Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: qthKLWOwusI/XO/RRv01TlWVPFob29ztmK3dyw5VtqU=
Subject key identifier: AD:E3:0D:47:DB:39:24:C6:71:F2:2D:24:03:9E:1D:0F:34:61:83:D1
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0194BCE0E81A0C66A6F6B3C51494F092EE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 099D
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa (hash: D2au3KjqostxFd8JOgURC1OsvCTG2y74Gi/MCmrs9II=)
2: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: eZfRFweFlGHUaNdmzFFRh5tvQcUE06smE/afdmYPl0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:1a:0c:66:a6:f6:b3:c5:14:94:f0:92:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=ade30d47db3924c671f22d24039e1d0f346183d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:f4:a2:9a:b3:0b:96:b6:01:e8:3c:53:69:
b6:ef:ef:36:8d:e8:51:e2:32:7b:87:f5:bc:c1:cc:
85:9b:9a:d1:d7:59:80:9c:26:cd:2a:f7:15:ab:04:
68:84:a5:bd:fb:23:40:4a:e1:3d:97:85:55:ee:28:
51:0a:c3:76:97:24:9a:f2:11:6b:f4:06:e2:83:99:
f8:3e:ec:14:36:42:2f:ef:fc:ae:ec:f0:b0:ed:32:
04:6c:f5:7b:6e:3c:c7:bf:2f:55:37:87:71:74:1a:
d8:2a:e7:7d:52:21:d1:2e:98:90:e2:3d:5c:59:8f:
97:dd:cb:4f:ae:97:5d:c7:fc:66:05:11:33:b0:ef:
e7:3f:08:83:99:3d:7b:34:8e:c5:2e:85:ff:e6:0a:
79:79:0c:47:67:ef:e7:76:62:9e:36:e8:10:98:f1:
56:a1:1b:fc:23:fc:d7:d9:64:2b:8f:6b:91:0d:62:
34:80:be:03:a9:2e:50:80:c8:59:35:ab:ae:7a:7b:
8f:64:3d:b4:73:36:04:6a:ac:e1:23:6c:db:8e:78:
d5:36:74:d9:22:6d:a8:3c:e3:49:a5:dc:90:db:9c:
aa:1e:c4:1b:e9:66:24:c8:08:c4:eb:06:03:f3:fc:
c1:43:37:46:98:e3:3e:2f:47:68:65:90:e5:25:ab:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:0D:47:DB:39:24:C6:71:F2:2D:24:03:9E:1D:0F:34:61:83:D1
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5d:78:1e:0e:5e:5a:68:4e:bd:39:27:4c:53:f4:54:83:8f:
9e:9b:dc:53:16:52:30:86:8b:dc:a0:aa:e9:18:87:41:d5:6c:
c3:fe:73:3d:a2:5f:74:07:0a:14:98:6d:35:ae:61:27:4c:07:
4a:75:a9:6d:70:f7:47:bc:d2:93:d3:64:d6:9f:2c:bd:91:a3:
2d:91:a2:92:05:97:90:24:2f:a5:be:a1:7a:87:1c:1f:bf:2f:
f0:07:eb:f5:60:7d:79:95:e7:45:f5:d2:48:6a:6b:24:b7:a5:
9b:c4:2c:50:d5:5e:a2:f7:9b:b9:a1:0b:2f:74:3f:35:e8:f4:
a3:90:9e:5b:6b:90:66:60:1c:47:49:bd:fe:b9:92:cd:44:09:
3d:d7:c0:ce:34:e5:6e:b6:b5:93:9a:94:6e:88:88:f3:13:28:
9e:8f:44:74:8b:78:18:7a:2f:53:7b:5c:ba:5a:b5:7c:b9:4b:
e9:cd:6c:c0:2b:be:44:9f:5b:4a:4b:34:5f:ab:a9:f6:bc:0d:
9c:b1:e1:d9:9a:98:9a:8c:81:80:53:97:5d:72:77:60:13:2a:
9d:a8:11:ca:4b:5e:fd:d6:d1:71:54:41:13:31:02:68:d2:bc:
e8:ac:b5:45:30:95:c5:46:84:25:72:96:a1:93:ea:b1:85:ae:
47:bb:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:31 2025 by rpki-client