Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: ixakIiZA4LMPP1jWnggBDoNktnEjVjWB4coKYpEbZQQ=
Subject key identifier: 43:88:D2:74:AF:9A:31:EC:35:3C:8B:EE:AA:26:26:C7:44:33:FD:81
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 0194BCA995E4826B236E941A722A29167933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0550
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 76FotxZTi0HyL9QFnMI2jJo8eLQJl2aEXHrMdqycUrU=)
2: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:95:e4:82:6b:23:6e:94:1a:72:2a:29:16:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=4388d274af9a31ec353c8beeaa2626c74433fd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:8d:9e:1e:97:06:d9:ae:ac:11:11:60:da:
9f:b3:db:82:fa:56:a3:cc:26:70:40:1a:bc:10:63:
64:ee:41:3d:5b:13:cb:09:f7:a9:78:07:d4:d3:68:
d4:aa:64:f9:67:fa:c2:33:db:26:8c:78:e7:1b:de:
da:21:3c:4f:c1:ab:30:ad:ee:b9:e7:f1:0e:f4:50:
5c:03:f2:56:f6:1a:25:6d:90:d2:b0:b4:92:d3:8b:
5e:65:f3:63:c7:14:7e:ab:2e:9d:67:95:70:9f:36:
85:36:bf:d7:fc:c6:55:f6:0d:c3:9b:52:24:ee:f6:
b7:85:b7:c0:5f:e1:0f:ed:f5:91:8f:af:2f:c3:44:
d5:c0:e0:24:f2:a8:72:26:35:11:8e:62:55:bc:8c:
ba:32:bd:32:c2:8a:be:00:bc:56:ba:93:b0:a1:f1:
d5:31:48:81:d7:8a:eb:93:79:f1:72:d8:ee:7f:5a:
f6:67:47:27:36:0e:f7:d5:a8:97:22:4a:86:57:98:
ce:a8:3d:45:6d:06:7c:2c:d5:cf:a3:25:48:e0:09:
f2:a8:84:92:97:09:25:e0:5f:7e:14:ce:f5:3d:a5:
a6:3a:45:79:af:75:18:22:9a:06:bb:f7:2d:57:47:
9c:d4:87:2a:40:45:e2:33:9b:66:d7:02:e0:69:b3:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:D2:74:AF:9A:31:EC:35:3C:8B:EE:AA:26:26:C7:44:33:FD:81
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:16:78:2c:d0:1d:82:a7:7d:b5:e8:56:36:d8:24:c4:46:
7f:78:b8:90:8f:e1:d4:7e:80:f9:21:1d:dc:06:86:ac:eb:3c:
65:e6:d5:8f:eb:75:80:c0:8c:38:a0:4e:7e:8d:ee:e1:b4:92:
d3:70:88:e0:b6:b2:2a:40:14:e2:45:94:2d:07:8d:e2:53:31:
a8:53:bf:59:f7:ed:03:c7:73:61:46:b0:04:fa:64:44:26:87:
b4:bc:85:1b:00:81:52:fd:02:c1:e3:ee:25:44:16:37:3a:f8:
14:36:62:c8:5a:8e:e6:76:32:81:00:9a:a2:4a:d9:1d:2a:77:
46:bc:c8:e4:12:a0:0b:aa:1c:3e:81:9f:bf:71:62:33:56:fd:
7e:3f:ee:d9:87:cf:d1:c0:d5:cc:51:79:5d:d2:9e:65:94:bc:
b9:fb:ce:66:e4:35:1b:ad:5f:91:9b:80:41:96:c8:2a:c0:38:
18:16:99:a4:63:7b:6f:1f:72:29:09:2c:dc:e1:12:df:87:f8:
03:28:7f:2b:2b:d9:e3:f9:da:58:83:c7:ef:33:d7:75:7f:f0:
7d:e7:37:3a:81:b7:64:47:ec:e5:b2:97:99:2a:06:f4:17:d8:
29:f8:18:72:90:41:98:40:03:1d:1f:1b:34:7e:46:39:10:4a:
13:b3:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:34 2025 by rpki-client