Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: XeDmiuPdG5nfK4VAtm4Ia1DSWiSJ9668VJepkCcIzWk=
Subject key identifier: F0:C9:82:87:AC:00:41:EA:A8:0D:30:CB:B6:9C:E9:7A:04:4F:26:45
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 0194BCA9F31CDD6A5B2558AF8F132247C469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: wDb4BYFDsvG5eaoEcsfY9ppAek1uYW/A/irw3szRgyE=)
2: hRViLioOhxazkHfvXEUqCQoWtcM.roa (hash: UwsVl6zDnCr1HkAOnBnopdZVrNViwXPi8g+Nx+h0Crk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f3:1c:dd:6a:5b:25:58:af:8f:13:22:47:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=f0c98287ac0041eaa80d30cbb69ce97a044f2645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:c7:f1:7a:17:13:7b:1c:f2:87:82:23:2d:
78:1b:02:83:3c:fe:b7:91:64:f2:2a:cb:33:8e:e8:
62:09:63:50:a7:a4:da:4d:ce:c1:1e:4e:03:70:03:
96:8c:a0:c3:24:6e:3e:04:09:13:0e:1c:92:a2:36:
b5:98:72:0e:d0:1b:eb:11:ae:71:24:8c:80:c1:55:
a7:c4:8a:f7:31:e2:d2:50:be:6a:07:1d:92:d8:fe:
92:0d:0e:c9:54:0e:b0:fe:b6:65:ca:8d:e2:f1:57:
7d:1e:3d:c5:43:3a:ef:19:3d:71:64:1a:5e:fe:34:
68:19:ca:3b:11:3d:eb:46:53:01:65:5d:5e:f5:41:
bb:ea:bc:fe:f8:eb:99:5a:a3:0c:7e:79:7f:08:c7:
2a:65:33:71:18:09:94:cc:f7:4a:7b:5b:6f:27:b7:
71:b4:af:fc:64:91:86:32:b6:6d:57:c8:de:55:c4:
4d:48:d7:2e:9d:75:8a:fd:2e:2a:6b:92:2f:f0:e4:
98:ef:f2:dd:0e:9e:84:fb:06:c1:33:4e:b6:20:5b:
24:d5:ed:38:17:78:76:a6:23:3d:3d:29:59:3a:f4:
4a:49:28:ff:64:9a:7b:27:87:40:a6:1e:0b:45:55:
6d:91:19:5d:a5:ee:b6:67:91:05:bf:92:6e:d4:05:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:82:87:AC:00:41:EA:A8:0D:30:CB:B6:9C:E9:7A:04:4F:26:45
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:98:da:d3:87:aa:54:cc:49:88:48:b3:e8:b6:d1:b3:31:a7:
a2:ed:59:16:82:27:dc:86:48:ad:04:de:98:5b:ce:86:3a:58:
96:e1:e5:3b:ea:b5:bb:1d:65:42:09:61:81:d4:e8:dc:99:ac:
36:0b:0a:7d:13:f6:1e:77:be:1f:6b:3f:8f:3d:6c:da:de:3a:
e4:18:2c:ce:c2:59:12:99:8c:37:d5:af:ac:ae:fd:2b:62:e6:
b7:a6:5c:57:1f:6c:0e:37:58:66:2d:e5:99:f6:c9:98:0d:0f:
94:2d:87:80:9c:b3:e1:29:b0:ec:c0:3c:5e:99:f8:e7:ee:4b:
10:eb:94:37:17:60:04:24:2a:01:f9:c2:30:7b:68:19:d9:16:
0a:60:26:6f:08:8d:c1:f5:24:de:64:40:f0:da:a0:83:05:12:
93:e5:6e:b4:13:77:42:df:54:18:07:09:67:dd:a6:88:ce:bb:
00:56:fc:d1:75:2a:6a:d2:e3:4c:90:b9:ac:3f:85:3e:e0:39:
ff:0c:9f:3c:19:a2:34:2d:10:9e:cd:0e:39:72:0b:d5:a8:da:
c8:f1:da:59:1d:99:c0:f1:85:3d:43:89:33:78:97:fd:a0:7b:
83:bd:4e:c9:b5:84:d5:e8:bc:48:5b:61:3a:50:8b:0e:8f:a3:
8a:10:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:23 2025 by rpki-client