Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
File: GzKDA753IAE7cIOOSOupO0IDh90.mft (raw, json)
Hash identifier: RN1VF7Kc3KhvBUVapGWlDVbTdEP8fC2TebbPwXghDQQ=
Subject key identifier: EE:2D:99:7E:15:D7:F0:6D:76:84:16:B3:7C:E3:76:98:FB:A5:4E:DE
Authority key identifier: 1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
Certificate issuer: /CN=1b328303be7720013b70838e48eba93b420387dd
Certificate serial: 0194BCA97B491FDF4055E57963F477A46ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: GzKDA753IAE7cIOOSOupO0IDh90.crl (hash: Q63YHDJpyvOPBdyOVjqlpy021qwXtP8bPCoqS9uQxEQ=)
2: aLfo3q6L0mVOuK0za6OIf6mWxIg.roa (hash: 7LeZnYMqXpBceqMPtLfdcEQrWgVh8yNUNh6lUyY5uzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:49:1f:df:40:55:e5:79:63:f4:77:a4:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b328303be7720013b70838e48eba93b420387dd
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=ee2d997e15d7f06d768416b37ce37698fba54ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:50:27:f7:41:7a:d7:40:59:f5:0b:42:40:
7f:bb:74:d7:a0:7c:d1:9f:f0:35:75:1b:fc:61:db:
f2:8e:c1:5c:53:05:27:24:1f:cc:d9:8b:01:3f:49:
9d:a9:31:5b:9b:64:0b:5f:13:3f:6e:ec:53:18:4f:
39:19:ef:44:57:44:97:1b:f8:d0:79:1f:55:33:d4:
67:eb:84:b7:a5:c9:56:e5:b1:ca:61:22:ad:1a:a9:
b1:97:f3:0d:18:00:e6:84:af:59:97:85:3d:8b:57:
f1:f6:2b:5c:b0:fd:93:7d:c2:0e:49:48:45:92:87:
ae:ba:9c:f6:0f:e6:6b:a9:09:08:16:99:cd:78:01:
1f:7b:07:dd:a0:5d:cf:d5:c7:1d:d8:3d:e9:21:8b:
e9:11:26:82:23:15:7e:6f:1c:b6:fb:86:59:df:10:
c3:8c:c3:a0:a7:49:5f:65:19:8a:75:4e:bc:3f:3e:
0f:d7:46:0c:fd:e8:52:b7:85:3d:b7:18:c7:c7:a0:
1e:22:4f:51:da:d8:1b:6f:f9:48:92:de:66:d4:b4:
60:7b:a5:10:e9:84:d0:c1:c1:7a:0e:27:7e:db:f8:
e6:10:55:43:c5:f9:25:1f:e2:90:78:5c:76:c0:39:
35:18:1a:b9:ad:35:53:59:4c:f5:e5:2a:e2:3f:0e:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:99:7E:15:D7:F0:6D:76:84:16:B3:7C:E3:76:98:FB:A5:4E:DE
X509v3 Authority Key Identifier:
keyid:1B:32:83:03:BE:77:20:01:3B:70:83:8E:48:EB:A9:3B:42:03:87:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzKDA753IAE7cIOOSOupO0IDh90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eb3207-8410-4046-a449-760ba7436c24/1/GzKDA753IAE7cIOOSOupO0IDh90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:af:4a:71:cb:ed:19:65:ea:16:b4:3f:f8:a4:32:5e:6d:
b9:3f:4c:dd:16:f5:f2:86:e5:15:65:ed:3e:e8:44:23:8b:45:
9b:65:a2:e6:46:dc:a6:18:c9:bc:c5:b2:e1:d8:63:c1:67:58:
c5:89:e5:5a:b4:ef:5a:7e:06:c1:43:25:44:9b:50:1e:44:37:
42:d8:fc:3f:4c:7f:9a:d6:74:46:b8:47:7a:22:e0:2a:ba:db:
69:84:e2:8e:31:7b:11:47:fb:e1:35:cc:34:a1:8c:fa:6e:c1:
fd:05:6d:20:a6:07:74:2d:ff:3d:30:9c:0a:c2:31:00:4d:a7:
57:62:47:5a:91:aa:3d:a4:66:24:31:bf:56:c4:41:e6:d1:ac:
ed:f6:63:61:c4:91:38:2c:7f:57:78:32:66:3f:9a:8d:ea:45:
dd:75:37:ca:b1:62:5c:e6:12:6c:15:0a:89:cf:54:44:7f:fe:
41:cb:90:be:7a:39:33:9b:47:11:bf:1e:c7:a4:9c:6e:cf:c2:
85:69:1b:c6:00:03:f3:ce:6d:49:21:92:8d:ef:98:ad:d1:ab:
5f:e8:3f:11:2e:19:09:02:4f:26:b3:2e:50:f1:38:63:ec:ee:
cb:28:94:61:df:02:e2:54:51:43:2e:94:4e:0a:79:62:38:87:
e9:6b:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:14 2025 by rpki-client