Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
File: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft (raw, json)
Hash identifier: 1MBtuK0KPcNJZj9xeYcu3aySSWaQ/G1BQAlB18OOqp8=
Subject key identifier: 91:17:D8:01:B9:30:17:15:25:02:F1:96:C1:27:D6:69:05:60:B3:A2
Authority key identifier: 18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
Certificate issuer: /CN=18c48d1b33abdead205b0a920fb333827e1ce150
Certificate serial: 01949075EE03AEEB58F63E4818E1DAB0ECBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
Manifest number: 0335
Signing time: Thu 23 Jan 2025 00:00:35 +0000
Manifest this update: Thu 23 Jan 2025 00:00:35 +0000
Manifest next update: Fri 24 Jan 2025 00:00:35 +0000
Files and hashes: 1: GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl (hash: IjuYT/AQoHC1g/0PlQel4jCa0PAkRsQnCL8VTp3PGOQ=)
2: s8sgu6g5oSfBqeBmO9x7BWFLEjU.roa (hash: j0S+9g3YLfQD7V09p2CyNtO5mZYs7O1WUXngjI8zqjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:90:75:ee:03:ae:eb:58:f6:3e:48:18:e1:da:b0:ec:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c48d1b33abdead205b0a920fb333827e1ce150
Validity
Not Before: Jan 23 00:00:35 2025 GMT
Not After : Jan 24 00:00:35 2025 GMT
Subject: CN=9117d801b93017152502f196c127d6690560b3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:98:de:85:4f:e0:5d:f4:b4:c4:f8:23:79:
8a:71:51:3c:26:62:6e:28:11:31:21:c8:71:cb:19:
52:c1:b5:4c:dc:e2:ce:45:d2:7d:8f:85:17:81:2a:
ba:fd:3c:e6:d3:f1:7f:72:d4:e9:70:ea:e9:c5:e7:
40:48:f2:b4:fb:76:33:d7:cb:0e:40:ad:f2:c1:ac:
64:f6:f1:2a:68:1b:eb:ae:39:09:2f:26:20:f8:f0:
dc:50:e2:f7:3d:0e:73:20:77:25:99:ca:e2:3a:14:
27:ea:79:cc:d2:8a:24:b6:94:bd:6e:40:95:f2:fa:
86:1e:77:52:9e:d5:ba:d9:de:42:67:8e:28:1a:0f:
54:b1:db:df:9b:3b:d0:11:f7:fc:e7:a2:cb:f5:6e:
cf:c6:00:cd:3c:0a:3a:fb:3f:f4:ed:74:b6:e6:1e:
fe:ba:02:cc:75:47:b1:9b:6e:46:eb:76:d4:f0:c5:
c7:60:9c:ba:c9:53:4c:6b:26:79:88:de:ab:11:80:
40:89:83:a2:d3:e3:f0:1b:4e:95:84:86:23:ca:cc:
03:8e:d9:40:90:4e:e0:8d:20:83:aa:76:3e:bd:1b:
61:2d:92:eb:2e:05:62:da:7f:a0:2f:87:63:07:b0:
56:45:3a:e6:74:4d:3a:48:e2:b8:b3:80:de:a6:e5:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:D8:01:B9:30:17:15:25:02:F1:96:C1:27:D6:69:05:60:B3:A2
X509v3 Authority Key Identifier:
keyid:18:C4:8D:1B:33:AB:DE:AD:20:5B:0A:92:0F:B3:33:82:7E:1C:E1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ea0d4a-64a0-42ea-8bd7-9c22d04228b2/1/GMSNGzOr3q0gWwqSD7Mzgn4c4VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:29:06:2b:15:a4:76:cb:1d:1b:e8:39:59:a4:3c:bc:0b:f8:
e9:e7:c5:a7:05:f6:d1:ba:b4:b7:37:09:04:32:b5:52:f8:dd:
c9:90:13:e8:15:f9:e3:04:c1:fb:c7:3d:49:05:fc:52:ee:ac:
ec:e8:a5:53:88:1a:c5:be:6a:cb:a0:cd:6b:2f:84:31:49:a1:
cf:5d:f2:00:65:5e:66:15:aa:47:5f:95:7e:a6:d5:dc:71:9a:
1e:c4:fc:57:8a:1b:54:be:6c:c8:24:23:03:54:7f:69:d1:f4:
36:7b:6e:c0:b6:e6:88:5f:47:5a:fd:af:c2:f3:65:56:09:51:
bc:f5:3a:49:5c:de:74:7c:7a:8a:7a:b2:c0:34:6a:0b:7b:eb:
93:e8:b3:82:d4:97:15:5a:16:90:71:55:54:7c:15:17:96:cb:
dd:e1:11:03:18:ce:d8:2c:f8:00:52:bf:cb:d5:ac:cc:36:a8:
a0:b6:74:9d:72:7a:ec:95:20:4b:d5:77:12:a8:ad:ac:3b:22:
57:3a:83:e8:80:fe:7a:25:c1:fb:b5:07:4b:11:6d:63:79:e6:
17:22:d0:f0:28:55:37:21:84:5a:1a:d0:1f:49:c8:bd:fd:45:
4b:87:3d:0c:e1:24:61:5c:5f:6f:40:43:0c:54:f7:87:8c:75:
73:dd:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:35:07 2025 by rpki-client