Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: X2wb1YSFrlxPWW2R/F0GlZIarGziARO7MKGf+ujm7tk=
Subject key identifier: 84:37:9F:2E:BC:B4:BF:BB:71:D5:4E:29:9E:41:04:9E:8C:76:0C:E2
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 0194BC73356BD0EAB0E1E0DFD7EA19404DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 02E0
Signing time: Fri 31 Jan 2025 13:00:54 +0000
Manifest this update: Fri 31 Jan 2025 13:00:54 +0000
Manifest next update: Sat 01 Feb 2025 13:00:54 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: GvlkLYltkHwOlCVN+X7J8BIC4Wrm+wTZou0BBBLWuV4=)
2: k02QcG8B4HSGVIzggl85ez-tDVQ.roa (hash: loPe1/hoA8ZxsL9K2b2kupfSlUPsyhzRcqqy4hptqEI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:35:6b:d0:ea:b0:e1:e0:df:d7:ea:19:40:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Jan 31 13:00:54 2025 GMT
Not After : Feb 1 13:00:54 2025 GMT
Subject: CN=84379f2ebcb4bfbb71d54e299e41049e8c760ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b7:d9:29:3f:a7:52:bb:4c:a5:b4:c4:80:e2:
30:16:76:97:4b:12:7e:86:52:a0:19:f3:f8:3e:08:
db:69:25:b0:7f:79:44:ce:ec:a6:d8:f5:b5:fe:af:
13:b0:b1:08:d1:ca:a9:32:22:c3:32:ce:fc:8f:3e:
f5:76:14:37:4f:6c:91:e4:79:62:fc:f8:30:59:7f:
f8:95:e0:ed:0f:c0:4d:b1:66:0e:44:79:7b:34:e1:
70:7f:45:3d:19:5a:7c:27:1b:97:01:6a:ad:7e:17:
d3:81:0a:21:d0:d3:6c:2d:ca:d4:0b:38:4c:8b:7a:
e6:02:43:cf:0b:c9:01:8a:70:c5:86:f7:4b:54:c8:
2e:a9:61:48:d5:19:f1:4a:96:78:d6:b5:88:ce:b6:
02:c4:ce:dd:88:17:3a:0b:dc:ff:f5:a6:38:67:96:
81:b7:c2:e2:99:35:52:ee:a2:51:b4:f4:b7:65:9f:
c7:7b:a4:ad:40:43:74:97:be:da:db:69:6f:92:02:
f4:f8:07:84:03:2e:28:7c:4b:96:74:1b:58:cb:52:
eb:95:db:dc:6c:55:10:dc:d3:60:3d:75:19:09:59:
58:df:39:84:41:50:c6:13:a8:45:fd:22:df:8c:ce:
db:54:4b:58:f6:77:cd:14:0a:f4:90:85:46:77:5d:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:37:9F:2E:BC:B4:BF:BB:71:D5:4E:29:9E:41:04:9E:8C:76:0C:E2
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4d:ad:93:82:f2:dd:53:05:af:44:8d:a1:26:a5:46:8f:13:
ea:cb:6b:f0:6f:3d:25:8b:a1:72:c3:88:af:27:3b:50:a9:5b:
6c:1b:af:bd:98:0e:d5:f8:92:49:5e:ee:1b:29:9e:c4:29:07:
56:4f:e4:44:18:af:13:02:94:18:7c:6a:43:a6:11:04:06:59:
ea:aa:a9:c1:c2:f1:a9:8b:c2:de:64:40:da:eb:20:9c:52:a7:
0d:8c:3d:ea:eb:13:be:f0:a7:c5:18:d3:be:7b:d4:69:1d:70:
b2:a4:ea:b9:a6:88:af:63:92:be:b2:10:c6:52:94:4b:4f:b2:
9d:75:8b:a8:af:40:7e:7d:04:f3:40:c2:0d:21:63:a1:f0:92:
b7:ae:ac:fb:1d:5b:a0:ae:de:f5:bd:d5:fc:40:f7:e8:ff:f6:
c3:d0:56:38:af:bb:db:8d:af:13:08:34:00:b5:52:67:70:7c:
f7:6f:b4:18:6d:18:b5:46:ed:1d:dd:bb:e3:f6:f1:35:a7:9b:
2f:99:6e:67:6f:e8:ae:29:a3:40:31:83:ca:4a:13:f1:20:6a:
79:8e:c1:61:4c:02:de:fc:00:c6:f3:6d:46:fc:8a:d7:de:55:
32:ef:aa:20:4a:cf:02:7d:2a:90:76:72:07:bc:7a:83:06:18:
c2:6e:03:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client