Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File: GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier: Jt1Qzs5jGV8ILMO+7qW5NIC91adifNw9hhuxIZ4nJHI=
Subject key identifier: 4C:17:D2:E7:85:3E:64:08:82:B1:AC:49:91:13:DD:C6:D3:F7:A7:4C
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer: /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial: 0194BC04D5C6BB25BC75554D1408BCFA357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number: 1257
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: +u4Th1iaTRQJdrr8P0g/JssB0WE67hb5p4YY1CUCb1k=)
2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d5:c6:bb:25:bc:75:55:4d:14:08:bc:fa:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=4c17d2e7853e640882b1ac499113ddc6d3f7a74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:68:34:ca:af:66:60:ba:bb:63:ed:ff:8a:
44:46:3c:c8:10:db:d9:02:3d:9b:2f:f8:89:ca:82:
bb:cd:83:e0:5e:21:7c:df:7d:63:81:12:d6:35:fc:
a8:f0:dd:d2:62:b5:27:c8:37:ca:2f:07:cd:37:5e:
78:6f:53:b4:af:ef:40:2a:89:85:f8:85:10:f6:0f:
aa:33:d4:76:8d:16:18:7d:8d:3e:81:4d:22:f2:40:
7c:29:01:b1:77:19:77:3c:09:b1:7d:f4:ae:68:10:
ac:a9:e8:a0:ac:4f:f0:fd:10:49:9c:0b:9c:33:ca:
79:ad:dd:ac:fa:62:07:92:a2:42:da:0d:6c:e8:f1:
25:d3:71:2f:b4:77:fa:f7:4d:38:3a:11:85:ca:3c:
c2:9b:4a:29:e1:21:db:34:67:ac:da:12:d9:8d:ec:
c5:26:4d:35:ea:80:ea:d6:b5:b0:8e:d8:df:e2:e1:
0c:8c:06:bb:6b:1a:f0:0f:f0:ff:7c:12:f9:d9:7c:
35:76:a0:12:2e:a0:44:e8:c3:ef:70:3c:55:5a:88:
ba:a9:45:1f:09:f4:d3:62:0b:b6:00:a7:f8:b8:3a:
2a:58:e6:b8:92:83:85:da:6f:2c:67:48:ed:52:45:
0b:c8:01:4f:e1:c2:f8:bf:ba:ab:3d:63:66:57:00:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:D2:E7:85:3E:64:08:82:B1:AC:49:91:13:DD:C6:D3:F7:A7:4C
X509v3 Authority Key Identifier:
keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2a:07:83:e0:59:9f:25:3f:de:c1:b5:81:59:e2:06:c4:c6:
5f:55:be:79:20:b2:70:6d:bd:0b:39:52:c6:1e:49:2c:c0:39:
6f:79:c8:01:a7:18:b4:7b:e9:00:bc:02:1d:92:ca:d2:a6:e6:
c0:7e:2a:82:e0:86:bd:e9:a4:ad:ab:6e:5a:20:8c:e4:e7:4a:
91:d7:4e:bf:54:98:f7:74:18:d1:b8:22:51:75:43:ba:8e:ad:
4c:1c:fd:14:9d:81:af:69:bc:de:5f:71:8a:b3:75:c2:36:c6:
8b:d4:be:0c:1a:fb:36:fa:ed:53:cf:6c:ad:71:38:9d:88:03:
71:8b:0a:34:0c:c1:ba:67:ad:1a:9f:e6:59:e8:67:35:55:a6:
02:e4:75:38:7e:7c:27:76:3e:97:2e:f6:fb:f0:09:bc:22:26:
8b:0c:18:de:a5:00:02:80:37:19:e4:c1:7b:56:d0:73:3b:f8:
f8:55:e9:ab:66:cf:0e:9a:de:81:22:62:3d:a7:09:7d:e9:e2:
92:e8:90:81:08:4d:a8:90:88:bc:7d:99:03:21:70:4e:a2:b2:
28:d0:43:f4:2b:ee:97:0f:9a:26:89:7d:43:fe:e2:6c:ea:dc:
8d:b5:de:18:e3:38:4d:5c:62:13:8d:29:db:c6:4a:be:c2:6a:
70:0a:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:05 2025 by rpki-client