Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
File: Gq51omzPhiEiKBakccy3wNXnFuI.mft (raw, json)
Hash identifier: ljgF7rqvJDshMGzbD+zXlMvQPDhyy1vxpncEJ06Dga0=
Subject key identifier: 36:F4:56:F7:90:A1:9F:DA:DA:6A:C1:47:35:82:A9:1B:E2:86:58:6A
Authority key identifier: 1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
Certificate issuer: /CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Certificate serial: 0194BC04FCAAD72BE7746B723A75CAEEBDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
Manifest number: 0734
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: Gq51omzPhiEiKBakccy3wNXnFuI.crl (hash: 6AAI9ZcZUZf+i0F3crBlR3MwcGeyFBmi5a3NB8Y6uRk=)
2: e-R839WD2s0lY-SLIuwOK0gz1NA.roa (hash: Br/dbcJ4O349JzP2gYAkSObA1wvRVc0Vvam1hapVqyI=)
3: wQpXfE9JEQ0xae3JNQ5WII9BPtg.roa (hash: Wc6T5r1GtvbV1icqr7Rl021bCXOyiaZtPpB0GH2eHqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fc:aa:d7:2b:e7:74:6b:72:3a:75:ca:ee:bd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aae75a26ccf8621222816a471ccb7c0d5e716e2
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=36f456f790a19fdada6ac1473582a91be286586a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:e3:d8:bf:a7:93:fa:15:6e:e2:2e:99:60:
5a:96:f7:25:1c:a9:56:b0:75:6f:c0:4a:37:b1:b4:
0f:db:da:f5:05:bd:fe:41:35:6b:7f:eb:17:49:55:
6d:da:19:6a:8e:4a:6b:46:4e:af:e4:ca:53:01:a5:
cf:05:11:71:33:ae:d7:bf:d8:f1:fe:a6:ee:3f:9b:
66:60:72:28:19:1f:9b:e3:3a:24:4c:67:91:fe:d2:
74:03:f2:06:ad:ec:4a:c7:ec:c8:46:c4:16:ac:88:
97:3a:c9:da:bb:cd:f3:34:e7:e9:39:bc:9b:46:3d:
da:24:b6:b7:b6:a2:e4:b9:65:6b:f9:70:06:75:99:
f4:ec:ab:b8:ed:65:e0:99:07:2a:39:c6:e8:7f:3e:
db:fd:bd:e1:da:67:e5:46:f8:2e:6c:60:5d:8a:1f:
f5:c3:3b:c5:2c:73:74:39:a9:f0:19:b9:06:42:e3:
b8:ad:ff:8f:e4:ee:86:ee:14:1a:9e:d7:19:ec:35:
65:fc:5e:b4:f5:eb:b1:12:63:3b:53:8c:d2:74:94:
70:92:70:ce:b3:dc:2c:6a:9e:0c:91:e0:89:64:62:
ba:90:eb:f2:49:05:45:fc:b8:45:18:b9:e9:4b:94:
12:9a:0e:5a:71:fa:4e:f9:01:2d:b9:c9:36:6c:ca:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:56:F7:90:A1:9F:DA:DA:6A:C1:47:35:82:A9:1B:E2:86:58:6A
X509v3 Authority Key Identifier:
keyid:1A:AE:75:A2:6C:CF:86:21:22:28:16:A4:71:CC:B7:C0:D5:E7:16:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gq51omzPhiEiKBakccy3wNXnFuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e7054-fd50-4f91-9cc7-264f0cc5ff80/1/Gq51omzPhiEiKBakccy3wNXnFuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e4:d2:ba:20:fb:1a:68:29:ef:49:2e:d9:62:65:ea:af:2a:
ad:d9:e0:d4:8c:96:b6:a2:a5:ee:b2:5f:ed:5e:7d:3f:f5:8d:
a8:d5:d6:5e:c5:e3:4a:78:af:82:48:31:ed:d4:8f:00:39:6c:
7f:e5:1a:49:3b:30:8f:98:5b:98:14:d3:17:9e:89:19:e9:51:
e9:77:b8:02:5d:a0:76:b0:59:de:cb:77:53:56:4f:1f:7d:75:
a4:a7:91:94:2b:52:cb:1d:23:fb:26:34:51:08:84:eb:f4:d7:
c3:80:82:98:7d:82:3d:80:be:66:9c:b2:34:e5:bc:39:7d:db:
38:44:52:32:23:83:09:26:e3:6b:4a:7d:d4:fd:09:b1:ce:1b:
84:f9:1b:33:c9:02:6d:10:ba:2c:a2:e5:af:5d:36:5f:a8:85:
72:ab:4b:86:f9:08:35:e2:1e:16:5d:80:50:87:30:f9:24:f6:
ed:f6:09:18:14:65:ae:d6:24:c1:b9:ee:34:20:7f:80:59:67:
6b:29:9e:ec:f8:f6:fb:8e:38:f5:b5:a1:04:40:f3:65:28:78:
79:90:d4:3b:4b:ce:4d:4a:c6:68:04:83:0c:c9:5d:cc:af:2b:
ba:70:4e:52:25:c9:e1:b2:cc:bd:55:a8:f8:64:d4:22:d6:fc:
c0:10:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client