Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: EAvX7moPl/4kK/VXF2AJtv2freIR5alH8ix4urlqveg=
Subject key identifier: 68:A7:5C:C3:31:F7:BB:46:88:8F:1C:C3:B1:9C:AD:AD:A7:8D:35:50
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 0194BBCE2214BCC442D72E41D8B9DF6B3B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: XtoskFd8AG/PCdQto6r2Vo2wfVixI/3GoBC5Pu8SkWY=)
2: hwl_pJftKoYgWaDLkyi1NUP4Iqo.roa (hash: zD6uA78lx0+tAtyuIqfvTt4SALf3UDD47V0kgwtFI/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:14:bc:c4:42:d7:2e:41:d8:b9:df:6b:3b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=68a75cc331f7bb46888f1cc3b19cadada78d3550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c2:73:09:85:8d:87:d2:5e:d8:32:d2:83:65:
6f:c8:36:e1:77:ee:42:1e:92:5e:bd:f5:3e:0e:58:
08:c2:a0:50:2a:4a:05:88:31:39:aa:6b:3f:de:3f:
cb:a5:79:2d:86:ee:ab:1b:c9:ec:c1:36:66:e0:69:
58:bc:e1:92:24:67:be:37:83:91:4a:01:6c:13:1d:
53:80:1c:61:c9:e3:22:c3:60:e0:2e:7e:ba:ff:11:
a2:d3:7b:1c:6e:ac:ff:2c:5e:92:55:91:2f:f2:8b:
5e:aa:09:fa:8c:8c:66:f1:8a:91:3f:e0:60:3f:78:
3a:a1:c2:23:ae:26:f9:05:1b:74:b0:89:02:43:c0:
ae:2e:78:cf:72:e7:08:16:ec:63:08:fa:8d:a6:62:
0c:4a:3b:a2:af:6a:ff:ae:78:01:9e:a5:84:9a:41:
a5:4b:7d:de:0e:d7:d7:74:ac:32:db:73:df:0c:f2:
7e:bf:5e:20:1d:c0:0a:59:4b:bf:ee:66:e6:a8:f1:
f3:78:a1:07:4b:1e:0e:a6:2f:b9:52:61:ce:fc:45:
d7:90:20:59:8d:a4:1c:15:33:0d:73:e6:70:d9:49:
43:f5:df:74:1f:7e:e9:a3:92:fa:99:dc:97:15:ff:
32:12:eb:40:47:ab:28:10:d7:41:e9:5d:8e:42:e1:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:5C:C3:31:F7:BB:46:88:8F:1C:C3:B1:9C:AD:AD:A7:8D:35:50
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:66:f8:d9:2e:35:66:04:57:86:d3:da:5d:30:65:9e:04:
75:81:b5:70:72:e1:78:88:13:f1:58:28:c4:87:6b:e7:b6:c7:
f9:06:71:8f:24:7b:da:c4:b5:dc:d8:11:a2:5d:79:c2:1a:86:
36:8c:48:93:cc:43:89:b2:42:49:41:fc:d7:ce:12:75:4d:dc:
3b:c6:67:8f:b7:b9:f9:1b:e2:d5:08:65:73:10:95:3a:7f:c7:
e6:8c:67:c5:9c:4e:7e:7a:b2:6e:22:0f:0e:1b:45:02:44:89:
d1:76:a8:7a:61:95:2c:a8:20:25:52:1b:16:87:32:da:26:9b:
a2:0e:01:a7:39:ab:72:82:ed:63:cf:0d:55:c9:a4:45:60:49:
4a:e5:b9:1e:52:29:27:93:37:d5:d3:83:59:e2:84:28:7c:b2:
fe:56:d8:01:33:50:59:54:a3:29:75:25:cf:8c:e8:10:3b:2c:
75:81:a5:95:8a:5f:00:b5:82:de:6b:23:66:1f:ae:d8:e8:cf:
a3:49:ec:74:c9:08:67:10:90:41:2b:db:83:a2:28:31:7d:0c:
4c:4f:a7:cb:62:b2:b9:cd:ee:1c:22:52:8c:96:1d:2a:03:3b:
11:51:98:a2:44:a2:19:d1:0d:27:01:45:e8:1d:9f:8a:71:4a:
71:4d:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:37 2025 by rpki-client