Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File: Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier: GVnwvigAvmqv31Bbu+vFB6S1d+N/sbj7VfcGRkcaAbI=
Subject key identifier: 1E:F3:35:6F:7C:C2:72:8A:78:12:AF:99:55:76:85:80:F6:1A:9D:FA
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer: /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial: 0194BC72EE01831ACF4A01377E6992BE3B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: VjhaLVRh6buGHI2t77AalquGs217fNSCxmtM/2DMTDQ=)
2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:01:83:1a:cf:4a:01:37:7e:69:92:be:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=1ef3356f7cc2728a7812af9955768580f61a9dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:9b:1b:96:13:00:c4:5d:24:0d:38:bd:db:
ca:b2:c6:61:a4:0c:2e:79:84:3e:50:83:3e:aa:90:
97:33:7c:6f:7e:88:9e:eb:1a:22:82:34:ef:a6:05:
14:6a:d5:7c:f8:22:8e:e6:87:e6:a6:66:3c:c9:25:
bb:c8:31:33:93:c7:c0:ed:f3:4d:e1:66:45:9b:0e:
85:bf:57:e1:68:86:fb:48:02:6d:e4:f8:12:80:23:
0c:7e:c4:85:4a:95:c2:a8:9e:b0:2c:75:e9:66:a9:
f1:5c:63:a5:cc:aa:ce:33:45:3e:b8:b8:3a:7b:b0:
8b:b6:7c:c6:d8:c8:a8:1f:75:aa:4a:3b:81:2b:51:
87:f0:f4:84:8b:e7:7b:39:50:02:25:16:a8:31:31:
8d:52:dd:65:82:39:b3:01:0b:f8:77:78:f0:f9:7d:
b0:82:95:a2:7d:76:c2:67:82:57:86:a5:ce:c3:f1:
e5:dd:79:a2:02:43:22:83:9a:18:7f:72:0b:14:bf:
0d:16:a2:46:02:2d:b7:aa:d2:07:b5:7c:d3:d7:22:
66:83:e7:4c:6a:87:32:23:40:a4:20:27:26:cb:39:
31:f9:bd:f3:97:59:8f:b7:ff:3d:16:6f:09:ed:9b:
a3:d0:7d:1f:f6:5e:c7:6f:13:de:8c:43:94:7e:62:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:35:6F:7C:C2:72:8A:78:12:AF:99:55:76:85:80:F6:1A:9D:FA
X509v3 Authority Key Identifier:
keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:b7:0e:9c:ff:58:da:28:cf:8c:a6:d2:6f:48:ab:e9:df:
5a:ea:a5:fe:fb:b6:40:4a:88:69:94:4a:05:80:5f:09:b3:c4:
2f:5a:27:e3:ce:3d:15:5f:d5:04:20:88:d2:c0:fc:15:67:6f:
72:db:0d:14:7c:39:54:09:f8:32:b1:22:6c:ad:28:a4:0d:5e:
c3:dc:9c:d5:37:bc:9f:28:f8:6b:37:f8:57:ac:1a:9b:90:1a:
5f:07:e3:2b:8e:62:23:1b:b7:1b:f1:22:a3:f3:d5:7f:fc:78:
e0:00:d8:09:6e:65:0c:9a:0d:12:ab:b8:1d:8d:72:35:94:ba:
b2:c1:8e:be:e3:68:d9:f6:3e:4d:71:cb:4a:d1:03:f2:7a:16:
8b:e4:8d:34:21:d5:f5:37:3a:73:b7:28:a8:e9:06:9d:43:db:
9c:0c:23:9a:5e:2e:1c:cc:d8:7e:53:f9:aa:1c:0e:02:b3:73:
af:a4:ff:ec:26:53:10:89:a4:74:2f:4c:d2:6f:e3:5d:30:32:
53:32:de:63:ee:39:42:5e:4f:0f:18:14:c3:7b:53:f1:0e:7f:
7a:72:87:63:54:39:32:13:07:54:e9:5b:49:65:d1:db:5b:4c:
f2:2b:df:b3:d4:56:b9:a2:54:fc:ed:89:4d:3d:d5:3c:ea:08:
fd:3c:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:20 2025 by rpki-client