Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.mft (raw, json)
Hash identifier: 4WasMXREftRP9EIoPk9gcviAmgnIkZ0lLJUg7wNFQMM=
Subject key identifier: BB:0F:9A:9E:A7:BA:61:3C:48:8C:BD:8E:CC:BC:26:61:A4:5B:85:71
Authority key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Certificate issuer: /CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Certificate serial: 0194BD17F656EFFEC1B66D66BD8919FD6F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
Manifest number: 0D27
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: GpRvSoJtYiozjtg-CvzfeMh2BPg.crl (hash: ivz31UW4xe3Yx+3d3sRMcMchvGFMY3Sip1oHix2HIAc=)
2: PSwPdvpJ8F0S-rG7_N9WITcEKDI.roa (hash: /jo3ttsndkopDRSIl+Ye5A4QZZMm+sbwX25b3bVaXnY=)
3: l-86N1xNtY5uScFI7-RKcu_tM1g.roa (hash: tjaw/t7FWkVaKVLFK1mB9oeSnERDlbutQFZnLHnYIbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f6:56:ef:fe:c1:b6:6d:66:bd:89:19:fd:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=bb0f9a9ea7ba613c488cbd8eccbc2661a45b8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:19:66:90:eb:b5:60:4f:fd:26:c7:ef:13:b3:
b4:da:f3:23:e3:7d:29:3c:d5:03:d1:6d:9d:12:7f:
b7:b9:ca:25:55:35:01:bd:fb:b6:11:73:2b:13:71:
bf:40:aa:4d:92:91:f2:24:fa:99:51:9f:bd:d5:72:
7b:ac:49:69:e0:a6:34:e1:31:6c:b6:cb:9d:7c:49:
88:eb:67:1d:1c:f8:3d:1b:b4:29:d0:68:7c:a3:ba:
ee:4f:0c:9d:48:5d:c9:46:dd:cc:f9:0a:0a:f4:b9:
a3:0e:42:66:44:ab:f9:bf:7b:fc:3d:9e:91:3b:92:
e3:3b:a7:29:f4:8f:65:a9:c7:10:be:6a:56:bc:8d:
d7:c6:79:55:bb:70:c1:43:9b:6d:df:f2:2f:0f:80:
cb:56:d1:26:d8:77:f1:61:b6:d0:2b:db:d0:85:d2:
04:04:2e:cf:65:90:65:e8:f1:74:58:28:a1:6e:e3:
e0:52:fe:b2:6f:b8:fd:85:db:f5:c8:6a:9d:5b:c9:
4e:90:70:42:a9:55:40:a3:2d:db:20:94:1d:72:07:
df:75:99:79:4d:5f:12:61:cf:fe:df:dd:99:cc:a6:
37:8c:3a:51:68:d7:77:77:4e:95:da:9a:67:bb:3d:
74:90:a8:62:74:7a:ad:30:97:fa:20:80:a6:84:0d:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:9A:9E:A7:BA:61:3C:48:8C:BD:8E:CC:BC:26:61:A4:5B:85:71
X509v3 Authority Key Identifier:
keyid:1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a1:57:cd:7e:2b:25:ea:1c:ee:d5:a4:dc:e8:ce:e5:8d:46:
51:b1:16:ef:a2:8d:11:81:f1:8c:de:cd:16:18:d3:82:6d:fa:
bb:97:0c:5a:18:d4:08:f8:40:7a:f9:56:7f:b3:f7:a6:e6:46:
0e:5a:52:34:5d:12:e2:b1:d3:c1:e3:4f:dc:ff:13:1b:bd:e4:
c1:99:e8:0a:9f:8b:36:d2:b3:9f:8b:e7:1a:aa:f3:4e:58:3b:
a4:e5:b5:01:d4:6b:58:d2:ec:75:91:ac:7f:88:0c:5f:84:c4:
56:8b:eb:f3:e4:b6:67:15:ac:3a:cd:ad:32:f7:8a:c7:0f:d4:
14:8c:06:ce:c0:55:34:a5:08:52:01:03:98:9c:f6:ff:10:0c:
ca:74:1c:e5:d3:92:07:29:67:0a:9f:1e:72:8e:ee:25:c3:f0:
cd:b2:20:fb:e4:b1:91:41:0a:99:ec:fa:ba:75:d6:98:a0:36:
2a:53:c6:03:f6:e0:3c:8d:ad:e1:ce:81:ae:c7:de:7b:30:74:
53:42:92:e0:4f:c5:ad:b0:47:f4:01:1d:72:b5:84:5e:73:04:
bc:98:9f:d4:32:2b:bb:be:d9:95:30:f2:20:9c:50:4d:cd:5d:
be:9d:6e:ba:e7:9e:dd:64:21:16:6c:c2:a5:5c:9b:e5:b6:d3:
b2:3d:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:26 2025 by rpki-client