Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
File: gREA7ka_Z6hJXo01Y1aWao0vfmU.mft (raw, json)
Hash identifier: MXQERZIn73x0RoeZtS6qHsgX40o9+ICr8TfdHNoT78s=
Subject key identifier: C6:79:F5:80:3D:01:D2:18:2E:7A:6E:00:7A:EC:3F:63:72:B5:6D:C9
Authority key identifier: 81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
Certificate issuer: /CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Certificate serial: 0194BC3BD0C1EAA08D560FF3E7495BD4412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
Manifest number: 0CBF
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: EJMKvBCdw2_MsOq9C37gE8bMZd8.roa (hash: MMz57/tmiMn7pJo6P4gKh53NgUstZu29pckuqCa8kQs=)
2: gREA7ka_Z6hJXo01Y1aWao0vfmU.crl (hash: yge3algyvmC/DvLteDcXzOZv8RI0duwmXWVj+FO4lzg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:c1:ea:a0:8d:56:0f:f3:e7:49:5b:d4:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=c679f5803d01d2182e7a6e007aec3f6372b56dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:f5:f2:71:28:80:67:91:05:13:f6:88:a3:
88:57:27:0d:07:4e:56:aa:6d:57:45:5e:e4:0c:7b:
a1:f7:1f:27:60:94:ea:48:79:2b:fa:e9:ba:58:ca:
ff:e8:ce:04:72:0d:2e:6b:b4:8b:d7:65:cb:e7:4c:
4a:e0:5e:e4:be:01:a3:93:5a:37:5b:a6:a2:25:0d:
ca:c0:1b:11:53:17:ba:72:0c:6e:c4:c4:97:98:24:
a8:06:c5:88:81:e4:1b:ee:b4:45:b1:e0:60:e9:41:
50:15:7a:af:3c:53:29:15:19:85:a6:39:73:0f:e4:
cd:b7:e0:8b:40:10:00:aa:c3:0e:5b:44:04:87:f4:
56:4f:84:72:cf:9f:97:38:05:b2:cb:0b:34:3c:d0:
44:01:30:3e:92:18:15:8c:58:b6:ad:04:e7:82:32:
e7:95:ba:bf:fc:c0:d9:9e:93:9a:d1:83:b0:7b:e3:
eb:7b:e7:3a:75:37:3a:08:1b:7e:5c:43:4d:46:28:
e6:86:8b:00:02:5a:c0:c4:0b:d5:d8:fe:cf:cf:a5:
f3:ad:e1:1c:62:ca:28:f8:fb:cc:5f:1d:b8:69:fa:
23:92:cc:5a:83:33:84:2f:72:d5:90:42:83:4a:4b:
cb:3b:49:1a:e1:70:77:12:2a:5b:81:67:c2:b9:66:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:79:F5:80:3D:01:D2:18:2E:7A:6E:00:7A:EC:3F:63:72:B5:6D:C9
X509v3 Authority Key Identifier:
keyid:81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:22:7d:6b:b2:b5:17:b3:0a:c0:25:89:be:0f:e7:10:df:
8b:9d:4b:29:f7:dd:32:41:29:8b:59:4e:e4:0f:4d:b7:76:df:
00:72:1c:90:7b:37:e6:74:5f:e7:5b:d2:b5:97:f1:f1:35:c0:
c7:68:21:77:ba:6e:f4:95:f8:69:8d:a2:38:9c:74:bc:07:22:
c6:29:17:2c:a2:e8:d0:f6:cd:38:97:7c:94:cf:73:dd:61:36:
32:a0:65:4f:ae:f3:ea:0a:95:c5:63:f7:b2:8e:2a:54:6c:92:
c5:3f:f2:ad:92:cb:e1:f3:eb:e3:a9:0d:7a:2a:11:64:ae:9c:
09:b5:54:3a:6b:73:68:b3:0f:82:0e:6d:21:eb:0d:46:d4:be:
5f:71:13:23:f4:c8:6a:bf:56:a3:b4:cb:6d:c6:f6:8c:39:13:
47:13:8d:46:f0:7b:09:ae:c1:17:4a:f0:7d:19:6d:28:a9:84:
7e:db:4c:b9:76:29:2d:7b:50:f6:43:cb:31:ce:48:d6:33:d2:
1c:08:72:68:4b:f2:dc:96:d5:bc:1c:5c:d9:e5:1f:d3:65:7f:
ae:cc:be:59:17:1e:13:93:96:3b:db:54:c7:48:73:13:0a:6a:
e5:71:04:a7:9d:cd:82:7b:9e:46:24:2b:21:5f:11:16:c0:e0:
2e:b2:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:38 2025 by rpki-client