Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File: GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier: YZsU6SIYcrCJfdYeniBcb/6sLIggV4tfu29csDGejCU=
Subject key identifier: 5C:D6:0D:65:BB:71:AC:75:84:2B:74:CF:CA:E4:A6:12:FA:6F:6D:24
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer: /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial: 0194BD858FCAF86C040C2889AFE18C631665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number: 031F
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: ZXV9onqXEM8E1VEM7xNUDfdqanzTNvi0oLZ6L8+zEUc=)
3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:ca:f8:6c:04:0c:28:89:af:e1:8c:63:16:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=5cd60d65bb71ac75842b74cfcae4a612fa6f6d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:46:10:97:89:b1:05:19:4b:aa:9c:88:df:
c0:7c:c1:71:e3:ca:78:07:46:d6:1d:65:ed:a0:ca:
c2:6b:64:94:4f:73:34:4b:7f:ca:c7:d3:7f:e0:ad:
5c:d5:aa:5e:ba:a5:97:4c:a8:cd:5c:0c:4d:63:45:
ef:47:fd:da:47:e7:f4:60:2a:f4:90:3d:73:a6:ab:
02:9d:2f:cb:c4:7e:16:d0:0f:cf:b0:c2:96:39:c9:
80:07:aa:8c:11:a8:e5:a7:0c:af:44:ce:d5:ca:50:
a7:ce:2c:7f:c7:a4:50:ec:14:82:d8:aa:c5:71:5c:
8f:fb:43:ff:9b:7a:ad:7b:85:36:4f:4f:db:ee:f0:
1f:7b:9f:69:89:79:70:d7:b0:89:8d:1e:52:49:1b:
3f:5a:d6:92:21:7c:8b:94:d3:53:72:55:a1:eb:5f:
14:17:0f:80:b7:58:22:7d:44:af:d0:ff:84:5a:3d:
a7:0f:92:b4:b5:16:80:8d:9d:f4:88:59:9f:d7:64:
10:5e:b5:53:81:6f:04:f4:d7:8f:bd:66:c5:fa:1e:
82:d2:b0:9e:57:8d:7f:50:6e:14:e6:d8:7e:f0:93:
aa:13:76:9f:17:76:9d:d6:2c:9b:69:db:23:1f:7f:
8b:4d:5c:a6:87:58:a7:23:3a:1b:e8:21:40:78:e1:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:0D:65:BB:71:AC:75:84:2B:74:CF:CA:E4:A6:12:FA:6F:6D:24
X509v3 Authority Key Identifier:
keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:94:40:ad:60:13:b1:0e:b2:dc:9f:eb:c7:22:84:95:5c:ed:
19:bd:24:af:4f:a1:a0:89:9a:88:6d:7d:89:56:35:c2:c6:98:
e6:3b:f5:e6:ba:15:93:5a:47:05:72:56:be:c4:1d:2c:25:31:
66:5f:6f:28:7b:e7:21:53:ab:dc:3a:24:55:dc:3b:16:b4:f2:
d7:27:b0:9f:1b:f8:08:c7:cc:48:11:04:40:02:75:6e:81:6c:
ab:0a:ef:9e:13:cb:d6:fd:a5:5e:c6:1f:41:2d:17:3d:a4:92:
d0:5c:99:0f:fa:75:10:7b:e7:ca:df:57:af:86:6d:97:b1:13:
83:f3:f8:09:43:d1:1a:b3:d9:ab:d3:27:d5:bc:58:08:b6:6d:
db:49:ef:1e:3b:a6:8b:37:f4:3e:74:09:02:ff:18:e5:e8:cc:
fe:c3:e0:0d:29:ca:d9:4c:61:1d:26:1d:34:4c:f4:10:70:53:
60:29:97:80:7f:82:25:69:55:b3:b5:32:ea:e9:d7:9e:17:d8:
42:c7:e2:04:33:3b:33:c4:20:6d:07:81:99:07:74:03:6c:e1:
a3:7a:08:61:9a:a6:f1:ca:6a:aa:6e:d3:bc:7d:45:da:00:6b:
0d:0a:be:26:8a:65:26:73:ac:27:4e:95:29:c5:2b:13:6f:23:
93:51:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client