
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier: itzZeHuOYVEi6XMRiK4LitMyjr6c9wdP67RfigdBEP0=
Subject key identifier: 8A:FB:27:0F:FD:98:3E:78:65:6A:0E:B8:D0:8A:F2:04:27:0A:30:10
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer: /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial: 0194BBCE8507BA1995F460F93EDA7412AE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: PEvqGb0shWsbYx4DqJ1AuVYggJI65LpReK3PPCe3Owo=)
2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:07:ba:19:95:f4:60:f9:3e:da:74:12:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=8afb270ffd983e78656a0eb8d08af204270a3010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:c8:b2:e6:fb:e2:98:4c:40:66:73:35:24:
a0:7c:5d:9b:33:82:b2:23:51:66:c0:b0:30:13:9e:
21:96:6d:8f:a4:9f:f9:97:1f:9d:72:14:af:37:01:
00:9b:ca:cd:a1:24:2e:cc:1b:51:77:2a:4e:2b:97:
0b:1f:71:be:e8:d2:5f:0a:1a:8a:4c:b9:29:b5:42:
fa:e6:a0:78:f8:40:24:1c:3f:d2:cb:fa:9e:d4:9c:
80:e3:d8:d3:89:c3:ff:bc:9a:ba:cc:1e:14:75:97:
1f:52:bc:92:f3:d3:18:a0:bd:c7:c3:01:40:71:eb:
48:d8:2a:d8:fb:a4:77:ef:98:f7:cf:98:bd:09:3c:
7b:29:82:6f:6b:b4:64:d0:f2:35:ab:c6:ad:63:0e:
1f:53:1a:93:ec:d3:84:34:d9:68:7c:02:42:fe:7d:
0d:ee:53:07:d6:bb:71:a6:ae:f1:21:e7:77:c7:62:
8f:c5:59:ea:56:56:36:01:58:3a:fc:88:e4:5e:58:
67:4a:e5:82:cb:92:02:59:20:9c:25:01:25:25:56:
90:94:1d:5c:8e:a0:f6:e7:ee:2c:d4:27:59:d7:1d:
74:f1:66:f9:f9:e8:50:cd:af:6b:b4:aa:1e:4f:df:
40:c4:c2:a1:eb:f0:5d:d0:b4:6e:c9:d1:13:7b:78:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FB:27:0F:FD:98:3E:78:65:6A:0E:B8:D0:8A:F2:04:27:0A:30:10
X509v3 Authority Key Identifier:
keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a4:48:e2:09:5a:6c:45:69:ac:c7:70:8c:34:db:a9:b1:0d:
29:f8:59:f4:02:ce:32:1e:6b:48:8f:09:07:0c:a4:fe:31:d4:
c8:ce:b8:b5:20:06:54:c4:f6:0a:32:73:29:76:39:7d:15:41:
bb:1d:b3:76:26:ec:5a:5d:74:71:97:03:af:4f:6a:03:a0:c4:
95:9d:d9:fc:99:1d:cd:4b:46:fc:2f:0d:fb:9b:fb:80:fc:b4:
cf:2e:03:7c:5b:c7:c7:28:21:e6:4d:f1:12:4a:20:47:74:4c:
00:8b:8a:5a:72:ad:82:04:6f:aa:4f:1b:3c:f2:da:5e:d9:7e:
80:94:63:c1:a8:07:02:aa:05:f8:a3:bf:f4:56:27:ce:89:1a:
5e:57:e0:e9:eb:eb:03:e9:d5:48:5e:a9:a1:1c:b1:30:4d:36:
df:12:90:bd:cb:77:59:64:9f:bf:be:84:c3:b5:68:d4:04:d5:
c8:6a:db:ff:09:9c:c8:4f:c7:a3:9d:bb:05:ca:46:e6:f9:19:
1e:39:a6:b1:7a:0e:48:f7:c4:23:c1:bb:64:6a:b0:73:b5:a4:
95:a5:c6:d9:4b:8c:af:56:b1:e1:5a:cd:00:86:07:ec:74:0e:
75:de:d7:c8:cb:c8:8b:f5:2a:0c:30:3a:9d:3d:56:5c:54:a2:
f5:c5:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client