Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: BDdNCXnef/x6UKZ0Don30MH4oKvdxMEz9uIrUTQnl6A=
Subject key identifier: C5:07:A0:5A:B5:A7:C7:99:98:BC:7E:AD:07:E7:76:6A:59:EF:E4:09
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 0194BBCDE222615C8F22ED6F902679743826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: DRozhMtaZ2qQi39QkdO5G1jc7k0.roa (hash: PuORiX2E31wDt+P9sStv2sIXh7s2xmzWRFumBtIrOBQ=)
2: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: bZ/KA4r7t6Rrnxmuq40Rtvc3cF59GRsN+CmHwKGaiJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:22:61:5c:8f:22:ed:6f:90:26:79:74:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=c507a05ab5a7c79998bc7ead07e7766a59efe409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:d5:85:df:5c:37:51:06:52:25:99:60:6e:
f3:c1:17:92:62:77:ad:11:be:8e:a3:a2:61:80:ec:
bf:9c:a0:27:db:7b:0c:1d:96:53:b4:ce:b3:b3:d7:
c9:96:e5:6c:af:99:54:4b:35:9d:8d:17:f3:7c:05:
0c:2a:ee:d3:77:d5:44:07:28:46:7d:06:c6:3a:f6:
9d:d6:de:e6:56:f4:f1:89:a0:de:89:13:63:f5:2f:
64:ed:6c:1e:84:f1:2e:80:17:2a:b9:d4:5f:46:ed:
45:0f:12:0c:7c:e2:00:91:d4:f6:f0:10:fe:81:76:
cc:07:04:e6:3b:49:3e:c5:2f:16:89:ce:63:b6:63:
bd:82:45:3a:68:f7:42:23:fc:0c:ea:3a:e0:06:7a:
b5:04:d5:38:de:7b:e4:33:99:2f:c0:5d:72:30:54:
80:32:be:f9:64:d8:4b:b0:6b:64:c0:f8:fa:ed:fc:
09:00:34:1f:23:f6:96:76:c3:d7:7a:30:3d:ec:52:
a6:86:fc:c3:8c:ce:b6:00:55:f5:ff:6c:74:d7:13:
26:85:de:87:43:98:bb:9c:b9:7f:93:73:12:54:9a:
89:97:c8:43:ae:d5:bc:a9:90:2d:d4:79:a8:2f:6d:
50:03:f2:2d:2c:45:60:fa:82:1f:9d:ca:a4:d6:28:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:A0:5A:B5:A7:C7:99:98:BC:7E:AD:07:E7:76:6A:59:EF:E4:09
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f8:41:3d:27:00:95:80:8b:ba:06:6a:18:bc:a8:42:c8:9a:
1f:bc:49:c5:59:b1:c8:8d:fe:46:a8:c8:5c:0b:2e:02:33:7e:
e3:fc:05:93:db:2d:18:65:72:cf:a2:18:72:86:96:99:79:a9:
4e:d0:7d:8c:71:21:f8:a4:d5:83:3f:7c:9b:57:3c:f6:ae:01:
47:ae:a3:4e:35:c8:91:61:6a:e4:02:d5:c3:0c:ff:84:d2:3c:
85:c4:a8:bc:75:c6:c4:65:14:de:61:a4:e5:7b:2e:c4:8d:98:
30:5a:08:71:a5:d7:e0:93:19:5e:4c:18:18:ee:37:df:31:be:
b2:40:b8:0e:3a:88:c1:34:76:a2:05:ee:8f:de:93:ad:40:9f:
96:52:81:58:07:79:f9:88:69:2f:13:31:50:d6:13:e0:2e:8d:
ec:81:db:c6:7f:d0:9a:62:ba:b4:6c:d2:0c:49:9d:3b:1a:ea:
be:56:4e:02:b2:5a:d5:76:e5:c5:0e:56:c9:c6:bc:df:34:5b:
8e:db:a3:35:c0:4f:41:6c:ed:49:e9:84:98:80:71:58:37:f1:
60:02:cc:a5:9f:4c:0d:63:dc:8f:01:75:5a:a9:38:20:50:f9:
b9:6b:f5:39:13:47:8a:1b:46:8a:87:a3:4f:b4:bc:f4:94:97:
f2:51:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:51 2025 by rpki-client