Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: ipWWbLde1v1+dUjt/tvuLwKFtWjw53MkzWySu/j5J08=
Subject key identifier: 2A:E0:6B:B1:21:45:2E:D6:16:8C:B6:2D:1A:01:56:E1:FE:B2:2B:C1
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 0194BD1790F26D5028326B43DF3333B98831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 099E
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: 16lqy0LI2mgImoDwFuL5EH47jpUo+Zk6zu8Ad9LWbSI=)
2: tut7oaWJNrhx8vDfjnadysvruEE.roa (hash: oXhco3AY4UNPZerjwlU5WNQYyYnT8TDpF5tOGRePMaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:f2:6d:50:28:32:6b:43:df:33:33:b9:88:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=2ae06bb121452ed6168cb62d1a0156e1feb22bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:5b:e1:54:f3:85:47:c7:a9:66:44:8e:1f:
d1:b4:a8:29:81:8d:ae:42:b0:e3:c0:3e:ed:b5:0b:
58:8e:6d:08:fa:a1:cc:25:6a:a7:83:6f:77:99:65:
4d:64:44:32:9c:e7:0b:24:aa:a5:15:9f:a4:f4:d3:
70:2d:b0:f8:56:91:cc:73:d6:c8:0a:ce:51:01:1e:
b1:d7:03:1a:56:54:64:b4:a2:7b:ca:6f:1c:f6:ea:
2c:fd:53:01:01:93:d3:d3:fa:3c:df:72:c0:53:9c:
ba:c1:7d:5c:5b:fc:3d:0b:75:bd:8f:0d:50:2f:20:
f6:34:50:69:07:33:cc:d1:23:d4:7c:0b:2f:f0:e1:
49:20:45:9f:c5:73:5b:24:e9:6d:cc:fe:60:c3:bf:
e4:78:de:f1:19:e9:2c:3f:e1:d5:5e:2c:69:7c:8d:
69:54:5f:c8:4b:27:d6:d5:c9:4f:9f:b1:23:22:99:
c8:55:4f:2a:5b:69:35:cb:7d:b7:b5:5a:a8:e7:01:
39:78:f4:3e:c5:9b:5d:88:08:31:80:b4:5b:38:34:
1d:80:e4:20:f7:7c:d0:11:93:72:2d:f2:46:35:07:
ef:4d:d0:93:13:ce:fc:d0:e1:f3:e1:5f:b3:c2:e8:
63:d5:ac:f3:01:51:39:67:6a:90:b0:d0:59:a3:c1:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:6B:B1:21:45:2E:D6:16:8C:B6:2D:1A:01:56:E1:FE:B2:2B:C1
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:bb:55:7f:f4:63:c0:be:d3:7d:cb:9b:2d:07:13:f0:51:
73:2a:f6:fa:68:b5:68:b3:28:c2:c2:2e:81:16:dc:b9:5f:84:
e7:7b:07:28:54:ee:b0:26:b0:48:19:ea:7c:90:79:74:c9:e7:
08:44:c2:15:97:83:e5:1c:a2:82:1d:3d:68:98:a0:e0:6c:56:
05:27:fa:8b:38:6a:74:f5:35:e2:75:8f:27:da:c9:a7:f1:b4:
2b:e9:28:1c:cd:9c:8c:e5:e0:e5:ad:b8:5a:5f:72:b3:bf:fc:
90:2c:ee:dc:15:18:8b:cd:82:cf:15:15:09:74:e3:10:2e:31:
2b:8a:ff:7f:72:57:d5:bd:8c:d5:2a:5c:10:f2:08:d0:0f:b7:
ab:73:7c:f2:df:0c:25:b3:13:3b:e8:6a:53:9f:57:46:b2:c1:
7b:49:e7:8c:60:cc:27:1c:58:5f:31:75:85:b2:e6:85:13:d5:
ce:86:3d:17:1d:00:81:5a:10:da:86:b5:98:9f:91:84:12:bb:
f5:21:ef:61:91:f4:ba:e2:77:8a:08:67:13:57:a0:d7:a1:15:
ff:c9:57:8c:39:b1:a3:b2:14:91:0b:35:9d:f3:51:5d:20:03:
7c:b0:62:c6:50:f3:cc:f4:9c:b3:ea:85:2c:97:28:db:5c:f4:
e9:db:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:21 2025 by rpki-client