Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
File: G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft (raw, json)
Hash identifier: PP/cm88KQvK5r/geZi4EtZ8RqKpdSGDuEYVq/cDkOE4=
Subject key identifier: 8C:0E:2D:EB:AE:0A:65:60:0F:CC:A1:53:EF:34:4C:54:CB:28:EB:BE
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Certificate issuer: /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial: 0194BCA9FDB883797CFC78AC207FD1F396F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
Manifest number: 0ABF
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl (hash: XVaL9YvTyDoPqzGpFdiPet2eO2Dlt1BwAA/2GKrSG0E=)
2: j_n9Kg39TCshbmu8W1dk2NVjcFI.roa (hash: 56S9svTLKP+1FymtE0skXNThCYHX7pM3o2tRL4nBuW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:b8:83:79:7c:fc:78:ac:20:7f:d1:f3:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=8c0e2debae0a65600fcca153ef344c54cb28ebbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:f9:ac:25:1e:b8:03:aa:4e:d2:5f:bc:c1:
f9:5c:8c:7e:83:41:f9:31:57:23:68:30:6a:42:f2:
95:8d:23:69:0f:ac:af:67:f5:68:c3:7d:0a:2f:1d:
7a:ea:63:48:85:4b:01:67:be:da:3c:46:94:19:7e:
41:01:f7:40:0e:9b:52:f6:60:54:66:52:83:35:0f:
80:f1:fc:07:0e:23:e1:77:02:89:35:b7:76:2d:05:
87:21:3c:b0:bb:80:16:a6:89:60:c4:d0:fd:0f:2e:
ed:22:29:45:62:db:e6:11:68:e5:41:b0:e2:fe:9c:
44:f0:79:02:69:08:d4:a5:87:38:39:b9:38:0e:67:
00:28:ec:c9:b2:19:06:d5:74:ae:ca:b1:e2:bc:d5:
15:b3:0d:f9:c0:c7:e8:4f:1a:a3:db:01:db:d6:93:
a0:45:eb:e3:e9:17:e7:82:cd:2d:b7:87:fa:b7:c1:
8c:09:f2:c9:63:b5:e6:9c:a3:ea:89:95:a4:9f:46:
b3:13:58:25:e8:63:b7:bd:4f:f9:38:d6:e7:12:dd:
9d:13:2a:12:1b:5f:ad:a3:f9:67:05:b3:59:eb:0f:
05:6c:7c:b5:04:fc:12:0f:f5:8b:29:dd:c1:8b:4a:
1d:35:89:67:b4:0c:c1:ed:ab:6c:fa:ec:e7:10:86:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0E:2D:EB:AE:0A:65:60:0F:CC:A1:53:EF:34:4C:54:CB:28:EB:BE
X509v3 Authority Key Identifier:
keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:82:8f:a4:33:c6:32:d1:40:c5:f8:de:7a:18:b2:d6:d6:7e:
43:56:8f:19:92:87:ed:4a:d2:44:26:96:46:74:b2:76:8c:3b:
5f:92:e4:dd:c3:70:7b:fb:2f:54:bf:2d:68:2d:05:88:64:c1:
91:06:09:71:96:a9:db:26:1e:89:2c:7a:ac:4a:fe:39:8f:d1:
08:41:cf:71:3d:0e:ee:53:38:3d:09:33:8c:dc:30:d6:fe:e3:
88:11:6c:5e:96:5f:c3:12:99:ad:9f:5d:c0:c1:87:cd:87:5d:
54:36:4a:de:89:b2:5c:c0:46:7e:c5:4d:ce:b8:e4:af:5f:9b:
a8:db:50:47:f7:3c:9c:7c:74:59:a4:8e:b9:d6:e0:19:40:fa:
80:5c:38:ef:27:1c:8b:2b:d1:93:d4:3c:e7:50:d0:dc:3b:c2:
5e:0c:b5:23:03:de:2f:ab:b7:3f:68:92:b0:94:fd:43:20:d4:
c3:f2:b9:ae:71:05:fc:87:93:8a:ad:6c:8e:8f:a7:63:d5:28:
f7:eb:6e:93:19:d7:77:db:f9:1b:15:0d:5b:61:66:72:f4:2e:
d6:bf:d9:c4:f1:1b:a1:6a:4c:63:c4:b1:b0:de:a0:f8:9b:66:
59:1d:85:c6:6f:42:a7:b2:e6:a9:b0:e2:56:53:e8:30:45:c9:
0d:2b:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client