Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: Jlu9QnPVBMdnQJdq8meDEdmqNKHwp5zSwEbRyCypNfM=
Subject key identifier: 7E:E6:C6:A4:9C:6E:0F:07:A4:FF:4C:F8:D7:B2:45:70:27:46:DE:C7
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 0194BD4E85AC035739EED08B04C2AFC3C8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 03EB
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 8a65sLJcMpTKTXM1KK1QaGfwWng.roa (hash: AQSp0mg8gXMxn9jS/ccqb4ZFNGKHjoQo9RopDCtq2JU=)
2: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: iy/3U/uOsAvAXkpYO+g8T+ceGLoTYvhNYlV12Abxy/I=)
3: UXTqM7OJZrCNMf_WXfbtOToQRAk.roa (hash: mzfOsI6oNfEpkOHOqiggoPrJ5JkezNl8t7J1lOi2apE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:ac:03:57:39:ee:d0:8b:04:c2:af:c3:c8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=7ee6c6a49c6e0f07a4ff4cf8d7b245702746dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:3e:23:2e:30:64:78:20:e1:cb:c1:b6:6b:
dd:88:1d:a2:62:34:7c:c8:6d:f8:f0:71:73:f1:5d:
e3:5f:70:41:53:d4:e5:a0:5c:a9:1e:f3:44:89:84:
fc:91:4c:b3:63:df:6a:1c:ec:2e:67:93:a0:74:a8:
31:82:11:f4:cf:c4:37:11:20:17:ef:1c:01:b0:85:
58:88:06:96:a2:98:05:db:4b:43:39:0b:50:fb:f8:
bc:6d:13:62:60:a4:59:86:30:7c:2c:1d:2a:95:ec:
ad:7e:a0:56:4a:ac:60:a9:78:40:c4:c1:07:da:ae:
c3:3f:4f:c2:c7:0f:36:64:5a:a1:6f:5e:98:03:79:
d6:28:5c:bd:33:1b:8c:a7:37:c2:83:65:68:aa:8d:
0d:6a:cf:34:df:67:2e:b4:41:fd:ca:bd:36:c4:db:
20:e6:aa:15:e9:f7:8d:57:2c:11:9a:ee:b9:0d:eb:
58:9a:7c:cb:6d:b7:d6:b6:a1:1a:bc:ea:f5:79:66:
46:08:2f:d3:13:b9:45:3d:54:e1:b3:11:7c:37:73:
9f:62:ab:2c:c5:fc:7e:0a:1a:65:f8:15:68:9d:ee:
b1:6f:49:a8:46:06:74:84:95:fc:89:ce:6e:55:d2:
76:1e:52:ab:11:bf:51:90:8c:1f:29:e1:e1:c8:a3:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:C6:A4:9C:6E:0F:07:A4:FF:4C:F8:D7:B2:45:70:27:46:DE:C7
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a1:a5:ce:58:bc:af:31:06:d0:96:b1:7b:0e:ef:56:89:9c:
ae:32:98:f3:2a:67:9c:7b:ec:80:32:7d:25:ac:48:3b:59:0c:
15:03:45:64:9e:c6:67:2e:97:7b:a9:3d:e6:60:ab:80:69:85:
bc:5c:f3:a8:ad:a1:e9:f3:d9:02:91:37:8c:9e:0d:80:a1:3d:
71:55:7e:a9:7c:57:3d:7f:c5:dc:a7:9c:63:17:4e:34:b6:ba:
38:a0:9b:d8:5d:26:9e:cc:66:9e:ae:4c:bc:d3:c2:9f:0b:6d:
19:c5:08:d3:6a:86:82:49:9b:07:2b:d5:a8:98:e8:5c:70:7a:
4b:5f:d7:18:a7:16:f1:86:c3:f4:2f:f4:6a:83:4e:dc:48:37:
e5:54:dc:ae:40:05:f0:08:8c:0e:fb:92:1d:ac:2e:43:d5:16:
8c:cb:dd:33:a7:56:4d:31:2c:b2:60:2c:5f:7d:6c:20:cd:8f:
70:f7:22:12:b7:c6:c3:78:16:20:19:24:e9:b4:61:29:65:0f:
08:a7:12:b7:60:06:19:5d:0b:d7:b3:6d:6d:38:80:5b:68:8a:
ad:d5:3a:5a:3c:8f:d9:f0:53:5d:3f:78:48:61:1e:2d:48:3c:
90:54:6f:d4:49:8a:ab:d3:6e:4b:10:d2:b6:74:00:96:9a:05:
df:ac:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:36 2025 by rpki-client