Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File: G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier: 6uvDmqUB7wyfSYSG2ot9RCF7KPPIvEVIezOGiL1i0p0=
Subject key identifier: 8B:B4:AB:1B:56:B3:BB:B9:3B:E0:6F:AF:64:7D:AB:F1:E5:E3:8A:8A
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 0194BC731408D68856BC70F230213A446298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 13:00:45 +0000
Manifest this update: Fri 31 Jan 2025 13:00:45 +0000
Manifest next update: Sat 01 Feb 2025 13:00:45 +0000
Files and hashes: 1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: XA3YjB4f8YIsAn4+0oNzCfiWTsXNf1GwiBHAR7CoGsk=)
2: qFEtUkLr4nQi6DUVrTeoicfy2VY.roa (hash: bZ6DQ9OOSlz8gvEKlxbaAnXIhdCNGiaES5Fx5X3Jz4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:14:08:d6:88:56:bc:70:f2:30:21:3a:44:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Jan 31 13:00:45 2025 GMT
Not After : Feb 1 13:00:45 2025 GMT
Subject: CN=8bb4ab1b56b3bbb93be06faf647dabf1e5e38a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:b4:ef:0f:cf:28:ed:d8:4b:f3:78:14:84:
28:3f:72:4c:92:38:af:ed:16:3b:ee:38:a9:93:b2:
df:a7:53:b5:ec:c5:a7:20:2b:63:d5:36:f9:70:1d:
22:c3:5b:6f:01:4a:8c:e5:a2:67:37:59:9d:a0:c3:
aa:16:1d:0b:5e:0c:bb:64:f8:ea:ca:fb:23:84:ad:
83:b5:c9:86:0c:d8:7a:e8:3c:b2:5d:31:39:74:5c:
0b:04:b6:15:fb:8c:0b:79:d2:51:f5:42:62:1f:f9:
c8:82:f3:69:b3:ec:04:c6:a7:81:1b:20:c8:ba:df:
64:30:3e:b9:68:99:8e:01:9d:1a:d2:b6:9a:76:e3:
b3:2e:e0:dc:d4:10:e6:f3:3f:3f:23:34:6e:8f:6a:
fb:17:21:14:e1:ce:11:c1:a5:79:c8:23:08:e8:ba:
e2:ce:e9:34:e0:d8:f8:d9:25:c9:8c:11:17:01:d8:
28:a0:4e:0e:dd:6d:a5:4e:e1:d8:77:e4:49:04:f5:
7b:0b:3e:30:0e:be:2b:45:1a:36:57:58:4f:02:c0:
bb:06:f7:3d:6b:df:55:14:a8:69:a6:f9:9c:11:18:
1b:fd:35:92:f6:fe:9b:18:ae:9c:4d:62:33:fc:66:
fc:c6:0a:81:8d:88:ba:da:23:fb:94:00:97:f7:12:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:AB:1B:56:B3:BB:B9:3B:E0:6F:AF:64:7D:AB:F1:E5:E3:8A:8A
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3c:d3:a8:67:6f:ba:ee:c1:0f:94:3f:c4:ed:e6:78:88:c8:
39:ae:36:e2:85:2d:4c:57:53:c3:3e:37:04:c7:7b:87:79:33:
ca:93:0e:a3:66:18:7f:d4:de:16:4c:80:07:79:0a:d1:f9:7e:
e4:ba:73:1c:09:63:d8:e9:b1:4c:5a:4d:6a:e9:62:0f:cc:20:
d8:c3:3a:0d:a0:d9:f3:40:5e:82:37:cd:6c:88:75:b4:94:90:
4b:47:0f:92:09:0c:f0:d0:f7:ea:f8:fa:0c:ce:be:89:bc:ee:
0a:52:54:b7:71:49:b4:01:c2:f8:84:ae:25:46:2a:7c:7c:84:
66:cd:34:16:8a:8e:4a:a5:7a:94:3f:7c:52:4e:65:e6:97:15:
bf:c2:5d:eb:6a:77:76:3b:d7:2a:92:9f:95:ec:39:ac:28:2b:
cc:f6:1c:fa:c3:c8:64:e2:40:72:7f:e2:a0:c3:3f:c7:46:98:
2b:3d:b2:58:da:4f:fc:c7:17:42:05:08:2f:89:c8:8f:6e:89:
dd:0c:93:69:a4:a4:42:ea:0b:ce:06:4c:f3:8a:32:af:ae:04:
cf:43:56:fc:32:33:ba:a8:bb:e5:04:91:e7:85:34:d2:ee:0e:
d3:9b:79:14:9b:ae:28:26:13:b4:2a:00:f6:9a:8c:04:07:55:
17:1d:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client