Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File: GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier: lxntjoRZqqps3X4+XbQIo+otNDosWHtxLMmwc9ENm0Q=
Subject key identifier: 18:B1:B0:C9:2A:14:A9:E9:F2:F7:4F:AC:5B:52:39:50:0A:9A:A0:E9
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer: /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial: 0194BC3C3FC3C44110727E981CF112E67B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number: 0779
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: X6TvTAi9yFNA3Gvm6RhgFxaYDS1M27XC7KxwscACzGQ=)
2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:c3:c4:41:10:72:7e:98:1c:f1:12:e6:7b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=18b1b0c92a14a9e9f2f74fac5b5239500a9aa0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:a1:2f:eb:6e:ea:f7:ff:46:84:ac:55:40:
ad:4c:50:e2:73:39:a2:f4:d8:c9:92:45:29:d2:8f:
f9:e9:f6:4d:61:b1:75:b0:e7:fb:28:23:c6:20:31:
2d:75:b0:c2:02:9e:0d:d4:7c:3e:a6:8b:38:96:6e:
b5:bd:e2:4d:ae:7b:7a:fb:19:81:dc:25:6f:23:f0:
f3:1d:d6:33:e3:92:97:44:93:48:ce:4e:3d:7a:54:
7e:54:71:ba:96:7e:43:78:19:c7:5a:11:a8:d6:1e:
7f:ad:25:18:87:1f:d1:91:6a:e1:c5:e1:ef:2b:80:
71:53:28:6a:32:27:bd:a2:9d:88:17:f1:1e:3d:63:
0f:92:cb:4f:c6:74:6e:c8:2b:67:e8:bd:cf:d4:c1:
54:19:e7:b9:7e:9f:f1:3e:92:41:fe:14:b3:58:a1:
ad:0c:6b:19:70:b9:ed:79:03:c9:3f:5e:33:b7:cf:
39:74:3e:be:70:7d:f0:59:0c:73:a8:55:ff:54:62:
e2:a7:b9:b6:6a:cd:76:e4:0d:0c:57:19:dd:28:72:
e2:1f:42:f0:b4:03:e7:4f:6b:c6:4e:ab:aa:51:3e:
aa:62:8e:87:a0:c1:ce:57:0e:a5:bc:80:e4:20:20:
dc:94:49:cc:be:5c:a5:e8:eb:f4:79:fd:0b:24:72:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:B0:C9:2A:14:A9:E9:F2:F7:4F:AC:5B:52:39:50:0A:9A:A0:E9
X509v3 Authority Key Identifier:
keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:c3:a5:e1:a5:cd:30:e2:17:af:46:f3:02:72:22:12:96:
c0:58:ff:bf:07:ba:70:7e:9c:87:77:ab:62:f0:e4:97:df:19:
c7:67:6c:2d:47:51:e0:4a:51:16:3c:0c:96:01:f9:cd:e0:73:
da:27:a7:f6:ff:59:ee:16:3f:a1:b5:d5:fc:da:f0:27:4d:42:
fa:de:c2:63:24:b6:66:f1:23:02:d3:92:22:09:bf:bf:2e:7e:
27:37:87:4d:ff:d2:9d:db:07:97:45:c4:32:1c:05:8d:7c:08:
bb:bd:91:4e:6e:d0:9c:aa:f7:01:4e:96:b1:3f:4b:52:b3:bd:
af:e9:b8:92:58:a7:83:f4:aa:e1:11:e4:0a:dd:2a:b4:25:9b:
22:24:ae:16:71:fe:d5:b3:5d:5c:0f:7d:87:dc:f3:98:97:0a:
07:c9:49:af:97:66:45:00:27:b3:d7:de:1f:d3:79:84:64:86:
82:c4:6f:a1:a9:be:0b:36:85:3e:66:e8:b3:0c:8d:14:52:08:
a0:fd:5e:bb:46:4a:73:24:c7:f2:8e:7b:f2:74:b4:2d:aa:d5:
d9:90:11:88:43:78:dd:71:93:77:1f:c6:8d:69:8a:f7:18:43:
ae:1e:f9:61:12:6a:4a:8a:ae:e9:d9:fa:2b:c0:84:7c:75:ed:
10:0a:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:30:40 2025 by rpki-client