Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
File: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft (raw, json)
Hash identifier: 8uCdpavviuJrjmM8Lim85cP4xYP3IgaB1wb5oxGrE40=
Subject key identifier: B0:57:BE:ED:37:B1:D0:4C:3A:52:EE:D7:CD:C8:C1:DD:B8:F0:F8:68
Authority key identifier: 1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
Certificate issuer: /CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Certificate serial: 0194BC730FD59E9511915D56FDF821869B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
Manifest number: 0CE7
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl (hash: KitKUFpqzVe5VOpCdHs4+gxXceBpBl2Lk5E6TXXeJJM=)
2: dhbqsDMCYbdJQ5KWes-T7R0t68c.roa (hash: A26S4K/y1MLobATqv2Mkxdn527XJqQ0E6NlZCnsWU/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:d5:9e:95:11:91:5d:56:fd:f8:21:86:9b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b4b5c2daaa6fc35071f438f968af6ff6ca4da
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=b057beed37b1d04c3a52eed7cdc8c1ddb8f0f868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:2d:21:66:e8:e1:11:7c:e6:87:e6:95:01:
2d:27:5a:f1:b9:ad:3f:25:86:46:f7:5e:e1:63:96:
c9:86:e9:49:44:a0:c3:06:21:a4:df:1e:55:33:7e:
26:42:ec:01:84:e5:a7:84:ba:62:0b:7f:7b:4c:4e:
6f:a7:3b:f7:8c:6e:b0:f6:a7:e2:3b:f5:ec:be:62:
71:26:2f:cb:3c:22:71:33:fc:a5:65:7b:6c:8b:31:
67:7a:22:ad:92:99:0a:f4:03:a0:fd:b6:2c:ac:9c:
0d:a0:b3:c8:70:b6:94:4b:98:e0:81:e7:c3:50:d0:
9d:34:36:a4:bb:ee:d0:09:57:f3:d1:26:ca:73:4a:
ba:4e:23:69:c8:3e:82:43:b4:5d:47:0e:34:12:97:
92:83:d9:bc:b1:87:fa:24:3d:48:2e:b0:6d:d8:3a:
4f:78:39:65:80:a1:39:ea:7a:62:a1:e5:59:e3:58:
21:66:1c:20:fd:52:6b:da:9f:12:df:49:d0:62:b6:
8e:aa:72:71:ee:85:8c:05:6c:c1:93:50:37:88:0a:
cb:95:09:9d:39:8c:84:a0:f7:cb:32:13:7e:3d:49:
5d:91:22:87:b5:52:3e:86:21:12:1a:06:00:b3:94:
87:67:86:90:3b:a6:37:94:2b:20:33:06:61:54:d4:
bf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:BE:ED:37:B1:D0:4C:3A:52:EE:D7:CD:C8:C1:DD:B8:F0:F8:68
X509v3 Authority Key Identifier:
keyid:1B:1B:4B:5C:2D:AA:A6:FC:35:07:1F:43:8F:96:8A:F6:FF:6C:A4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ddac0d-3743-4cd2-a6a3-a1246c67d9de/1/GxtLXC2qpvw1Bx9Dj5aK9v9spNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8b:da:4b:44:d7:f7:10:35:5d:dc:ea:3b:ac:b8:96:05:c9:
96:56:a7:8b:1e:b1:ca:85:1e:d2:e3:de:37:04:68:e9:ac:36:
ea:c1:58:e6:b9:e5:1c:58:69:07:66:6e:d8:63:18:ba:77:8a:
eb:02:86:ff:0d:a3:4c:ca:07:41:a2:40:67:af:49:d4:53:af:
74:6b:4d:eb:c1:dc:e4:20:45:12:6f:df:b2:a9:8b:f7:4b:47:
a5:da:57:bf:00:c1:d3:b6:0b:50:33:f5:7a:be:b4:a8:37:7f:
56:b2:f2:5c:b3:eb:55:d8:64:58:79:0f:8f:75:39:54:b5:c9:
38:80:0e:0b:92:ce:bd:6a:3f:15:1d:1a:ef:95:09:c7:7d:83:
bc:ab:a3:31:ec:d5:57:b7:06:fc:a6:5f:63:92:85:86:8e:a3:
da:09:c9:2f:c1:c4:6a:ce:b3:87:42:08:44:e4:ac:73:09:b7:
2d:0b:c4:26:b4:07:85:50:c9:ec:ef:af:ef:86:ed:b1:3b:8e:
35:ff:81:5d:a8:19:78:b8:b3:76:8c:fe:97:d6:8a:f5:ed:f5:
a4:e6:34:6c:5f:d3:b8:b1:e3:2a:33:6a:03:e1:75:fb:74:e6:
82:5c:20:e0:02:40:ce:57:a2:ff:93:26:0d:21:d6:a1:54:aa:
b4:d8:23:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:57:45 2025 by rpki-client