Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: 4l8zkMayXBgFvwuCcMjMzWblpX38LDtuG40y8R1DQw4=
Subject key identifier: EE:12:E3:E2:AD:83:B6:D4:FD:6E:DE:69:9D:90:65:5B:A0:5C:94:9B
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 0194BCA9E1F6D6D3420C8FE6CF3A55837916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1158
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: Dw0gssdPltQDzKq8CAKPD0QBYc0NY1CzHm4geCB5xAo=)
2: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:f6:d6:d3:42:0c:8f:e6:cf:3a:55:83:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=ee12e3e2ad83b6d4fd6ede699d90655ba05c949b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:c5:b8:54:14:d7:d6:b3:97:a7:e2:8a:68:
94:c2:5a:7c:dc:c6:87:99:37:51:ae:8f:da:af:bb:
71:da:ac:e0:84:97:22:1c:c3:04:67:21:5d:81:49:
94:5c:ab:d0:4c:69:53:a2:ba:04:6e:34:49:7b:d8:
97:a6:33:60:94:1f:1c:68:c5:84:f7:1d:73:ec:cf:
f3:b4:17:a5:c3:c1:bf:6f:44:68:52:c9:86:29:9a:
eb:a3:f5:b1:dc:30:01:99:78:c3:ed:2c:b2:08:a5:
e7:02:7f:13:af:40:2b:5e:84:21:bc:7d:b2:df:c2:
3a:a9:9a:b2:d4:2d:f0:f9:eb:57:0a:d8:08:50:58:
81:b8:78:6e:98:f5:cb:1f:13:b5:8a:91:fd:67:b7:
2c:f8:ef:60:bf:7e:a3:28:e3:b4:43:c5:29:97:43:
ab:0b:c0:af:6d:bf:23:e7:23:de:d9:f7:89:d3:1a:
76:90:f7:b2:eb:5f:be:eb:84:7e:2d:fb:dc:d1:01:
27:e4:8c:97:ba:fb:5f:08:99:a4:d1:af:f3:36:2f:
b6:75:c6:2f:1a:65:49:db:0a:19:c6:ba:df:10:29:
18:b5:a1:de:64:12:72:09:21:63:37:a5:41:62:d3:
05:0e:d0:fa:8f:62:42:4a:c0:c2:16:62:02:ed:a1:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:E3:E2:AD:83:B6:D4:FD:6E:DE:69:9D:90:65:5B:A0:5C:94:9B
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:95:b1:82:eb:42:76:b8:d7:f3:77:1f:cd:11:e6:ad:12:c6:
e3:88:1c:79:5d:b0:f1:d6:54:52:63:bf:36:ac:49:9b:b7:2f:
9f:58:fa:86:16:e1:14:29:48:95:c7:7f:88:19:8f:02:26:93:
51:8b:cd:7b:ea:b3:30:12:e4:9a:42:e2:0e:3d:b5:e7:f2:ac:
2f:8e:72:29:40:f1:34:d8:ef:f9:d4:2b:a3:e1:51:bb:f9:62:
91:af:80:1e:e9:76:9f:d5:5d:c3:85:23:25:c8:4c:61:e3:71:
96:a4:b3:ff:4b:b1:ee:65:65:27:3e:da:16:bf:26:51:2f:38:
33:bd:0a:37:75:60:ab:55:13:3d:fb:1d:1f:dd:47:e0:04:27:
e7:cb:40:98:57:9e:c7:48:af:d6:66:ef:f9:a1:a1:29:5a:5b:
e1:62:d3:90:04:51:20:8d:af:b4:fe:01:e4:aa:2e:d5:ed:52:
ed:ca:f8:7e:df:39:f7:f7:fd:61:d9:16:86:f0:d5:ef:ad:f8:
96:0e:e7:e1:e1:83:e7:e1:da:49:ca:01:24:09:2e:5f:8c:73:
6f:be:b2:1f:3b:c3:9a:51:e4:08:87:df:d0:cd:aa:ac:a0:cf:
ef:7a:2f:3b:b6:e5:3b:7d:dd:ef:12:c1:bc:a7:85:c8:a0:b2:
d4:4a:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:50 2025 by rpki-client