Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: ya7xU/VMK7abxjPh0YA1cUB3xoxaTmOro7KRbD5XKnE=
Subject key identifier: 52:8D:F4:11:2E:8F:AB:63:25:7D:B0:45:8B:3B:2B:C8:82:58:F6:71
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 0194BC729B3C8132464FFE57BDAC437D0584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: Q78d5J5YSQOaRU8Z84yVIhu9brXyHQYR453TEJjPCu4=)
2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9b:3c:81:32:46:4f:fe:57:bd:ac:43:7d:05:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=528df4112e8fab63257db0458b3b2bc88258f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:e6:89:7f:22:f6:b9:ba:b4:cf:62:9a:0e:
9a:21:1c:70:c0:61:4a:df:5d:a0:a0:fa:9a:87:23:
ef:f6:7d:ff:9c:3d:b4:83:3d:f2:79:2a:8e:69:5f:
c4:c9:f9:fb:2e:99:85:4c:74:7b:f9:c9:16:d0:9e:
0e:35:3c:57:18:0e:38:2a:f0:f0:be:3b:a2:72:fd:
21:78:9c:24:64:b2:05:af:3e:2d:6e:c8:64:6e:61:
5e:93:fa:8d:79:50:84:bf:61:fc:9e:da:b4:f2:45:
2b:61:ae:22:fd:7f:4b:5f:78:d9:f9:c7:68:c7:52:
39:80:5c:36:74:ac:4d:80:c6:1a:df:63:6e:70:f8:
0e:89:58:ae:75:a1:78:c2:d1:16:8b:0a:8c:13:07:
84:4e:6b:41:32:a3:6b:36:27:1b:25:c9:a6:03:ea:
4c:bb:1a:e1:18:bd:d5:fe:c1:66:f8:8d:3c:01:5f:
f5:f8:b4:74:3d:ae:b2:58:2e:a8:4d:85:4c:44:6a:
a7:61:44:1f:32:c0:98:b1:a5:c3:ed:fc:29:b8:a8:
f5:83:06:65:d0:4f:c8:0c:3e:88:88:37:c6:29:19:
7f:3d:90:b2:30:24:24:fd:bd:9d:dc:24:bd:86:af:
ae:1c:c6:52:07:e6:c1:f3:90:7f:05:f3:eb:c5:bf:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8D:F4:11:2E:8F:AB:63:25:7D:B0:45:8B:3B:2B:C8:82:58:F6:71
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:51:cd:f5:97:7c:a7:77:ef:0b:0b:a8:01:f4:4c:85:1b:3b:
3e:aa:e1:f9:73:aa:bf:93:67:e3:c7:ad:6a:cc:8e:a6:58:84:
da:85:0e:1b:06:fa:84:1b:16:a2:ec:d1:73:27:f0:0a:bb:b8:
02:b9:e0:f9:99:47:11:a2:1a:eb:95:55:30:fe:bd:c9:64:8d:
46:f6:69:00:55:33:0e:8a:1e:4d:4b:0b:04:b9:82:3f:31:86:
1b:b1:e7:3e:00:6b:38:92:43:3a:4e:92:91:29:1b:2e:6f:aa:
d7:89:8c:51:43:e7:8b:ac:0e:9e:26:93:7b:86:ba:d0:ce:92:
d9:6f:a2:70:ff:da:fa:89:9a:ec:01:9a:e9:01:47:8b:30:56:
b3:29:30:d1:f1:6a:86:fd:d4:66:d8:69:3f:0c:72:42:c0:a3:
f6:89:83:9c:6d:31:af:1a:5c:c5:7d:fc:24:0b:99:ff:4a:6b:
98:68:af:6e:91:a1:d5:e1:bc:34:6a:ab:76:55:e3:05:a6:52:
cd:8e:13:9e:9d:9b:ec:a3:fd:79:61:30:17:d8:66:8e:cd:8a:
b8:04:83:5c:d4:a2:b9:53:59:eb:65:a8:fb:7e:17:85:4b:a6:
de:38:a2:16:0d:7b:50:e2:9f:62:73:22:03:40:f1:9c:51:5d:
92:f6:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:48 2025 by rpki-client