Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: l/0vZD0mpuitLx80S1G7mzcMcmDimYhWGmYv8r2Pco4=
Subject key identifier: 0B:D8:0B:C2:60:A7:53:6C:9C:02:66:99:58:D5:16:1E:8D:60:32:53
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 0194BC04ABB00B8EC0505563058BF40CE642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: 7l+u401VThITjt4p2hTiajKh1yfjSuyCRJyCLtFqjko=)
2: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (hash: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=)
3: _8ynXS5HiKcYDFRZfIweiLfUiJs.roa (hash: lvqMY1sNj9Il5qS9y4k3F8h0VoCGpDQtuLeu9Ax6iu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:b0:0b:8e:c0:50:55:63:05:8b:f4:0c:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=0bd80bc260a7536c9c02669958d5161e8d603253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:ae:30:4a:aa:2d:2c:59:07:b8:d6:63:3a:
71:8c:4b:da:ac:0b:c5:74:8e:df:e1:da:e5:5d:56:
b5:07:f6:8b:8f:d7:2c:0f:f5:c1:94:c3:0c:a4:7c:
e7:fb:b3:4a:44:14:9a:84:80:1d:d9:54:aa:7d:b5:
df:91:53:ff:7e:13:b7:39:21:5c:da:a9:cd:ae:ec:
eb:a0:51:61:11:3d:66:ce:b8:fa:a6:37:34:4f:ac:
33:9a:dc:17:fd:c3:51:8a:5d:be:fd:7c:4b:08:58:
af:e4:71:ba:76:9b:45:bb:18:f7:b6:33:53:f9:d1:
df:cd:d5:dd:37:85:0c:30:16:89:36:90:1e:75:12:
73:60:05:57:ac:cc:8e:c4:03:63:9f:55:00:47:b6:
25:50:d7:71:e7:71:3f:7b:11:bf:20:56:fd:a2:dc:
4a:17:a1:f1:a0:ad:8c:6f:8c:3c:80:90:d8:3b:4e:
71:6f:27:68:48:3f:2d:5e:36:3e:07:5d:42:fc:31:
81:77:fe:0a:ee:e6:d7:5d:8b:ea:25:c7:1b:49:dc:
c3:b9:0f:d3:3d:44:65:ee:7b:53:57:d3:7c:5c:78:
bc:c2:5d:74:fb:77:eb:08:54:47:01:ab:0f:76:a7:
3b:23:39:7a:66:68:b7:1c:f3:85:5d:90:2a:3c:9b:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:0B:C2:60:A7:53:6C:9C:02:66:99:58:D5:16:1E:8D:60:32:53
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:37:8b:48:53:e4:71:42:be:5f:db:b4:64:c8:8e:a4:25:47:
92:5d:e2:3c:76:d7:0e:79:43:36:e9:9f:8a:9e:95:ad:ce:7d:
7a:84:64:90:74:21:f5:cf:64:24:5f:d1:29:ad:cb:09:e1:05:
4f:d3:00:d2:30:a3:90:ff:a2:42:7b:19:c8:4f:74:a6:6d:84:
3a:8b:e9:e2:4d:4c:9f:75:cc:d3:f8:44:72:c1:18:24:1e:60:
85:62:40:20:50:cb:bb:90:0c:69:5b:b8:aa:65:dd:d1:7c:33:
78:ea:51:fd:4d:4c:71:c1:ab:2f:1d:d8:c0:3c:08:f9:b0:f3:
cf:8d:15:74:12:d4:41:0c:cb:ea:5c:4c:db:46:46:68:25:19:
3a:03:68:bc:e9:35:29:2f:e9:7a:8b:16:15:e9:eb:70:31:1a:
ca:00:c1:88:76:8e:b7:be:1c:2d:a3:4e:8d:e7:da:88:c1:86:
e4:91:e9:75:b5:d0:80:3b:86:36:8c:e3:d1:8a:e6:db:9d:a3:
23:fa:a7:fb:3c:fb:b9:83:64:b4:04:d6:03:c7:89:eb:83:a3:
9e:2c:27:52:2b:1c:80:c5:2d:69:54:b3:13:5a:b4:18:66:20:
9d:99:77:d4:90:5d:52:51:dd:66:6a:94:7e:f7:8a:06:04:36:
df:c5:54:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client