Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
File: GpLjfcjPRWNLLNvPPxAFShxhFpc.mft (raw, json)
Hash identifier: Gs7KGhS/RiopsMs9dSQ3FA34vGeEtF/qGRyhsPgB3ac=
Subject key identifier: EF:4A:3F:6E:D2:C1:6A:89:56:87:D2:29:7E:E8:59:95:F2:25:91:75
Authority key identifier: 1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
Certificate issuer: /CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Certificate serial: 01962E2AC73977F925FEE9C6F1D2ED841978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
Manifest number: 14EB
Signing time: Sun 13 Apr 2025 08:01:17 +0000
Manifest this update: Sun 13 Apr 2025 08:01:17 +0000
Manifest next update: Mon 14 Apr 2025 08:01:17 +0000
Files and hashes: 1: GpLjfcjPRWNLLNvPPxAFShxhFpc.crl (hash: dzZWifrA8JO9I4wYp4iCd3T0tKWm0m6HdyrlRGOE0VU=)
2: PgHBT14XbyMI_bDsD-5F89TwxvI.roa (hash: yY+dt31JYDSsLmacNs98NxKQjn/3/Xoq5ab4x7nUyV4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:2a:c7:39:77:f9:25:fe:e9:c6:f1:d2:ed:84:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a92e37dc8cf45634b2cdbcf3f10054a1c611697
Validity
Not Before: Apr 13 08:01:17 2025 GMT
Not After : Apr 14 08:01:17 2025 GMT
Subject: CN=ef4a3f6ed2c16a895687d2297ee85995f2259175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:71:82:4a:d2:a7:a2:66:7d:71:84:9e:87:
47:9b:32:7d:e0:f0:ea:04:0f:be:50:7f:4d:8f:d5:
6e:b1:47:7e:e9:90:4a:2a:df:74:9d:d0:50:d0:bd:
63:c1:84:b9:81:34:58:2d:92:1a:09:e4:d6:c5:52:
c1:8a:87:11:15:d2:8c:3a:05:71:df:64:eb:67:ee:
d5:bd:28:fb:a4:0c:79:30:6c:5c:d0:d1:c3:71:78:
3d:f1:f7:f6:92:d5:91:e9:fe:1c:23:df:d4:c5:89:
5f:8c:5f:8d:38:3e:46:5c:0d:e0:ca:4c:49:ac:9b:
70:a3:58:32:f2:0f:ab:97:81:59:28:1c:b2:30:fc:
e6:20:0b:b9:b4:fa:1c:b0:96:46:09:48:07:88:43:
f8:92:00:c1:8b:e8:62:aa:37:80:4e:2c:3e:46:36:
98:1c:28:b8:2c:fa:c9:9b:8d:d2:ca:0a:e3:d7:74:
61:23:e5:3b:df:21:01:eb:e4:d4:a2:d6:a9:d8:f3:
b2:45:cf:22:05:d8:fb:f1:46:20:99:bc:75:af:53:
2b:51:48:b0:4c:f3:91:e7:db:9d:d7:fe:03:2c:f2:
21:76:e4:db:80:03:7e:c0:3d:bd:02:71:3e:5e:b3:
83:fd:70:2c:89:15:a4:52:22:6a:f7:f0:89:c1:25:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:3F:6E:D2:C1:6A:89:56:87:D2:29:7E:E8:59:95:F2:25:91:75
X509v3 Authority Key Identifier:
keyid:1A:92:E3:7D:C8:CF:45:63:4B:2C:DB:CF:3F:10:05:4A:1C:61:16:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpLjfcjPRWNLLNvPPxAFShxhFpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d8b6ea-730c-4639-94fa-457272837aa6/1/GpLjfcjPRWNLLNvPPxAFShxhFpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dc:6f:3d:ad:aa:cf:89:44:ac:1d:d0:e1:d6:9c:b5:04:4f:
68:c2:a0:e1:79:d6:3a:4e:e4:1f:bb:5d:7a:e1:6b:65:3a:d0:
06:63:2c:1a:54:b1:69:26:54:d9:10:3d:5b:98:01:df:a6:78:
58:26:f0:8b:d1:fc:e9:9b:eb:e6:1b:ee:2d:34:64:e0:f9:e0:
ec:11:88:6a:46:d1:98:b3:eb:fa:1b:03:ec:5e:61:1e:2a:18:
85:70:50:f5:19:54:b2:fd:32:4b:58:30:e4:7c:83:fd:99:9c:
35:fc:a3:dc:eb:a4:2d:1a:82:0e:15:d6:90:0c:10:14:ea:63:
32:2f:99:69:c6:a6:35:67:79:73:88:75:08:e1:47:82:26:c9:
bb:e5:62:f1:0b:16:a2:9f:fc:aa:f2:d8:c8:e9:17:8d:9a:2f:
66:d9:e2:26:1e:f3:e7:15:c4:d6:19:ac:13:7b:a8:b2:da:8e:
7f:e9:1e:34:c5:54:58:54:6c:d4:0b:08:4d:6f:7d:7e:b9:d0:
93:85:1b:b9:81:38:27:5c:af:7f:77:d2:a6:7c:5f:a7:3f:31:
d5:dd:10:ea:68:ce:c1:d8:4b:79:93:d3:1a:9d:59:5d:5c:f2:
cd:c4:0f:a6:27:44:44:94:da:ac:c3:c0:76:4e:93:28:c0:21:
4d:fb:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net