Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File: Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier: T8XewJs2An3mq5tHyUwL19TTINZHmdPvnD7BhGIWdFk=
Subject key identifier: C8:42:AE:E8:34:6E:E1:B6:1B:A9:5C:1A:4E:58:03:AC:A2:3C:A6:F1
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 0194BC3C87A4DEC358D7DDBCA7C3F33D7354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: FPpOTBKmvHdioInyAceH2PiTSvg.roa (hash: 7KPVyyz4s0tMlqQlKNiyZSMIJyFa//iS/eNcNHIUsks=)
2: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: rqA8BGD5sb8BlMEiUEo5ZXEJsQyQ201ijslKKY6YgAE=)
3: YUvzYRFbDZwpo5_LDw6OQYXrOWU.roa (hash: A9tNEkwBv00N9f8wPpHIeu7SSAIiBzAHZmfokT+2re4=)
4: fbMdnuR0es_HjgTaYkDoz6AE4eQ.roa (hash: b27haQtyNO61SdNpnuLEVI2t6aVsy/NGgbKBT4i0JIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:a4:de:c3:58:d7:dd:bc:a7:c3:f3:3d:73:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=c842aee8346ee1b61ba95c1a4e5803aca23ca6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:53:61:47:d2:d8:c9:ec:7c:be:50:95:97:
7e:71:6a:41:82:4f:de:d4:88:4d:e3:40:3c:74:d0:
4d:69:c7:66:f3:3d:3e:d0:94:79:4e:30:d8:24:42:
05:67:de:ca:d9:d8:75:a3:87:14:ba:99:56:11:53:
4c:ab:11:a6:4d:7d:35:9a:44:1f:2f:9a:6e:6b:ff:
7f:23:58:0c:ab:20:3e:f1:a9:f2:3f:ba:da:1c:25:
ea:aa:5a:7b:91:83:b1:79:58:a1:f6:a3:5a:f1:41:
71:d8:8a:5e:64:3a:c9:00:40:8c:3f:7f:fe:03:b6:
e0:6e:6a:25:fc:f9:04:48:ce:15:77:17:c2:fb:2d:
29:6e:48:01:25:dc:83:4c:04:2c:1c:00:7e:f5:1d:
90:38:ac:5a:a4:5e:f9:c3:63:35:f4:fa:87:0d:f7:
2c:b7:2b:b2:ca:82:be:ec:a7:27:fc:56:39:b3:a2:
f6:fd:1b:ba:60:8c:00:dc:f7:0e:35:1d:9d:bc:3d:
28:d0:9c:b2:71:09:06:9b:df:4f:f2:9b:0a:f8:9c:
f0:da:10:18:5b:bb:dc:88:4b:1c:6c:2a:fc:cc:c0:
23:2e:5b:74:7e:f5:a5:c3:96:b0:b8:23:10:a1:1d:
cf:a2:fa:51:d6:ee:20:54:a0:2f:39:6a:e2:63:7b:
75:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:AE:E8:34:6E:E1:B6:1B:A9:5C:1A:4E:58:03:AC:A2:3C:A6:F1
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:33:62:43:03:aa:0c:7e:45:cd:46:23:cc:cc:a8:43:d5:cc:
a0:62:8e:c9:1e:66:77:9b:24:e1:9b:84:23:fc:ef:0b:f2:c4:
37:2f:4f:c1:2d:c7:8c:0c:f0:c4:3c:40:9b:77:37:a6:40:5b:
c0:06:fd:42:b1:50:eb:c7:af:46:ec:07:a8:97:0d:ce:83:ac:
5c:07:f9:47:7d:36:fc:92:09:16:30:e2:b1:36:dd:14:7c:b4:
74:e9:7b:cb:6a:77:d6:d8:38:99:3e:d4:57:9c:81:60:90:a7:
7c:db:16:8c:53:b5:c7:44:d7:b0:94:26:09:c8:4d:5b:d9:dc:
85:47:cd:f7:5a:54:15:7d:10:42:ff:15:4e:2e:5c:a7:b7:22:
54:89:b0:b6:08:98:8d:da:1b:7c:36:d9:09:db:60:a6:41:e3:
ed:f7:00:d2:d1:51:8a:aa:55:f1:d9:82:d4:2f:1e:c9:0a:ff:
17:ae:59:fc:5d:3c:44:d3:e1:8d:35:8c:f3:f6:d7:15:08:c1:
fc:23:81:af:32:22:fb:5b:aa:69:f7:79:9b:53:8b:ae:0d:0e:
ef:7e:95:c1:e4:80:37:14:be:09:96:aa:39:2f:4f:59:41:54:
86:8c:c5:f7:01:59:fd:27:d8:ba:d0:50:c4:6d:50:64:14:94:
0a:ae:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:47 2025 by rpki-client