Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File: glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier: HUKMEkpI7U7AjFUTzhBTR7vBf6793QXDxB0TCmGw81o=
Subject key identifier: F8:CC:7B:1F:FA:8B:ED:EC:00:E2:CB:B0:5F:1E:DA:5C:05:68:F2:EF
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 0194BD175D19FAFE655E74924E155CDB02A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: BiweuLnHoWiHw0dJtOKVLYe5VXw.roa (hash: v5I7lbo3yrRW4OdIb5Z9T1Oajdn5oMeqluzGbBuYfMA=)
2: KyxetZabMrCwSGQGlQiCSSpLezw.roa (hash: lB6fVKgf9Cm2eRE3kdPJEkhSEzxtd0NAC6g5PlzMoxw=)
3: SkHxUs-FrIQyM07xjoxzMJo0A-0.roa (hash: pe66sdl4nqsnLQs5V6pFP+Jxy3p0QpIUCzbid73OCcA=)
4: _muTs8Yrozyvhukvws4l05B7mTo.roa (hash: LD706s8S0q0ox0+6TKcyKrOGDjOk87XG1dzJqAoo9NE=)
5: dvbWlIR_nyOoTtNcYB_wCKbM8x8.roa (hash: vqMhD9X26YxNwUr/WhYc7U9uIGwJ0S9qj2YKPJvFuT0=)
6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: emry8Tko2j5jV9FyYIfCUF7IxDj6ooaPgXPjyKXkioY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5d:19:fa:fe:65:5e:74:92:4e:15:5c:db:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=f8cc7b1ffa8bedec00e2cbb05f1eda5c0568f2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:e8:32:ca:62:0a:cb:61:2c:60:5c:ae:06:
4e:ae:21:3e:27:48:8a:e7:3f:b7:fc:84:d8:b4:8d:
f0:4b:63:1f:5b:b0:23:d1:9f:50:d2:3d:e3:a9:ba:
97:c5:38:13:ce:1a:7f:dc:9c:11:d2:78:05:e1:d3:
81:33:3d:a5:db:42:7e:1d:8f:1d:49:9d:04:eb:2a:
56:45:93:0f:d6:c8:1d:e6:cb:12:72:59:0b:f6:01:
7c:f8:1b:13:3a:7f:74:c6:a8:b7:37:d9:8a:ed:ff:
ad:b1:f9:6f:3c:83:e1:b6:c9:5d:96:06:3d:8a:a1:
3e:ca:33:23:3a:34:48:7d:f9:3c:71:ef:a0:61:d3:
ec:05:c3:d0:91:51:ef:39:e1:10:e7:2e:94:17:1b:
40:35:b5:d6:aa:63:82:a6:ee:54:3f:52:f4:83:8c:
8a:1f:e9:28:9b:83:9a:5f:fc:c0:11:d6:e6:40:18:
de:ad:e1:80:04:ea:bb:fb:f6:d5:68:f1:fd:d7:7e:
53:8a:08:c6:9e:3f:36:57:eb:ad:2e:77:44:4b:50:
f1:bb:a0:f4:8b:d7:93:76:3a:da:53:79:9d:b4:a2:
d7:b9:6e:aa:1e:b6:76:21:ea:42:f6:91:b8:1e:f6:
5c:01:98:e2:d8:b1:d1:58:a0:59:19:45:d9:19:ab:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CC:7B:1F:FA:8B:ED:EC:00:E2:CB:B0:5F:1E:DA:5C:05:68:F2:EF
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3c:0d:84:f0:30:25:b0:4a:4c:10:6f:78:aa:df:e2:e7:72:
89:04:be:13:7a:43:06:fd:4d:27:a1:74:a7:b2:8b:c6:ec:d3:
b3:a7:0a:fe:8b:f7:64:46:d8:5d:67:39:42:01:f0:85:c4:1d:
50:0b:fa:b7:7e:ad:50:b3:95:a1:7f:c4:37:a9:82:e6:e1:ae:
ff:df:55:1a:bf:64:68:be:a5:1e:ae:a5:7c:2b:86:2d:26:5e:
40:37:7f:00:b2:ce:03:1d:e1:b5:62:09:97:e1:df:27:e9:57:
cb:d2:ed:47:9e:db:19:4c:49:f7:2e:c7:40:34:88:52:ed:d8:
64:c8:c3:d5:9a:ee:33:8d:29:5d:ec:68:b9:d0:5b:d6:8e:a4:
da:8e:f0:ac:ae:c9:e2:29:f5:fb:1a:4c:45:52:51:3b:c8:67:
00:6b:c8:ec:d5:9f:27:40:39:10:c5:ea:7e:c6:6b:f5:c4:e2:
9d:a1:79:0f:4b:06:ac:b2:78:fe:98:22:82:0a:7f:e5:41:30:
72:bf:aa:fe:5c:bf:3c:c0:ff:f2:7d:e7:94:2f:19:1b:8e:1d:
97:08:a2:97:ca:11:f8:2c:4f:55:e1:93:3f:53:e0:e0:b4:f9:
11:ad:f0:aa:de:1e:d2:8c:e1:7d:38:38:38:73:70:f2:8d:ab:
d8:b8:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client