Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
File: GsBs8snpV1N0OXNPBYSoIEp7gxE.mft (raw, json)
Hash identifier: sZ4WK5Rlvus9d95EQv4Q472HCChWpzyENbcdBCg2it8=
Subject key identifier: 8A:CB:4C:4D:5C:E2:6B:39:46:D1:86:E0:CF:E9:45:F1:05:04:F7:E5
Authority key identifier: 1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
Certificate issuer: /CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Certificate serial: 0194BCE05D180AFC710897540A6B7C1A1F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: GsBs8snpV1N0OXNPBYSoIEp7gxE.crl (hash: QI04AlkrzODARqjT0BEG3tiA4kva3ORZAj/kKYKV38Q=)
2: td5of2c-zNIx95LtRN04mtFJYAg.roa (hash: rMhWdT4I0hK2RGp5gGoiamCjAXi8+XSWiM4KXZ7JjMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:18:0a:fc:71:08:97:54:0a:6b:7c:1a:1f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac06cf2c9e957537439734f0584a8204a7b8311
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=8acb4c4d5ce26b3946d186e0cfe945f10504f7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:b4:b9:a6:d4:c0:f2:dd:5b:25:28:35:27:
85:af:ab:2b:50:58:4c:d7:70:e3:2a:1d:53:aa:9c:
1a:ca:53:4a:20:f4:82:34:5f:98:36:2e:bc:7d:7a:
8b:85:05:61:1c:0e:6b:32:b9:8c:fe:c5:63:be:c2:
07:03:6b:60:07:ad:e8:28:36:2f:fd:31:8b:72:e4:
64:20:ab:b5:54:4a:b8:86:d6:c4:b3:b8:b4:95:d0:
b3:f3:ff:e7:eb:23:f4:67:c6:ed:1a:ba:74:56:65:
4e:62:18:02:af:c4:9d:1b:7a:51:66:54:a0:70:f6:
ea:9a:99:38:57:07:a0:0f:8c:7f:fd:eb:e5:ef:f4:
31:93:97:de:24:d7:b6:8e:8b:58:0b:35:67:e3:0a:
be:2a:80:7d:3b:8f:ae:03:91:f6:54:8e:84:ba:c8:
8f:57:e1:21:fd:42:52:a3:15:49:47:29:01:f5:6d:
3b:cd:0c:6f:42:06:f2:d5:1b:65:85:a1:6e:d9:3d:
ee:d5:a3:cd:48:f1:87:91:0c:99:d5:06:ab:b8:2f:
54:c6:da:62:e0:46:e4:17:f2:66:92:e1:86:e6:51:
cd:9a:2c:45:1c:7c:ca:ed:7a:b3:6b:d7:de:36:7a:
2b:01:00:e0:fb:a5:ad:c9:e4:ac:80:18:45:05:6c:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:4C:4D:5C:E2:6B:39:46:D1:86:E0:CF:E9:45:F1:05:04:F7:E5
X509v3 Authority Key Identifier:
keyid:1A:C0:6C:F2:C9:E9:57:53:74:39:73:4F:05:84:A8:20:4A:7B:83:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsBs8snpV1N0OXNPBYSoIEp7gxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7e6e9-c121-4064-8ad5-07c17fe374a6/1/GsBs8snpV1N0OXNPBYSoIEp7gxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:04:35:4d:f9:42:ac:ac:03:4b:4f:11:77:14:7b:58:7d:10:
af:f9:ec:45:d2:fc:8c:a7:1d:a4:8e:45:6d:7b:f2:5e:ee:f6:
97:4d:f5:96:18:c6:a8:d5:08:e3:7e:22:51:25:ce:c7:88:89:
92:98:62:d7:29:be:32:5b:07:03:0c:3f:19:62:5a:74:3e:24:
a4:52:f6:37:4e:3a:b0:c4:56:1c:20:67:f9:23:cf:b2:bf:b8:
aa:35:08:51:96:59:bd:d4:ba:52:d9:75:3b:0c:8e:52:80:32:
23:cd:4e:82:67:0e:d6:f8:91:5c:a9:ff:d8:da:9a:cf:7f:6c:
86:64:34:18:68:0d:d6:26:37:76:0e:48:a9:dc:d2:71:8d:b7:
ff:dd:87:4d:5d:6a:a7:89:ac:a2:39:43:97:73:79:bf:1b:4d:
a8:ed:c5:2b:ee:84:92:c4:07:98:e8:cf:64:19:1d:f3:92:02:
22:44:ce:6f:7f:94:3c:f4:d3:8c:6b:1c:1d:e6:97:63:92:08:
0f:f0:c7:4a:8b:2f:10:31:db:51:d3:1f:fe:59:4b:35:df:ab:
2e:fc:7d:2e:aa:c6:93:db:57:a6:c8:ba:cc:3d:50:0d:6a:28:
7c:54:e4:da:12:8b:84:c6:d9:2b:44:f7:c7:bf:0c:45:bb:2f:
ef:c7:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:37 2025 by rpki-client