Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
File: GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft (raw, json)
Hash identifier: og2DwW91nW4dQsCGyu7VE1y0kvWIAuyUTRRTQb9DNbQ=
Subject key identifier: 0B:F2:83:B9:02:DB:05:E0:0D:CB:26:D6:0A:BC:36:67:88:2F:07:DC
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 0194BD17C6367B0E830E2D0046C4623EC335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
Manifest number: 0301
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 1BCQS42AU0GGH4PRx7vWlNY6UnM.roa (hash: UsPM1kz8JudOE7Cn+hyYQwficWvW1KbcDmuvAJ6iOSc=)
2: 31ag2HrgANjhnzyqvzYcA_GuDbg.roa (hash: 2P8QZCQEYwZ7T/ngNrFwmBzstV47MWzT0cHknGsfldw=)
3: GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl (hash: nMqlxy1Fm8s8yaQOJSR5YSCaV8J7ZMSzy0owg+48rHM=)
4: xKJMBlinbdfn34LVJF69A7qgGkk.roa (hash: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:36:7b:0e:83:0e:2d:00:46:c4:62:3e:c3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=0bf283b902db05e00dcb26d60abc3667882f07dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:42:90:1e:f9:dd:7d:95:b3:6a:f7:e5:89:
f9:5a:bb:b0:6b:c7:fa:95:1f:b3:ef:19:7b:70:d8:
62:c8:97:ac:d3:9f:8a:de:d3:49:0b:96:8c:21:fb:
e4:08:b8:dd:4c:86:81:91:84:cd:8b:f2:a0:3a:25:
7f:da:07:9d:cd:73:8d:d8:7e:27:d9:ae:7b:52:6c:
26:56:52:07:25:e6:4d:d5:43:06:2e:79:4a:87:0f:
28:a4:00:97:da:db:17:81:e4:d8:72:d8:aa:72:e7:
fb:ab:2c:22:cc:15:4e:e2:80:c7:fa:d4:56:3a:5f:
bb:2c:37:74:5b:c0:77:27:db:a1:09:ff:24:1a:42:
6c:e2:0f:10:85:79:8f:e3:ef:5d:9c:27:20:9e:4c:
07:13:d4:15:3c:80:12:d4:a9:b4:20:23:2a:4d:22:
fa:35:a6:22:85:42:c5:cb:5a:07:3e:2f:90:17:66:
3e:2b:c3:a0:75:6e:6a:18:d6:95:26:d5:a9:23:27:
60:a0:a8:16:f5:70:a5:28:74:54:91:47:0e:04:e2:
cd:54:5a:9b:7d:99:43:f2:6e:68:aa:34:dd:1e:a5:
60:91:9f:50:3b:e4:cc:92:1d:75:70:2f:b8:73:70:
48:5a:12:3d:54:9b:b1:58:44:ca:85:a5:0a:89:cf:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:83:B9:02:DB:05:E0:0D:CB:26:D6:0A:BC:36:67:88:2F:07:DC
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:59:9f:9d:a3:46:9a:e9:02:fc:c3:a8:d5:a0:70:19:79:74:
ee:2c:ef:b1:48:69:ee:4d:60:8d:52:33:fd:17:67:28:94:78:
96:b6:2f:57:db:b0:4f:07:df:b5:9d:eb:02:f5:f6:de:3a:b3:
59:55:03:e2:f2:af:70:03:38:4f:c6:e3:5a:63:d1:92:be:a9:
b7:9f:f5:49:f5:31:16:74:1f:1d:e7:c9:ff:ea:58:d7:1e:b3:
08:36:75:e0:a1:60:5e:b1:67:eb:77:ae:b1:63:09:7d:8a:8b:
55:b4:4d:bc:f1:43:32:a7:56:1c:3d:5c:66:cc:d7:de:7b:6e:
f7:a0:b1:c6:3f:13:da:35:7e:8e:fa:77:1f:1a:b3:e0:d7:8b:
5e:37:7e:f4:9f:73:0d:5e:3a:7e:af:8f:50:ef:6c:95:83:3c:
85:66:16:eb:0b:54:78:d0:5c:74:f0:d0:dd:b0:37:24:cb:42:
79:32:3c:d6:a6:2a:b0:ca:3b:8f:76:b0:62:f3:b4:f0:86:8c:
12:47:3f:df:03:47:71:09:2e:27:14:6c:0b:01:7f:3a:47:c4:
42:b7:ac:cf:2b:2d:c3:fa:3e:e1:4c:6b:47:8f:6d:21:a8:5c:
bc:81:39:a3:11:da:20:eb:38:c4:6e:bb:77:af:89:37:e5:cd:
ad:9b:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:14 2025 by rpki-client