Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
File: 1GbRcMgQujTELpIOhNQmKEWXf4U.mft (raw, json)
Hash identifier: 1R4cVS/LJ5K0dcPkORO+G+5Rt2WxQuVX5VZV0/KgcVQ=
Subject key identifier: 5D:5A:AC:40:AC:BD:4B:CF:5A:1A:24:32:A3:D0:5F:44:DE:C9:AF:05
Authority key identifier: D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
Certificate issuer: /CN=d466d170c810ba34c42e920e84d4262845977f85
Certificate serial: 0194BD85340F58891D8DFFE5752DCBD09812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
Manifest number: 033E
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 1GbRcMgQujTELpIOhNQmKEWXf4U.crl (hash: /+AvS5fnPPDJeXBHbs6d0Vv1WQF67hBz6trgQ5i1DmA=)
2: r0qME3D6vnHPgW7FfIJR7qyiR6U.roa (hash: +N7ZuBvhriEjaq14DPYwTSmD1pr2ezeFoDJODymMVSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:0f:58:89:1d:8d:ff:e5:75:2d:cb:d0:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d466d170c810ba34c42e920e84d4262845977f85
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=5d5aac40acbd4bcf5a1a2432a3d05f44dec9af05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:38:94:7a:d1:03:34:d2:d9:70:4f:e5:f8:
7a:30:85:b9:2e:b9:e3:78:04:e6:be:8d:79:3b:21:
eb:a3:2b:3d:3e:27:ff:68:a5:8d:01:94:90:88:ba:
66:47:68:40:1d:b8:76:17:f3:0c:c4:db:60:29:02:
97:99:81:de:5e:f0:df:11:6f:3b:85:99:1e:6e:17:
76:90:77:a6:5b:4e:41:cd:d2:ec:d2:26:de:cb:50:
dc:89:16:8c:1f:94:54:1a:93:4b:f7:68:dc:ec:d9:
87:48:a9:75:11:c2:81:e2:1f:bf:6f:72:44:d9:8d:
6a:38:b4:37:bb:9d:8c:10:d6:69:a3:aa:2e:ef:72:
76:21:d8:56:9e:45:4c:2f:85:33:f6:71:a4:d2:63:
40:39:0c:3b:e6:38:4b:66:4f:7c:2e:40:f9:57:e0:
53:a5:b9:48:e6:85:1a:3d:9b:21:5e:19:dd:85:04:
35:d1:e0:d1:11:27:ec:e0:8f:84:1f:80:54:01:c3:
2a:d0:2d:cd:c7:15:d7:9b:b8:f1:a3:db:80:61:19:
99:02:e9:80:7e:44:94:c4:31:99:00:be:6d:2d:eb:
62:f4:6e:1a:c8:a0:ee:99:4a:d7:74:7b:18:d4:9b:
9f:7a:34:ed:3f:5a:70:ed:f2:1e:50:80:fe:17:67:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:AC:40:AC:BD:4B:CF:5A:1A:24:32:A3:D0:5F:44:DE:C9:AF:05
X509v3 Authority Key Identifier:
keyid:D4:66:D1:70:C8:10:BA:34:C4:2E:92:0E:84:D4:26:28:45:97:7F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GbRcMgQujTELpIOhNQmKEWXf4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2306f6-6cc0-4982-a523-16842bdad925/1/1GbRcMgQujTELpIOhNQmKEWXf4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e2:f3:14:51:e7:04:3e:6d:c5:79:ff:1e:f7:ea:b2:3c:56:
65:9e:09:96:39:47:55:7e:05:b2:87:ca:ce:fc:81:dc:20:0b:
f5:53:8e:65:36:ba:3c:d5:4b:07:64:ac:b2:ab:66:01:a9:af:
94:86:8f:24:f3:35:88:9b:b7:41:b8:ea:80:31:9d:7d:45:74:
57:2d:99:bf:85:5d:ed:e3:45:50:72:dc:36:a6:19:f8:90:58:
4d:4a:9b:00:70:e4:71:49:4d:6a:4f:29:35:08:3b:88:a8:02:
86:67:ff:aa:47:da:0e:a0:b2:7f:4b:5a:d9:2a:e2:0d:c5:45:
0c:f5:24:42:27:ea:2e:4d:40:89:71:82:64:ee:17:a1:b7:d4:
2f:45:c6:e7:78:d7:11:d2:f4:0b:9f:fc:00:ca:40:cd:ec:85:
e8:55:a7:82:c8:43:18:8a:47:aa:78:10:8d:a8:8b:63:76:98:
9d:f2:7d:0c:42:64:45:5f:d7:fa:e1:09:1c:17:7e:12:8e:81:
d7:32:9b:c8:a7:81:c5:71:c6:88:29:31:c5:2a:e8:06:59:f0:
65:b6:94:51:ae:15:8e:1d:31:96:37:bd:6d:59:92:e4:80:ac:
2d:fa:d6:9b:e2:d8:e2:44:c5:3a:a4:4e:20:16:2d:e8:84:41:
e2:8a:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:05 2025 by rpki-client