Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
File: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft (raw, json)
Hash identifier: rcBJ6b+1ZRn/qtVJjo4gUpKEn3Xs0FAgkEzCNHSHerw=
Subject key identifier: 5D:69:9F:FE:68:71:0C:A4:BB:45:A3:8B:0D:2E:E0:20:0D:17:91:ED
Authority key identifier: 18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
Certificate issuer: /CN=18c48d1b33abdead205b0a920fb333827e1ce150
Certificate serial: 0194926449E2A16DE782188C3CF110B54631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
Manifest number: 0336
Signing time: Thu 23 Jan 2025 09:00:33 +0000
Manifest this update: Thu 23 Jan 2025 09:00:33 +0000
Manifest next update: Fri 24 Jan 2025 09:00:33 +0000
Files and hashes: 1: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl (hash: 3ej1w5Mx0ynVgWuvpk4QpM3LND9USlv9CROO3jJjbrc=)
2: s8sgu6g5oSfBqeBmO9x7BWFLEjU.roa (hash: j0S+9g3YLfQD7V09p2CyNtO5mZYs7O1WUXngjI8zqjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:64:49:e2:a1:6d:e7:82:18:8c:3c:f1:10:b5:46:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c48d1b33abdead205b0a920fb333827e1ce150
Validity
Not Before: Jan 23 09:00:33 2025 GMT
Not After : Jan 24 09:00:33 2025 GMT
Subject: CN=5d699ffe68710ca4bb45a38b0d2ee0200d1791ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:14:a0:27:8d:44:63:77:50:7e:7a:ec:7a:
a5:60:af:1e:80:eb:3f:d6:75:b9:2b:c8:2b:5e:e1:
67:fa:7d:90:fc:fe:ac:20:25:fa:a5:40:2e:22:0d:
f9:4e:4f:2b:57:d9:81:37:fa:42:10:0e:a8:6a:4d:
bf:34:ae:88:47:ab:80:22:75:fd:ee:aa:14:5e:0e:
74:0b:e1:1a:79:df:b2:ae:e7:ef:85:c4:55:0c:ec:
c1:93:ac:33:ee:1f:78:3f:6a:1a:96:e8:57:d5:87:
e1:ce:5d:ec:25:44:f4:c9:cb:dc:59:4b:b7:42:6a:
1b:d0:67:d5:aa:cb:d6:bf:71:24:33:ea:06:5b:f1:
6e:15:01:e7:f7:7a:90:b0:1f:dc:70:da:8f:d8:48:
81:e5:e3:d2:96:4f:33:31:54:59:60:2d:5f:aa:43:
85:65:77:c7:04:66:66:12:97:30:0e:52:90:2b:17:
6f:14:66:b9:50:d2:7c:c7:ca:7e:5d:05:0c:20:5e:
a2:ac:74:df:22:92:c8:a8:76:36:5e:9b:47:f1:fb:
3f:4c:6c:8f:bb:4b:c6:b0:15:cf:15:3f:c7:c2:ee:
43:60:1b:e2:ba:1e:b7:92:2a:87:f2:73:5d:21:f6:
42:2f:f7:ec:df:08:40:b7:38:1c:87:67:64:cb:6e:
4a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:9F:FE:68:71:0C:A4:BB:45:A3:8B:0D:2E:E0:20:0D:17:91:ED
X509v3 Authority Key Identifier:
keyid:18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:5b:0d:c9:00:28:5d:2c:21:ed:82:98:3a:d4:15:03:35:
ae:a5:b0:1d:6d:67:b8:95:0a:66:a5:d2:7e:53:e3:61:94:73:
4d:34:e7:37:18:44:2e:6f:0d:be:96:26:5a:cc:fb:90:57:b1:
65:55:a0:c9:a6:ab:d3:25:e6:6d:6d:ff:77:98:b6:2d:8a:cc:
1f:92:45:9b:16:70:3a:74:8e:d9:f9:eb:50:ac:61:af:66:66:
99:46:21:94:ff:17:93:8e:2f:64:28:26:56:de:e5:99:23:9f:
29:1e:0c:a5:c5:d6:dd:26:bc:5f:f1:2a:55:06:33:99:35:bb:
8d:59:a3:4d:14:68:75:7e:46:39:77:d9:fa:05:c4:fe:19:e5:
ea:1e:72:99:03:be:14:1f:4f:c3:68:cf:0c:3a:fb:4e:a3:a9:
27:04:8c:87:92:41:88:21:77:56:6f:c8:e2:46:95:cf:39:57:
82:ea:2a:53:e4:9f:26:36:ab:ed:33:44:35:94:9e:de:8e:9d:
68:45:c4:fa:45:21:a9:29:ce:df:dd:6d:f7:4b:c8:38:23:50:
16:99:5f:d6:99:94:77:14:47:21:ef:7c:ae:e3:ef:4b:89:72:
52:35:36:f7:f1:bd:1e:90:2b:58:eb:63:bf:71:02:c3:fa:06:
93:47:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:44 2025 by rpki-client