:3c:b4:32:62:1c:bd:96:4f:f7:51:f7:
43:cb:24:01:26:fb:ef:13:39:82:82:77:ae:29:ec:
2e:b9:92:d2:e5:27:d0:36:d0:f0:88:4f:f9:23:cc:
85:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:FE:1C:10:94:28:B6:C5:83:19:7A:D0:7F:EF:BD:D2:E8:AC:4C
X509v3 Authority Key Identifier:
keyid:1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:05:cf:17:ed:2a:cc:8a:0f:90:e8:b1:63:45:d4:d0:94:
0e:8e:fe:1d:2c:94:eb:a1:7f:2e:08:48:49:c0:ba:43:42:c8:
b3:3f:e0:29:5d:a0:a6:77:b9:7d:b6:a7:eb:66:7f:c2:de:45:
0e:1c:ef:a4:2b:0b:73:b3:32:21:2d:4d:58:86:48:c1:2d:89:
ed:b0:f1:cb:5f:40:53:6c:54:af:47:18:b9:58:4d:57:15:dc:
93:3b:b9:dc:83:8b:03:b8:a7:16:69:e8:f2:3e:7e:86:0c:30:
c5:02:f0:69:18:67:9e:19:f9:61:7d:1f:04:56:59:a5:6e:43:
19:da:75:a8:b0:0a:07:ca:0b:8a:64:5f:1d:3e:5b:2e:88:93:
f6:58:85:55:17:e3:6e:10:8f:09:8b:46:de:9c:eb:87:29:8f:
c4:b2:6b:73:34:c0:35:ed:c6:e8:74:99:12:6a:a8:ff:4c:96:
7a:e4:9a:ec:11:82:67:4c:a8:99:68:19:69:85:ad:62:8a:34:
f8:77:0e:2e:ca:03:d8:bd:c0:f2:ed:17:ce:58:72:3c:80:78:
c8:34:9f:06:5b:7f:98:ee:6d:f4:8b:8b:83:7f:71:f3:da:16:
f5:80:7d:af:0f:c2:f5:fc:83:5b:19:7c:c0:cc:c5:e3:e3:86:
7a:8d:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:24:01 2025 by rpki-client