Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File: Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier: jZkRwCbzqbv5dQ9ZG/mokEycGv9ezR+Sqhkw7Q+LrbI=
Subject key identifier: 43:69:A9:C0:4D:39:5D:89:78:D5:66:12:A0:2E:CE:D1:6E:F5:CD:8E
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer: /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial: 0195E0462CFD7F82A77FB71866707F8644B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number: 14CE
Signing time: Sat 29 Mar 2025 05:00:49 +0000
Manifest this update: Sat 29 Mar 2025 05:00:49 +0000
Manifest next update: Sun 30 Mar 2025 05:00:49 +0000
Files and hashes: 1: FEdMbCbzJgH4I201iITFsY5tQkY.roa (hash: yUyH8MEoNnWUXoPsKPA+PXI+yDyq7XJC03dhzicpvkw=)
2: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: V3DGAtlOKuDA+aqlbRS8X4IaqXWShg1qxhAUEyoCbw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:2c:fd:7f:82:a7:7f:b7:18:66:70:7f:86:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Validity
Not Before: Mar 29 05:00:49 2025 GMT
Not After : Mar 30 05:00:49 2025 GMT
Subject: CN=4369a9c04d395d8978d56612a02eced16ef5cd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:92:1b:a3:15:6b:c6:a4:72:c6:e3:80:c2:
4b:bb:7d:ca:89:31:23:25:cf:6f:d7:63:f5:00:4e:
26:3c:1f:84:81:b9:c4:ac:ba:19:4c:81:08:8c:5c:
1a:5f:f2:8f:3c:bb:75:83:72:95:56:78:32:4d:d3:
e2:fe:0d:7b:a4:d9:8b:80:94:af:39:64:7d:79:aa:
3a:a8:d4:ff:92:05:ba:0f:c8:c0:8b:5b:e0:de:c7:
ff:7d:a7:86:51:d6:97:da:63:da:75:2a:77:61:87:
06:ee:1b:f4:52:69:8d:dd:84:90:37:50:05:df:45:
f9:fe:98:83:f0:db:0b:c0:64:00:de:2a:10:e9:05:
3d:97:ed:66:c8:b2:63:f6:71:1b:a1:75:36:f3:e9:
61:22:06:62:2d:12:68:19:21:02:f0:0c:1f:91:19:
d3:a6:f6:50:cc:f3:29:e1:20:64:ff:6a:d1:74:6f:
fe:a4:9b:ba:ed:8c:e7:ec:98:21:82:35:42:4f:bf:
44:63:65:76:1a:32:c6:c6:77:8e:75:ea:96:5f:c2:
3a:76:8a:72:8e:12:d3:75:e2:1f:8b:e2:44:fa:97:
7b:26:fa:4f:3f:7a:7e:d1:da:b3:b6:b9:fe:fd:b4:
9b:7f:4a:3a:f4:ad:62:98:aa:91:b1:41:f1:c8:55:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:A9:C0:4D:39:5D:89:78:D5:66:12:A0:2E:CE:D1:6E:F5:CD:8E
X509v3 Authority Key Identifier:
keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:69:d3:af:b3:26:67:f5:e2:5d:e8:a5:2c:58:9b:ef:2a:71:
c9:c2:68:62:88:bf:68:e8:05:6a:54:8a:70:c9:c5:4d:29:3c:
d3:14:79:ea:b6:04:aa:87:49:1b:ff:32:22:1d:33:d8:1b:91:
2d:70:2d:55:be:0e:61:08:e4:87:09:29:91:62:ea:80:d7:07:
d3:74:8e:a9:dc:f5:63:ed:52:96:a8:d1:18:ed:36:88:05:1e:
3b:6d:69:8d:0c:fd:29:4f:1f:95:a5:61:1b:fd:f3:07:3a:73:
ff:d0:88:51:32:89:f4:bc:4a:69:89:36:b8:b7:e9:03:c2:70:
0c:69:9f:3b:96:49:c0:53:eb:ef:d4:4d:a3:4c:b7:0e:50:8f:
20:66:15:31:ff:87:6b:cc:f1:98:2a:02:03:98:30:e5:4f:98:
3f:8f:6a:dc:dd:d7:80:9b:42:3f:dc:47:b5:c4:56:c8:db:ca:
66:97:9b:38:7f:f7:2c:a3:6a:d5:9d:22:c8:d3:65:6c:7b:33:
b4:03:3a:5a:90:da:92:c1:2f:e9:65:a1:c6:55:24:c4:91:a0:
a8:80:3f:ae:93:52:ba:67:7e:c2:ee:65:0d:89:f4:73:93:40:
cb:ee:d7:22:33:4c:ab:56:cb:d8:2f:f0:b9:86:02:1c:97:e0:
12:fc:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:28:00 2025 by rpki-client