Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: UetfpTOl+cA0uuN46sFr+zAFpoUI7+eLQpts+Qql9rI=
Subject key identifier: C8:C8:AE:D8:90:21:D2:A1:30:05:02:7D:2F:C7:B5:BE:B5:7F:14:56
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 0194BD85B6CE23DCC9738EB79B22C76700ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 0D64
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: np3j2ZyonUP/D4bHHR8iAGLaKr6s7kiTc99Aze3O6p4=)
2: cpGnORo3FcHj_TQuxkaI5d8-w2U.roa (hash: hr4lcfbe0GAfc4/2SJSUkjFlt5FSFur5fxO2G8Z/U5w=)
3: yCCi69gLNcXK21OeYiQEc0dJYb0.roa (hash: LUDNYecqqadlSSLSMwizFinS+Qyhum1Iomno4/Dzf7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:ce:23:dc:c9:73:8e:b7:9b:22:c7:67:00:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=c8c8aed89021d2a13005027d2fc7b5beb57f1456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:8a:21:b6:ae:1d:9f:f5:fa:b0:58:61:a3:
92:8f:d0:ef:c2:40:8d:ca:2b:5a:3b:88:ba:c6:d3:
f6:f4:e2:4f:ad:5a:50:eb:a0:c9:60:a3:14:ba:93:
fa:5a:59:dc:9f:0a:91:96:bf:cd:10:19:e7:45:81:
05:34:25:ea:6e:94:74:2a:9e:eb:18:97:78:51:74:
c9:2c:23:63:79:a9:56:e7:ee:17:1d:a7:2e:a6:bd:
05:a1:d1:4b:cd:43:b7:7e:6f:fe:ca:da:85:b4:ef:
3d:21:c5:5c:34:3e:3a:75:c4:30:d6:fe:c8:e3:84:
14:9a:0b:72:c0:bd:6e:e2:ca:7d:fd:a4:33:c6:1b:
b2:0d:1d:97:36:80:5e:b1:25:b1:8d:f2:e6:13:f1:
c1:18:df:85:a0:dc:4d:9e:5c:ac:47:2c:d4:db:b8:
13:ea:5a:3d:de:dd:88:d2:52:8b:b5:2d:3a:62:9f:
c7:e5:f6:25:bc:17:d0:27:e9:68:7f:2c:67:32:63:
70:eb:c5:3a:91:08:0a:61:f9:f9:53:53:12:58:a6:
a6:8f:2f:e0:98:9b:98:3e:77:60:73:4a:9b:63:ba:
b4:29:c1:94:31:bc:ec:bb:82:0c:f0:78:56:43:90:
80:e6:d9:17:e8:c9:0d:a6:e2:78:81:0c:30:fd:73:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:AE:D8:90:21:D2:A1:30:05:02:7D:2F:C7:B5:BE:B5:7F:14:56
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:fe:21:19:97:8e:63:40:d4:91:e9:7e:f4:6e:49:c5:05:
28:34:99:76:27:f4:53:21:ba:d4:0a:91:7a:5c:d3:ea:f2:69:
6c:c9:b6:7c:e6:37:96:c9:80:99:a6:05:bd:d0:98:56:b6:d2:
60:da:65:49:ba:67:1e:15:a3:30:d5:1f:08:50:a6:3a:88:82:
b6:bd:b8:3d:71:f5:af:5d:1f:85:4b:9b:a7:0a:ab:d7:75:45:
b9:43:a6:3f:48:8b:73:a7:dc:fd:87:9f:8f:75:52:a8:25:e3:
50:e8:69:ae:f7:a5:09:01:59:37:c6:11:c5:48:b3:8d:2d:bf:
24:55:2b:1e:33:8e:22:bd:94:3d:9a:23:82:a5:b4:a7:e0:df:
44:f2:b1:f9:19:fa:43:2c:98:75:87:18:8a:c2:d8:b1:51:69:
1b:5c:37:60:6d:5c:8f:be:1b:fa:22:e9:5d:9a:9b:7c:ac:5d:
86:dc:c7:e7:8c:18:28:dc:29:04:e5:2f:09:0b:4f:92:86:e1:
52:dc:ba:08:6f:b5:da:72:fa:79:d9:c7:00:60:a2:ce:0f:b8:
69:00:fb:6e:1b:9c:65:28:59:af:b4:c6:c4:b8:cf:07:27:6c:
cf:50:8c:22:c1:51:b5:a4:72:29:49:32:50:5c:f8:ee:d0:1e:
9d:aa:3b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:16 2025 by rpki-client