Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: pv/x5qwQNFheY3XM3HZffsAkGrOoAYEe/B0C1swg3N4=
Subject key identifier: 6E:72:DE:92:67:80:CC:0C:3F:45:6A:DF:0F:68:6A:1E:50:FD:4F:96
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 0194BD17C55DD1947F2A58A95DC482E6CAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 12A1
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: BLv0MO2bhFqNNiooZw7IxddDp8s.roa (hash: q5p1I81STwTqhQhwzqvdFIrA1d1S040nS47//ImyZhY=)
2: GKisAxYBXaDeAskgbc6Wc3fNUeE.roa (hash: GH/Viioo0nohDQUGWHkBPqTOX7JrH8stNt792Mljj28=)
3: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: C4EcaUfUhddc1yTFiPQuRgP7oldrEaoxFJeFFm/x9Vw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c5:5d:d1:94:7f:2a:58:a9:5d:c4:82:e6:ca:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=6e72de926780cc0c3f456adf0f686a1e50fd4f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:ba:88:e6:1d:5e:ab:5b:ca:fd:de:8d:7c:
ca:6e:d3:5b:dc:06:c8:1e:12:03:ba:bc:35:16:56:
e8:77:b4:56:32:3f:0e:4b:87:07:52:3d:cd:13:ed:
45:b8:d9:68:69:00:f6:bb:87:c5:d6:8d:31:07:37:
36:20:fe:58:10:48:c9:93:8c:39:b8:22:7d:00:f0:
77:cb:78:01:7c:ba:05:b8:76:d3:e3:d3:b7:6d:a4:
de:cd:d6:38:db:d3:55:00:c6:c1:22:bf:a4:df:68:
9f:d6:98:1f:64:11:b4:62:4e:77:c8:5c:9b:92:5c:
2a:16:b4:70:fe:32:e2:62:05:fa:f7:24:f6:a4:22:
23:8a:a5:ca:99:18:4d:b0:34:e2:c7:16:9e:85:5d:
6b:6c:d7:d1:5a:49:5f:18:e2:3b:a0:d1:b3:8a:ae:
f0:8a:cf:ab:ad:2c:b5:72:6d:c6:8e:cd:dd:fe:eb:
1d:e8:cf:dd:5c:95:c4:d5:40:0c:80:e5:75:6d:d1:
8a:2b:f0:30:cb:f4:a7:69:04:02:71:57:e0:3d:3e:
45:b5:ab:34:87:08:9e:aa:01:65:f1:b7:eb:23:e7:
eb:7a:13:7b:f1:78:ef:ee:d5:74:a6:d0:af:62:3f:
54:c2:37:ab:ae:fb:4b:b2:50:1f:bc:96:14:d2:e1:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:72:DE:92:67:80:CC:0C:3F:45:6A:DF:0F:68:6A:1E:50:FD:4F:96
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4e:1a:cb:ed:f7:3c:48:34:fe:d3:18:c0:21:67:10:7e:dd:
4d:13:cb:64:d0:2b:d2:67:21:bd:b9:f7:29:1b:23:39:64:da:
de:7a:d8:f9:7e:80:cc:88:a9:d2:ab:f9:03:79:57:62:b1:3c:
86:6f:6b:2e:83:05:ce:a0:f8:31:c3:28:fe:05:70:8e:5b:86:
ce:2c:9e:c2:20:d7:90:76:45:6c:e6:de:ca:bd:86:c8:a5:0c:
d2:5b:1c:32:a2:0e:e4:42:11:70:65:c2:4e:3b:41:a1:ed:60:
61:a8:80:78:e1:81:4b:f9:5b:be:76:1c:9b:5c:11:88:d5:a3:
81:62:57:44:e4:f0:3d:a4:9c:56:ed:6f:bb:14:72:50:a5:2c:
4f:48:89:08:f9:0b:a6:ce:b3:9f:f9:d8:04:d1:4c:f9:af:f3:
f3:17:e3:b2:0d:41:98:78:1b:d2:0e:19:ba:27:8e:71:40:cf:
60:d7:cd:78:83:b9:4b:12:67:59:b2:64:61:03:11:0a:07:86:
76:14:6c:ca:f2:2e:21:a0:da:20:2b:6d:12:9d:aa:c5:c7:b6:
33:3b:33:c4:3a:c7:c5:57:a0:e9:e1:f5:31:fd:b3:c0:e0:c7:
05:15:fd:41:28:50:ba:65:f6:2e:9d:00:fb:1f:9b:06:4f:83:
3e:b1:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:10 2025 by rpki-client