Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
File: GyZGgoqep7-NQLT58LpEzNyyzt0.mft (raw, json)
Hash identifier: HP16U9h9IvCsoQfZbLw/rRR7ADj7gHOBla0qnbQoCTo=
Subject key identifier: C8:97:27:53:E0:CC:AE:2B:59:0B:F7:83:4B:A4:2F:3E:88:F2:A8:67
Authority key identifier: 1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
Certificate issuer: /CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Certificate serial: 01948F9A031490BDF252AF5057485F5C2B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
Manifest number: 1412
Signing time: Wed 22 Jan 2025 20:00:22 +0000
Manifest this update: Wed 22 Jan 2025 20:00:22 +0000
Manifest next update: Thu 23 Jan 2025 20:00:22 +0000
Files and hashes: 1: GyZGgoqep7-NQLT58LpEzNyyzt0.crl (hash: qshRRz7CLLxt2WU3gNArtquGm6YsJk4AspELJv5RhBo=)
2: cXeJCUogAaEPl1tXX88SkxpGNt0.roa (hash: Dh4HnPXXYE7MyBz3BsCQMLZhlOfs6wXwyiVfb9zL+aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:9a:03:14:90:bd:f2:52:af:50:57:48:5f:5c:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Validity
Not Before: Jan 22 20:00:22 2025 GMT
Not After : Jan 23 20:00:22 2025 GMT
Subject: CN=c8972753e0ccae2b590bf7834ba42f3e88f2a867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:fb:51:76:2f:aa:7b:63:27:99:64:5d:cd:
98:c4:f8:86:58:ee:31:4a:80:01:04:00:7f:fb:74:
d2:7c:5f:c9:b6:21:f2:e8:18:17:1c:12:2d:0c:00:
ce:47:7e:78:98:9e:b7:27:c4:8b:25:3f:cd:7d:83:
d3:b4:52:bd:68:c5:bb:13:a0:c1:4a:cc:13:0b:6b:
22:fe:94:08:e2:7e:ac:79:01:32:ba:18:ac:4b:93:
45:1b:9a:77:e3:7b:69:b1:64:8e:bd:28:6f:77:d5:
42:ef:1f:9b:b7:47:67:11:02:a0:4e:2a:78:a6:64:
ae:02:77:0d:a1:26:8a:9e:ec:d2:09:4d:91:b9:0c:
9e:8c:a6:5d:af:22:05:96:2f:75:cd:24:d6:d0:f4:
44:47:e6:ad:c8:92:cf:b2:93:b1:38:d6:bc:97:ab:
c4:e2:5f:6d:e4:b7:e2:57:3e:89:ef:2c:11:e8:2f:
38:38:d0:ca:e4:ca:34:4d:02:28:ee:50:0c:86:5a:
5d:88:61:6d:77:52:c6:0c:7a:f7:9a:12:e1:93:1d:
11:b4:b1:1e:c5:bb:14:b5:26:b2:44:46:67:8e:80:
9e:08:57:6c:4d:02:02:1c:bf:0e:00:76:aa:32:55:
16:59:72:93:a9:68:22:6a:b2:e5:e8:49:82:6a:9e:
95:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:97:27:53:E0:CC:AE:2B:59:0B:F7:83:4B:A4:2F:3E:88:F2:A8:67
X509v3 Authority Key Identifier:
keyid:1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4a:c0:b7:12:20:3c:ae:31:9b:72:8a:ce:a4:32:54:1f:a0:
43:fa:bc:1d:ed:21:dc:4c:a0:4b:92:86:40:fb:3f:62:b7:a0:
00:ff:1c:1d:79:92:41:21:d8:39:e1:c0:97:1b:4c:9f:e2:c1:
fa:4b:1a:0f:d3:74:35:8f:37:28:6a:11:82:ed:6e:13:08:e7:
15:18:dd:cf:38:07:96:cb:7b:30:99:3b:36:a0:e0:bb:a9:90:
f3:72:a9:f9:67:dc:6b:70:89:5f:7d:6d:fe:ff:58:d0:da:3d:
3c:18:1c:1f:b4:ce:72:78:02:c5:bb:2b:39:17:39:8d:8b:cd:
5c:0b:f8:2f:7c:1d:54:48:8a:79:86:4e:d0:ea:4c:b2:39:5d:
08:f5:e8:d8:da:71:0e:86:45:2a:40:84:76:68:9b:9a:73:38:
3c:50:46:ac:ed:1d:e7:df:17:4d:fc:6d:f6:de:71:31:97:0f:
63:1c:78:a6:df:98:55:9c:c8:58:0a:30:1b:88:ce:29:e5:0f:
6c:06:eb:ca:d1:4c:4f:77:e7:d5:7c:3b:cb:a2:d1:b6:5a:11:
c5:2e:66:81:bb:d0:6b:77:43:e5:e8:d2:33:cc:47:44:43:1c:
5e:cf:c3:93:e8:41:56:dd:ba:b7:92:55:f0:a4:52:d9:4e:d7:
77:5d:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:18 2025 by rpki-client on console.sobornost.net