
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 4v9gmyoXGvGIH4XI5xPXNJHcFNgsWVbCSxNrxPs2QWw=
Subject key identifier: 93:B7:48:58:7B:3C:CF:4B:BA:AE:88:3F:33:09:A6:58:F8:DB:46:05
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 0194BCE082FBDA03E28A9E6CC32F680B67D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 7LJ9xawxzsvCYv_ns8BJ_8ldo2M.roa (hash: f0+qr316tmp0FcJIZdHHGP/bQ0+RaN5V5m4qk2p7tRk=)
2: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: TH+zD+ziN5kw6ZGeHqtcLb49Y9SKnaJ3IvMhyL0Bmkw=)
3: PnNWpVBdWoAd7atmJEGFvS64Mws.roa (hash: tnccYlmQkpOSmjFbn8qMQEzLxuwoQXHA9SM9r5ZMjAk=)
4: VUW_CECBbTHdD7KnSWpCp7f6Uls.roa (hash: dGtVeAhKlKvD4goyS7nYKPSCr10+/VHRE76M3fcZW0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:82:fb:da:03:e2:8a:9e:6c:c3:2f:68:0b:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=93b748587b3ccf4bbaae883f3309a658f8db4605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:00:36:53:95:2e:ba:5f:09:05:1c:42:9f:
5e:2f:24:b0:c0:5b:5c:ad:bd:f1:45:cb:d6:58:be:
28:38:5d:94:5e:a6:21:56:ca:a0:ec:43:c3:08:cb:
32:59:ac:66:f0:ef:31:1e:08:89:81:ad:83:dd:0f:
dd:98:d1:ec:23:76:3b:2e:86:79:24:10:2b:55:77:
d0:85:45:4c:59:2b:86:f3:89:f9:5c:16:5d:03:cb:
0d:d9:8d:bc:7f:e0:ee:b5:83:b3:9c:25:90:9d:e8:
2b:23:fc:92:f7:3d:8d:73:56:39:b1:d1:dd:a9:aa:
5c:a9:61:13:70:4f:87:a5:e0:14:0a:73:74:7d:8e:
6e:b0:bf:68:0c:15:0c:1f:ca:8c:78:56:7d:4f:2b:
17:e1:fe:a8:09:30:86:66:13:ad:49:99:45:09:f5:
79:60:df:79:0b:70:41:a9:a1:d4:be:e4:b5:7d:b0:
c4:a1:f4:80:ed:82:99:f0:ce:9e:a9:21:f8:bb:52:
0c:da:97:d0:43:be:97:cc:37:78:ce:fd:a6:b4:9f:
f2:6b:7f:5c:6f:e7:f0:a2:6b:ac:6b:5d:e8:1c:cf:
cf:f0:7e:c9:9b:b5:ab:b5:52:a4:36:91:d7:7d:1e:
81:08:52:25:27:6b:32:27:13:50:78:44:5d:20:67:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:48:58:7B:3C:CF:4B:BA:AE:88:3F:33:09:A6:58:F8:DB:46:05
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:73:c8:1c:c2:8a:33:f9:a3:3d:35:c0:78:35:5c:cc:4b:08:
4f:d7:88:86:e7:2e:10:b2:4c:83:5c:bb:c3:22:4e:41:3d:2e:
c6:b8:08:f5:02:e3:a1:2d:2b:26:17:c9:ad:65:c7:89:fe:de:
a8:39:99:68:5f:c7:26:27:57:50:41:f5:a7:3c:1d:1a:cb:0c:
2b:0e:a9:f4:24:b8:7b:01:96:86:03:ad:83:3b:f9:3c:57:8f:
ce:22:bd:d2:4c:9f:94:8e:3f:d9:dc:c7:d4:c5:cc:69:26:0c:
f4:a9:cb:9a:07:7a:34:f4:5b:90:0f:06:10:c5:81:4c:83:07:
31:1f:4f:0e:d8:e2:ab:0c:8a:7e:b4:b1:b9:00:67:35:f2:8e:
fe:9d:7f:8a:8c:99:1f:35:e4:eb:11:75:6b:d4:da:55:11:83:
e1:b4:fc:90:fc:5c:ff:3b:bf:42:a4:0e:c2:ed:dd:fa:80:16:
3e:97:75:15:3c:a7:15:36:25:96:9c:e3:91:8f:7f:d2:8b:8c:
de:2b:c6:1f:5d:47:6d:f5:85:15:4c:f7:f5:08:3c:9c:47:6d:
de:13:be:96:d2:43:3f:b6:f9:82:e8:59:dd:0f:d0:49:84:0f:
0f:68:d7:a1:2f:2a:cb:b3:e3:52:cd:bc:8c:a5:a8:3e:cd:65:
ac:5c:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:13 2025 by rpki-client