Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
File: GJPt3vXPw41hPqqBd03jADSxnSI.mft (raw, json)
Hash identifier: kiHjPbIPF01TR0Z98hrQSrnAPrOiUmQFgHDVDOKh0ec=
Subject key identifier: CB:D3:50:69:7A:D6:4F:3C:AB:6D:F5:9F:8B:3C:89:77:C6:5C:CA:E1
Authority key identifier: 18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
Certificate issuer: /CN=1893eddef5cfc38d613eaa81774de30034b19d22
Certificate serial: 0194BCE0705FA9F581F075AAC62B2A3FDF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
Manifest number: 0AEE
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: 7fCLxFxs3uirSoBmBAB2IiaPCDE.roa (hash: coxqqIVz+Sd0ZSUD8QWyHK8rOUGIW44eWb9ORBY27qw=)
2: GJPt3vXPw41hPqqBd03jADSxnSI.crl (hash: kT3648FgzLtUIisgcMbrCIcSLks/oEaJZfhCTb/LRn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:70:5f:a9:f5:81:f0:75:aa:c6:2b:2a:3f:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1893eddef5cfc38d613eaa81774de30034b19d22
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=cbd350697ad64f3cab6df59f8b3c8977c65ccae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:e5:a9:65:82:a5:9d:c7:f5:29:a4:10:ae:
e0:3f:dc:eb:60:53:ba:52:68:f6:95:50:9c:ab:7d:
30:7e:ac:9c:c5:66:13:95:6f:da:72:44:7d:4a:90:
7b:9f:19:0c:43:86:f0:59:d1:2a:27:48:9d:e8:7f:
36:b1:4c:cc:5f:c6:2e:4f:88:12:f9:6b:9b:d0:b7:
48:33:d7:c1:1c:d3:92:aa:3a:32:03:47:5d:60:ed:
f5:8a:d5:de:1c:4c:69:88:b2:c8:e5:3b:b8:54:2f:
cb:f4:2b:2c:e7:ba:a4:fb:e8:92:d7:7d:d8:6e:a7:
5b:ba:f3:9e:24:16:77:5f:7d:bd:e1:26:95:45:ad:
f7:75:d5:a8:10:24:3f:27:bd:ae:1e:f4:87:94:11:
d1:06:b1:e6:66:c2:78:d4:bc:af:d7:29:23:d9:54:
86:2e:34:d5:31:a1:c4:c7:ea:5c:82:f3:37:d5:97:
4a:03:a1:f2:9a:e9:22:5d:6c:b9:56:80:12:40:d7:
df:ac:8a:66:d4:77:db:61:98:55:07:72:2f:37:34:
a9:c9:e4:ea:78:ea:9a:06:56:97:1c:11:fb:2f:3d:
d3:6b:27:82:f1:2d:0e:70:79:e7:7b:7f:5a:6c:ee:
c5:cd:9c:8b:80:a0:23:de:91:23:de:e7:a9:d8:0d:
f3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D3:50:69:7A:D6:4F:3C:AB:6D:F5:9F:8B:3C:89:77:C6:5C:CA:E1
X509v3 Authority Key Identifier:
keyid:18:93:ED:DE:F5:CF:C3:8D:61:3E:AA:81:77:4D:E3:00:34:B1:9D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJPt3vXPw41hPqqBd03jADSxnSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/13f8c5-ab7a-4f37-b2d7-8b51792c6660/1/GJPt3vXPw41hPqqBd03jADSxnSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2c:05:bb:8a:dc:ca:ab:54:b5:1c:54:8d:dc:23:a9:be:62:
f0:c4:66:7c:3e:7a:fd:77:4d:26:07:fe:b5:9d:5c:67:17:c7:
66:a5:3a:c9:94:45:3c:38:b1:fc:b0:eb:41:ed:1d:97:b8:c4:
73:e7:0a:83:df:97:eb:fc:2e:86:37:35:59:e4:d2:09:b6:e2:
a9:9d:b1:d7:37:c6:50:2f:f2:89:b1:6d:46:77:57:02:f7:14:
27:c5:52:56:79:e6:f4:d7:63:5a:df:cc:4a:1e:e8:c0:4e:33:
b1:86:b4:ad:d6:06:5f:15:ff:fa:8d:c7:38:90:7d:d8:8f:2c:
1c:aa:d3:1c:0d:4f:c5:ed:0c:c4:f3:b6:1b:09:64:a3:c1:7a:
a9:b5:b6:80:64:cc:a3:fc:ed:de:9f:71:a7:66:e2:ad:ab:9a:
d2:e2:2d:f5:9b:da:8f:5b:f6:67:d5:58:f3:9f:4e:e3:b9:31:
88:ca:55:45:b5:6f:d7:84:71:b3:5c:aa:54:0d:fd:65:c0:82:
46:9e:70:cf:73:c1:43:2e:a1:80:0c:28:c2:ad:43:09:4c:14:
75:77:5a:e4:4d:8d:54:21:98:df:d8:51:41:44:27:63:3a:4d:
62:c9:7c:f2:fe:e5:77:b3:52:52:d6:cc:b4:1b:8b:02:30:63:
cd:92:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:20 2025 by rpki-client