Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
File: GCJVGHajpiZZn0Z8eucJuBwU30k.mft (raw, json)
Hash identifier: QSPu0XEJPOMMfart22W78Zn85YR4z3lZWDNlJNNYYcs=
Subject key identifier: 43:94:4B:0B:CF:13:23:AE:AA:3F:BC:1A:B8:8E:DA:A1:16:C4:B9:52
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Certificate issuer: /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial: 0195E12267C865F52C0FD4E291D1061DE8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
Manifest number: 0D1D
Signing time: Sat 29 Mar 2025 09:01:23 +0000
Manifest this update: Sat 29 Mar 2025 09:01:23 +0000
Manifest next update: Sun 30 Mar 2025 09:01:23 +0000
Files and hashes: 1: GCJVGHajpiZZn0Z8eucJuBwU30k.crl (hash: RqrdTRkme8hlMvcEw7gLpzMe4V3FDxl1tr6gxn3AOdk=)
2: zPNwPn3PfVOL4wGom7HVDS4IKn8.roa (hash: zy7voOzOVbZPTN+jLWETC47nf/PEol3aN9sp5d/kZvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:67:c8:65:f5:2c:0f:d4:e2:91:d1:06:1d:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
Validity
Not Before: Mar 29 09:01:23 2025 GMT
Not After : Mar 30 09:01:23 2025 GMT
Subject: CN=43944b0bcf1323aeaa3fbc1ab88edaa116c4b952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:c4:ae:6b:ee:5a:88:9c:1a:95:64:52:2a:
b1:13:4f:a2:9d:eb:65:79:24:82:57:c5:ce:33:92:
52:55:c6:d7:45:74:55:39:10:b5:1b:b0:fe:0b:38:
d7:1a:29:9f:f0:40:22:46:83:ce:a5:23:4f:30:ae:
03:45:0a:ac:11:b3:b0:c1:8a:6d:1e:e9:28:ba:fa:
a9:b6:79:29:3a:18:3d:c6:81:1d:a3:fd:33:22:92:
9f:4a:71:61:62:9a:cd:dc:4d:55:b4:d0:75:20:ff:
c7:f3:84:f9:b7:e3:54:62:07:f1:a8:00:df:d5:a0:
dd:e0:ac:4c:7f:79:34:f7:25:4e:77:5d:58:dc:e1:
2f:02:9b:52:52:7d:a9:f8:0e:d0:0f:b5:ff:0e:6e:
8b:87:45:12:99:90:00:fd:ed:30:0d:ef:bf:25:83:
cd:3e:75:43:61:e3:20:56:cc:fb:d7:6b:77:6a:86:
82:98:ee:db:4e:bd:11:f0:bc:6a:72:75:2d:72:df:
78:f5:86:50:0e:31:d3:59:e4:21:ed:c0:8f:e8:cb:
05:a1:36:f9:a2:18:df:07:51:3f:3f:1b:9c:66:59:
28:7a:00:21:10:bd:98:5f:1d:c7:08:82:2a:92:80:
59:47:02:92:f1:1a:2f:92:e5:b0:59:58:9d:a5:a9:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:4B:0B:CF:13:23:AE:AA:3F:BC:1A:B8:8E:DA:A1:16:C4:B9:52
X509v3 Authority Key Identifier:
keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:59:25:b0:85:f0:0c:54:a1:05:c7:a3:a4:73:a3:bb:f3:41:
23:1f:d6:9c:56:c3:c2:10:aa:6f:a6:1b:14:ef:f8:e2:03:1c:
04:10:1b:54:02:b7:37:bf:3c:8a:58:e1:1d:ce:0e:0c:5c:4f:
ff:10:49:25:14:b4:3d:4f:34:dd:6f:d2:bd:85:19:84:3b:ed:
56:2f:df:09:ac:fd:6c:af:b1:6d:84:2d:62:ef:0a:18:7f:76:
70:10:3e:a3:85:f5:2b:16:38:0e:18:1a:6d:d5:82:fb:ef:55:
c0:22:cc:b5:7d:c4:ef:c1:1f:f1:f5:d6:cf:0d:88:20:e5:e4:
2b:87:55:4d:31:1c:54:22:12:03:30:ac:7f:d2:b2:31:98:93:
b8:0c:93:a2:c0:16:0f:e5:24:a2:ae:46:e1:c1:ce:b2:a5:23:
a9:e4:e1:46:92:ba:8d:12:6b:ef:1c:1e:e7:c3:4a:d8:59:d9:
08:1b:2f:41:53:67:a6:22:55:a7:24:51:5b:81:44:8e:9b:ac:
f8:3f:3c:11:67:ed:38:97:2b:33:c1:4e:88:36:7a:d1:8d:f3:
d0:cb:71:a0:f2:44:2e:4d:f8:dc:da:a0:57:18:d7:e0:8f:0e:
1e:dd:04:a8:e1:89:64:ec:63:6c:3e:a7:73:e5:0a:26:d1:c2:
bd:e4:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:02 2025 by rpki-client