Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
File: 1GRmfDSn27AvBTC85ILRGtQkh70.mft (raw, json)
Hash identifier: 1lyYhQhFL0WL/Ec0Dxi3e8HRc6PTQmyL9PkFegxRCQM=
Subject key identifier: 9A:D8:33:99:C0:4E:9F:AF:70:09:71:CF:F5:5D:FA:E2:F1:37:92:A1
Authority key identifier: D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
Certificate issuer: /CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Certificate serial: 0194BC7292637D6ECB739AA9C6B43697777A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
Manifest number: 0715
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 1GRmfDSn27AvBTC85ILRGtQkh70.crl (hash: Ga/7z+oCibk21s5E12iTnH6nyD71KkZqE7TJeeFIQJQ=)
2: ngLzTXL9yL8qZxP4JODs6i0oJzI.roa (hash: D6+JXEaHb1tO3mpKT7yT9VZcfkQ3PmJxwgv/yQik0ys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:63:7d:6e:cb:73:9a:a9:c6:b4:36:97:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464667c34a7dbb02f0530bce482d11ad42487bd
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=9ad83399c04e9faf700971cff55dfae2f13792a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:0e:0f:74:ee:ff:04:5c:21:0b:10:1a:b5:
39:77:ad:df:a7:f1:52:8f:35:31:01:3d:09:67:f9:
62:22:4d:e3:cb:53:bb:03:00:9f:50:3f:48:bd:20:
1f:76:4d:eb:56:ef:1c:49:06:f4:56:ae:83:8d:79:
f8:8d:fb:da:28:05:52:f3:46:ea:a0:f8:63:1e:36:
c1:eb:e0:c5:0d:3a:a3:f2:b6:0f:9a:89:71:5d:6f:
e5:9c:f6:ca:f4:76:15:9c:64:73:48:62:25:82:7a:
3a:5a:32:3d:b0:7b:94:f1:9e:d2:34:9a:37:39:6a:
e8:80:f9:4a:81:4a:47:36:20:0c:02:a1:cb:b7:27:
f3:35:61:0b:42:de:1e:b3:2e:e6:ae:18:7f:f4:40:
66:82:58:01:36:d1:ce:1a:8b:ae:25:de:64:61:f4:
7d:bf:ca:d7:be:bc:33:2b:db:7c:c7:36:87:c1:8f:
7a:f4:3a:e6:4f:5a:1e:9b:77:6c:f1:bd:c5:7a:63:
e9:c2:cc:e1:83:1b:c6:a2:6c:2e:78:10:2e:d2:28:
79:38:f8:dd:f3:27:1f:c5:08:6b:37:aa:d7:21:db:
22:75:7f:80:41:d9:0f:84:c2:11:67:13:2b:1c:23:
ab:11:e2:05:00:7c:b0:a8:28:26:db:53:48:69:b0:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:33:99:C0:4E:9F:AF:70:09:71:CF:F5:5D:FA:E2:F1:37:92:A1
X509v3 Authority Key Identifier:
keyid:D4:64:66:7C:34:A7:DB:B0:2F:05:30:BC:E4:82:D1:1A:D4:24:87:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GRmfDSn27AvBTC85ILRGtQkh70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bf4793-0c84-422c-9b8e-260de6cbf456/1/1GRmfDSn27AvBTC85ILRGtQkh70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ac:c4:8a:80:0a:a9:fb:2f:44:61:ae:86:05:52:bc:40:43:
02:78:0a:d7:97:f1:5b:f9:42:29:3a:df:38:9a:5b:72:f1:d1:
7e:13:6e:b0:cd:bf:55:56:3a:95:53:96:fd:0b:54:c1:43:ae:
3b:10:00:03:b8:08:d8:4b:5e:2d:55:ca:c1:40:ea:34:c4:01:
db:30:73:1d:d6:cd:7c:4c:2e:9b:74:f6:12:d0:21:f6:35:1e:
80:a6:74:1f:d5:8c:50:ff:e1:b7:0e:83:c4:63:38:c4:f5:27:
32:de:85:2a:cd:77:48:07:62:46:5b:be:84:73:24:b2:df:ee:
b3:56:25:11:d8:49:ea:08:13:f5:cc:c3:e5:dc:88:1e:5a:b2:
e3:9e:35:0a:df:92:62:75:2a:2f:4a:ea:7e:5f:ae:86:98:4b:
9f:48:20:32:5e:ac:b4:25:7f:83:d8:06:eb:ad:15:5a:de:40:
3b:a1:81:34:1e:7d:d6:26:36:00:46:b6:47:8c:63:1b:c9:14:
9c:55:95:7d:18:f4:8b:c2:0e:0e:25:f2:69:a4:4c:3c:b6:b1:
de:9f:8c:a8:b7:de:86:e6:38:50:39:5b:88:9d:60:76:f4:fa:
21:cb:7f:6b:ef:94:d9:5a:5f:18:af:ea:03:4a:67:20:ee:df:
a6:7a:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:03 2025 by rpki-client