Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: jHHflqHlvAINXKCWyU+dWVO9wXLJsbczST+AmHAU6PY=
Subject key identifier: 8A:CE:4D:7D:49:4A:F7:5E:32:A0:E5:C4:CB:E9:A9:B0:72:6D:67:7E
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 0194BBCE6A4FD76A47D101FCB829905C849F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0A98
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: 1-6fdP5POZdCNRV8X1LoCajvovjw.roa (hash: RU4H0XePghxqFcwMjjofJ5l0uoKzMR9zIRLDjSECb0A=)
2: GE__PPkA52quDSzS533-riTF0kw.crl (hash: HYJe3P358Bi/RVEYwclhavmhxo9Zajhmrf3Wl2Tr8Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:4f:d7:6a:47:d1:01:fc:b8:29:90:5c:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=8ace4d7d494af75e32a0e5c4cbe9a9b0726d677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fb:95:60:7a:5e:2c:8a:39:bc:0f:81:3d:78:
10:3b:fc:42:e6:67:f9:72:a5:20:86:1e:21:46:da:
b4:4c:40:d6:e4:82:c9:4e:86:e9:b9:02:e4:c0:be:
6e:5a:c2:6c:87:65:1a:07:ea:45:12:21:4b:fc:75:
4e:23:0a:fa:76:e6:be:d0:8f:d0:1d:dd:18:24:a9:
86:2d:a2:81:8e:24:c7:49:d9:5f:4f:5d:b9:a0:e8:
cd:3e:a5:e9:9b:bc:af:27:16:24:94:e5:0a:c4:0e:
a6:f1:00:9f:90:08:01:f1:9b:a8:77:dd:e3:12:83:
a3:67:e2:34:60:99:cf:03:36:07:42:46:19:4d:13:
5f:6b:e8:22:dc:32:67:c8:07:4d:73:57:16:53:b0:
f5:8d:5b:c1:b0:4f:fc:74:11:dd:2a:dc:ee:89:de:
45:54:1b:6f:cb:a6:e7:59:56:5c:7f:25:aa:38:fd:
36:c9:e8:5f:b9:9b:5e:a6:a2:d4:c1:d1:36:4a:cc:
75:26:75:11:85:1d:7d:5f:78:df:4c:ac:b0:c2:72:
33:6c:f1:e1:35:07:83:4c:ab:05:8e:7b:cb:37:e1:
c3:ce:cf:96:f6:bf:14:59:e0:fe:53:7a:2b:22:04:
72:fa:ef:ea:c0:45:87:d5:19:9f:bd:c1:28:ff:ac:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:4D:7D:49:4A:F7:5E:32:A0:E5:C4:CB:E9:A9:B0:72:6D:67:7E
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:68:fc:d2:a7:b0:57:c9:75:15:fd:a6:b8:84:f5:e8:5e:c4:
e7:93:df:53:b5:86:a1:d8:a6:b9:d5:7c:d9:69:a3:b9:1e:13:
40:56:e4:06:94:62:a9:30:98:e7:ba:f5:5d:63:79:38:ec:1d:
8e:ba:8d:d2:c2:87:c8:8e:ed:6c:e9:f0:a8:07:b4:b8:67:69:
8d:7b:7f:8a:96:02:eb:67:02:5c:d2:c8:23:66:1a:34:4a:77:
e8:64:a5:8e:fd:09:74:30:c1:73:ed:7c:ba:58:cc:b9:a9:45:
b3:6c:57:32:60:07:ae:5c:49:84:87:e0:34:4c:91:3a:45:8e:
de:d1:81:b7:60:33:b4:19:5f:1c:3b:52:09:bc:cf:34:10:60:
c6:4c:98:95:77:0c:bf:28:e2:b5:04:e7:f6:30:5c:1c:9b:d0:
9b:3d:c4:d9:c8:30:77:7b:77:51:68:06:38:de:08:2c:51:fe:
e6:07:5a:ca:67:c1:be:7c:b9:bf:60:9a:68:06:93:f1:5f:2f:
31:4d:d1:d3:93:58:a5:be:09:69:6a:63:01:86:dd:9f:74:a1:
d3:ad:37:85:33:e2:ba:6e:5d:4a:4a:3e:70:79:c7:2a:e3:40:
00:1f:70:a7:1c:3b:05:32:73:14:45:b6:9d:4d:f7:d1:b8:d2:
6b:65:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:11 2025 by rpki-client