Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: CYCSzhxWQ7xIPVbjZGVSn9AJSP0ymlneAlgGqQcnwoY=
Subject key identifier: 98:04:F5:ED:4F:4D:DF:48:17:13:D4:AF:04:8B:14:7B:E4:19:C4:58
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 0194BC72E631CFD171FD8D86A2D4A63C4175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: fmtSAy0gYbcgwDT1kKdWuaqmI5K+xZewL1p9apsI4UI=)
2: VBl-ShtkY5AIJWsXxjtVR-loSP4.roa (hash: UuFGS1s0gPMKN8UjwJZO3gcLtja3SP+rxmHIDo2PFTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:31:cf:d1:71:fd:8d:86:a2:d4:a6:3c:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=9804f5ed4f4ddf481713d4af048b147be419c458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:e6:e8:68:7e:7f:a2:e8:35:35:d9:b1:cb:
d6:c5:f9:33:ec:f1:8e:ab:16:3b:f6:11:42:81:cc:
2d:9d:08:89:10:47:ae:5a:f8:85:5d:2e:34:45:a8:
fb:13:8f:f4:ee:1c:3d:0e:b4:44:d5:0a:3c:04:02:
08:2e:fa:df:62:9c:b2:3f:df:77:72:8e:10:9b:5b:
ca:4d:0f:98:80:25:9a:1c:42:a9:19:20:5e:b4:ff:
87:e9:b2:70:95:50:b9:92:be:67:f4:74:3f:0b:90:
04:08:c8:b4:03:5f:48:4c:c7:ef:c8:64:a7:f2:33:
de:58:51:85:63:0a:a6:98:f7:62:b8:78:6d:eb:08:
1a:89:2d:69:10:cd:6a:e6:68:9c:05:da:be:58:50:
ad:25:2e:9e:9f:b0:54:98:1b:43:bb:de:89:0b:1f:
8b:f6:23:15:e3:0f:ca:d8:77:7f:96:ca:7e:b6:05:
2e:de:3f:ce:21:3a:4a:24:17:12:d5:14:22:35:7a:
10:c3:b0:19:eb:dd:24:33:b0:4e:da:6f:7b:95:81:
97:6e:6f:94:d1:d2:09:80:02:5b:ca:72:23:3e:19:
3f:17:45:cf:9b:25:ac:f7:e9:e3:a9:2a:02:54:d0:
fc:b0:78:8a:4c:0d:18:17:0e:d6:c1:33:04:ad:4d:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:F5:ED:4F:4D:DF:48:17:13:D4:AF:04:8B:14:7B:E4:19:C4:58
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b2:f7:1f:af:a9:ac:af:2a:d4:99:1d:d3:db:f2:8a:b1:65:
08:0d:94:4d:b1:f2:44:92:1f:54:5d:5f:79:39:e2:66:f7:e3:
4e:b9:08:63:c8:f7:2e:f5:5e:8a:62:24:ce:f1:d3:0c:27:97:
f0:c9:53:1a:0e:fc:dd:e8:68:00:29:99:3b:88:46:c4:e3:b8:
29:f0:d1:5a:68:5e:65:cd:c9:a5:ad:7a:8c:33:1a:b5:1f:49:
78:e6:48:5e:dc:98:14:b0:f8:88:75:0e:b9:58:61:df:98:6f:
11:1c:dc:31:91:eb:85:56:09:45:d2:7b:0e:dd:e4:ec:a6:4d:
f4:e9:4b:22:2b:19:31:f2:35:14:ae:e9:a6:7c:77:68:bb:30:
4f:09:38:38:e2:a6:ab:89:cf:d0:5c:d1:29:11:f4:ea:db:f9:
3e:e4:6c:b7:a5:fb:01:0d:54:2b:64:c9:b2:d4:95:fd:b7:fb:
07:68:a0:f1:3c:33:29:b6:af:be:5f:7e:63:f5:04:f4:70:ce:
a8:2b:5f:30:5f:92:9a:4a:38:a9:80:ca:50:7f:f7:40:61:2e:
9f:04:f0:f1:f8:fa:19:4f:a4:c7:78:1c:e0:a4:89:86:0a:46:
67:cd:7c:81:f4:94:22:1d:dc:f9:07:9e:99:3c:87:52:4e:c0:
e0:dd:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:40:20 2025 by rpki-client