Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
File: Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft (raw, json)
Hash identifier: zjScfHAs57wDFS3BdnVqydJ4FBboEp3C2GdNcOMIJUY=
Subject key identifier: DA:A3:C5:EE:A3:78:85:72:41:3C:A4:27:61:7E:96:57:10:1C:53:7E
Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429
Certificate serial: 01962E98CF8147C95AAB6D89F76860A24C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 10:01:28 +0000
Manifest this update: Sun 13 Apr 2025 10:01:28 +0000
Manifest next update: Mon 14 Apr 2025 10:01:28 +0000
Files and hashes: 1: 5Mei7HUDLEXbe1TYaS7QjkI13gQ.roa (hash: 31lRnFm/x8I210JoZIudaFoeX6OfC5RkRQaebXeL8BU=)
2: Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl (hash: RzYM7Sox0DapSDibEQ6TLNcVujgoYl3BCbQNPwDW614=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:cf:81:47:c9:5a:ab:6d:89:f7:68:60:a2:4c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429
Validity
Not Before: Apr 13 10:01:28 2025 GMT
Not After : Apr 14 10:01:28 2025 GMT
Subject: CN=daa3c5eea3788572413ca427617e9657101c537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:a0:0a:9a:90:de:12:0e:23:2f:52:c7:7d:
54:9f:55:88:9e:1e:fb:dc:e3:53:12:83:ae:be:51:
19:30:1d:cb:6c:4a:76:92:2e:8d:6a:7f:a8:76:7c:
7e:8a:b8:19:81:e2:fe:8c:c1:f9:9d:6f:cc:07:f6:
a9:70:59:d8:6d:c0:61:18:14:a9:2a:8d:d3:32:3a:
d1:4f:4e:1b:c3:0c:49:6b:98:b5:99:c0:01:be:dc:
1a:c9:7e:62:d5:ee:45:bb:db:54:3f:e5:75:79:f0:
1e:ef:a6:d8:be:c7:3f:fd:3c:12:92:ce:33:93:ee:
77:fa:fc:2b:8a:b1:7d:f8:e8:a0:53:60:98:4f:c5:
71:ea:1b:d3:9f:8e:b3:2f:c9:aa:c2:0c:0b:4a:76:
eb:ac:f8:8f:ed:ff:43:6a:f2:64:4a:7f:5e:04:e8:
0d:34:a4:5b:6d:b1:0f:e0:95:36:84:9f:1a:43:7f:
f3:a5:13:21:0c:e1:31:59:11:1e:d0:a7:e6:0f:2e:
dc:4b:4f:b9:c0:33:c3:53:79:5e:4e:26:7a:8f:f8:
c2:44:5e:1d:83:51:5c:f8:53:79:86:96:63:8d:98:
37:63:12:bb:ed:1a:c8:19:e3:39:78:25:85:dd:f9:
a6:d7:20:ed:4d:58:17:f2:a9:db:1b:30:e6:07:6d:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:C5:EE:A3:78:85:72:41:3C:A4:27:61:7E:96:57:10:1C:53:7E
X509v3 Authority Key Identifier:
keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:89:1b:18:6b:5e:d1:70:c8:0b:76:49:38:45:79:2d:57:23:
54:73:18:f8:53:cb:da:98:1a:5d:2e:6d:75:bf:29:6b:40:61:
c5:f0:c4:ad:39:c4:bb:7e:53:61:5d:35:b3:07:3f:d8:9c:76:
13:ab:bd:ea:fb:48:5c:98:00:8f:cc:35:b3:ab:29:5d:98:40:
32:12:f4:1f:06:7d:82:8c:62:56:b8:cd:07:2a:d9:47:52:5e:
c2:3f:4b:6d:13:4d:b2:08:16:8c:53:bb:be:a9:1f:ec:3a:70:
43:5d:0c:6f:28:7b:f7:87:b1:ec:38:2f:7c:d0:50:35:d9:d2:
d2:ea:31:f8:e5:db:ab:e9:51:a3:51:9c:04:70:33:ab:06:22:
1e:66:40:60:59:1d:ce:ac:67:02:ab:48:0b:93:b9:ac:29:7a:
55:d6:08:f6:c5:a7:e5:f6:16:b3:bf:25:06:72:91:1d:10:85:
f8:5e:be:4c:6b:5e:7f:73:3a:10:91:99:19:4f:54:2b:50:4c:
1d:a1:42:e6:58:10:bb:73:95:78:74:35:c8:8e:09:82:50:85:
b4:d5:f6:1d:59:d3:d5:af:9f:b9:af:da:27:9b:cf:ec:83:f0:
2e:d4:27:89:38:e5:be:c3:31:e0:58:9d:ef:33:84:eb:b1:0a:
13:ab:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net