Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
File: GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft (raw, json)
Hash identifier: IdbleqWmiBmRA7O6AOJjBw+KhV40WRNb1N/al+yGqB8=
Subject key identifier: 81:BB:DC:0B:0F:5E:FB:BD:EE:F2:52:AB:D3:B2:9E:00:A5:18:57:94
Authority key identifier: 18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
Certificate issuer: /CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Certificate serial: 0194BD4E8DB5300F7ABCE748BCEBCBC3606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
Manifest number: 07AF
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl (hash: UF6bKiVZ2A4my5Aukm9PtVQ/DKDO+v7bDf8jM//1DC8=)
2: ZnGF6W1D3X-NrkNFr6eImmQhdy8.roa (hash: Bt9KY5B97syBzqVEmQ0mMOoNBbtJyQudj313FGbVLOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:b5:30:0f:7a:bc:e7:48:bc:eb:cb:c3:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18af6a06050e4ca26b2fdd13a7c0ad146cd26dc8
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=81bbdc0b0f5efbbdeef252abd3b29e00a5185794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:e3:4f:92:c9:c9:b0:22:96:c1:02:54:d1:
23:35:ee:46:94:c5:b4:83:00:b1:22:2d:49:a4:b0:
24:82:84:90:5d:e4:9a:7c:1b:a6:ba:48:2e:bd:a5:
12:0a:e7:0f:c8:d9:3c:3d:38:77:a4:85:ed:b9:20:
5e:bb:e6:ea:81:91:1d:6b:fb:3a:31:f2:30:72:83:
28:cf:a2:38:3a:08:ac:dc:91:c6:7e:7f:cf:5d:59:
f9:fd:37:bc:29:ff:87:c8:08:04:a2:1f:a9:b8:a1:
d0:81:ea:a8:01:46:51:57:93:fd:95:da:c9:58:07:
95:12:67:f4:51:db:72:12:b6:d8:5f:42:83:3f:8e:
d8:72:e4:c0:38:c6:8e:8f:55:00:dc:ff:02:60:6e:
2b:2a:a8:ec:93:19:0d:f2:0a:bf:07:3c:c1:0f:1f:
e8:89:ae:84:ba:8d:5a:83:5d:7c:ff:8b:e7:0e:51:
c1:75:8b:37:79:bb:5e:c9:43:52:cb:6b:66:91:c3:
92:f6:ad:df:3b:d4:68:45:2a:c3:98:10:9a:08:2c:
ff:99:92:10:96:a2:3e:1b:cc:f1:11:40:b9:90:f5:
cf:e4:b8:1d:73:2e:c2:e8:40:9a:45:df:7f:02:a7:
ca:69:f5:c2:48:73:c6:bb:53:22:9e:d0:07:b2:e9:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:DC:0B:0F:5E:FB:BD:EE:F2:52:AB:D3:B2:9E:00:A5:18:57:94
X509v3 Authority Key Identifier:
keyid:18:AF:6A:06:05:0E:4C:A2:6B:2F:DD:13:A7:C0:AD:14:6C:D2:6D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GK9qBgUOTKJrL90Tp8CtFGzSbcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1991fe-adf7-4352-ab83-0396e87f5202/1/GK9qBgUOTKJrL90Tp8CtFGzSbcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:9f:5f:17:36:21:35:d7:82:4c:b2:34:8d:84:10:d5:c1:
32:51:10:4a:1f:ae:ab:fe:13:bd:a7:3a:4b:5d:24:98:fc:e6:
ea:81:f6:aa:ca:fa:09:f8:19:26:b7:ef:ab:02:9a:8d:39:70:
76:ec:21:65:dd:51:8c:7b:a5:3d:0e:42:9a:7d:38:e3:3c:09:
a5:88:70:20:6e:ed:93:9a:c4:93:5f:80:b8:20:ce:3b:d4:7d:
20:66:41:75:8e:1e:12:19:e6:b0:66:2a:bc:ba:d1:3f:13:28:
8c:35:82:98:e7:f9:89:1e:60:dc:9c:d0:c9:4c:86:6a:7a:3c:
5d:dd:c8:e0:9e:0d:e8:b4:94:db:16:5e:73:8d:9c:7e:62:74:
25:f1:c3:f9:2f:8a:14:b4:71:0d:33:fa:f8:1b:bc:17:03:21:
0f:57:c9:db:45:aa:a7:0c:06:f8:16:c7:8e:21:64:d3:00:f0:
70:b5:65:cb:4f:38:3a:84:b7:1d:0a:72:9c:b3:5e:d5:63:ba:
c7:53:ae:6d:24:67:3c:75:6a:a3:c5:6a:fc:fa:5a:e9:36:5e:
ab:ac:fa:47:a1:f3:ac:2b:1c:16:ea:b3:86:f1:ba:21:cb:b5:
58:3b:0d:63:b4:d0:80:3f:7b:8b:93:5d:b6:11:12:8b:aa:95:
b7:8a:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client