Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
File: GxUEuvgu-OsK5QivQLY442YKVIg.mft (raw, json)
Hash identifier: 79ssAPIXHMM031B9iV/VhRdXHtc/Z2o+KSpLd9RURT0=
Subject key identifier: 77:A0:05:4A:2D:16:D9:EA:56:C6:A5:29:C2:CD:69:60:B3:B7:91:D0
Authority key identifier: 1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
Certificate issuer: /CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Certificate serial: 0194BD8595918AB10392C8655E4BA9DB0A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
Manifest number: 0C72
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: GxUEuvgu-OsK5QivQLY442YKVIg.crl (hash: dseJvb4Q2QXGo7lQ2UIsRDeEkxjxpnfjqwJrGF9DYCQ=)
2: tXB_xgR37XoLj3SsWw2sjqhqZ9s.roa (hash: he0mpoKaeU1kDKUR39rmBxQcGyL1D1fjhdkpr9BtuYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:95:91:8a:b1:03:92:c8:65:5e:4b:a9:db:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1504baf82ef8eb0ae508af40b638e3660a5488
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=77a0054a2d16d9ea56c6a529c2cd6960b3b791d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:43:99:5d:c4:a1:43:ba:d3:15:41:0e:02:
1e:0f:8f:1e:5a:43:26:47:fe:6e:df:f2:bd:17:44:
29:7e:44:58:0e:18:cd:11:e3:30:01:d0:a1:22:8f:
a3:ec:0a:47:9b:29:d3:42:a9:46:32:1d:83:cd:07:
13:25:e6:9a:f2:71:d9:f5:81:4c:d0:82:60:a9:b5:
74:16:45:d6:f8:4a:b5:98:08:33:d5:e8:4e:ef:db:
78:f6:bb:96:5a:d1:fa:9e:54:20:d4:c5:c6:2f:0b:
39:4a:1d:3b:6b:fb:82:1c:cb:3c:75:66:c8:53:f8:
91:03:cc:f4:8d:ad:6e:df:20:d3:aa:17:62:ae:aa:
60:40:5d:c5:10:cb:c4:26:0b:ad:02:e5:63:2e:f9:
f7:60:a3:bf:4e:2a:06:14:66:cc:69:a9:75:c6:5a:
6f:ae:05:05:d0:2f:e8:c0:46:a0:df:03:3b:c0:79:
48:8b:93:cf:e2:17:7d:77:96:86:30:21:11:18:a7:
49:77:e3:9e:e6:4b:8b:e8:61:9d:97:50:82:cb:46:
14:8c:38:60:b0:c4:8d:f4:0c:cc:f5:d5:be:bf:9f:
47:75:64:55:01:5e:80:34:bc:4a:20:e8:0d:48:99:
97:2f:36:f3:90:bf:48:e9:30:ef:34:9a:b4:a4:a4:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A0:05:4A:2D:16:D9:EA:56:C6:A5:29:C2:CD:69:60:B3:B7:91:D0
X509v3 Authority Key Identifier:
keyid:1B:15:04:BA:F8:2E:F8:EB:0A:E5:08:AF:40:B6:38:E3:66:0A:54:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxUEuvgu-OsK5QivQLY442YKVIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b7f70-fad1-403c-b08e-2c3ea4b86e20/1/GxUEuvgu-OsK5QivQLY442YKVIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5f:06:b0:06:c0:a9:ac:23:76:c3:ad:2b:9f:2c:e9:2f:c0:
fe:64:f8:d3:c9:c3:c6:e2:33:95:c4:65:c2:ba:ef:f2:3b:d4:
66:84:46:a5:4f:78:d0:73:eb:8b:27:db:c6:fd:6d:77:59:b5:
4f:85:d6:b7:62:af:ee:7d:f1:4b:8e:2f:07:27:ba:0e:69:6b:
59:e6:fb:ea:08:df:03:fe:19:a9:9d:6e:ea:a6:e0:3b:a4:5f:
2b:b6:c5:d7:0f:85:d5:62:a6:b1:a1:ce:9d:d1:bc:73:39:0b:
ad:26:93:85:dc:83:46:cc:b2:80:b7:51:72:22:86:9e:7f:53:
19:04:10:b3:87:81:a5:dd:46:b6:32:f1:1e:0a:8d:12:cd:4b:
77:d6:c9:b0:f3:b3:de:75:a6:c0:59:e7:ef:01:ec:21:ba:f4:
2f:f2:9d:ca:7a:dd:7d:ed:68:a1:1a:05:a5:c3:06:83:5b:66:
93:23:0e:53:d5:25:65:d8:bf:27:b8:d5:8f:ee:be:fc:c0:55:
a7:2f:eb:b6:1a:56:11:06:e9:be:31:22:ef:6b:0b:49:bc:5b:
28:0a:0a:14:b0:30:4b:2c:09:b7:8f:ae:43:c3:02:30:d8:bf:
9f:ec:87:ef:30:8a:b9:18:8a:aa:51:f6:e9:5c:c5:2e:aa:52:
bc:4a:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:04 2025 by rpki-client