Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
File: GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft (raw, json)
Hash identifier: rCl/GcniZHuuBM3NNQhKe9kL6T6qHEyw9S/D/u7TE2I=
Subject key identifier: 8F:4C:7D:ED:F3:AB:6A:51:09:95:65:9E:10:5D:B2:01:F7:A1:7B:E1
Authority key identifier: 1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
Certificate issuer: /CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Certificate serial: 0194BD855BB70293BA4DF92C744FE7720D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
Manifest number: 0801
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl (hash: Pio2bbQIHkCaeGxrkghg0aeDeDzwVCbHJIQWiHj4mnk=)
2: rXUz4Cja7Rn5f2K-Nekwfgc7eDw.roa (hash: fOnAbwYbkSj5pWsL7oCaEBc8d/CJJxJmdgkbmFTZcpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:b7:02:93:ba:4d:f9:2c:74:4f:e7:72:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5be155037eb7e65c12ac9aa2a2c325038c3a9b
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=8f4c7dedf3ab6a510995659e105db201f7a17be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:ea:02:43:2c:47:d8:3b:cf:e5:7b:ce:98:
d5:48:ea:be:de:2c:6c:1c:3e:1a:e9:42:b8:36:32:
83:a4:a6:f5:69:8d:2a:bf:82:f9:a9:d0:34:9b:10:
10:92:a7:fa:e3:c3:2e:1e:1c:6e:d4:db:4d:a6:9e:
d8:57:65:c8:a3:4c:3f:62:bc:b6:f6:0b:67:d2:55:
8c:55:f4:64:d7:db:d9:98:75:4f:8a:32:fe:b3:17:
b9:7f:33:a1:e5:2b:0a:ce:d2:83:c6:11:93:40:bc:
e4:a5:d2:a1:f6:41:88:22:9d:ca:91:45:98:98:e4:
95:d3:67:d4:e6:33:8a:73:20:48:9d:30:cb:ec:93:
9d:36:0b:35:80:06:84:86:27:eb:15:8c:72:26:4e:
25:65:74:3e:bd:c2:ce:5d:2f:25:1e:55:2b:9c:83:
90:e8:b3:99:d9:82:0b:ba:50:55:27:53:c6:a9:e5:
19:3f:eb:dd:5e:30:de:18:ab:26:44:c4:2d:08:35:
7c:49:b7:17:c6:a2:15:2f:8e:4e:a9:5e:a9:e5:26:
48:e1:30:9d:7f:58:c2:9a:1e:03:95:7a:c9:bf:a4:
3c:dc:f8:b6:90:81:49:52:6e:d0:1c:d3:d9:fd:2f:
2b:53:23:1c:4e:26:10:dc:71:5e:9c:fc:c5:1a:f6:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:7D:ED:F3:AB:6A:51:09:95:65:9E:10:5D:B2:01:F7:A1:7B:E1
X509v3 Authority Key Identifier:
keyid:1A:5B:E1:55:03:7E:B7:E6:5C:12:AC:9A:A2:A2:C3:25:03:8C:3A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlvhVQN-t-ZcEqyaoqLDJQOMOps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/151e05-7942-490d-ad19-2ec8717ee30a/1/GlvhVQN-t-ZcEqyaoqLDJQOMOps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0a:d9:c4:6a:92:7f:dd:32:2c:c5:a1:f0:d5:14:62:5d:00:
9e:df:06:a1:f9:aa:8b:be:97:cf:36:35:28:6b:b1:b8:fa:35:
13:34:b3:5d:5c:fd:63:f0:79:dd:cc:7a:07:59:e2:da:b6:1c:
0d:a6:55:b2:95:7c:22:f9:dd:33:24:77:e4:5c:d2:9e:9b:91:
83:79:6b:7a:9d:96:54:a7:b2:b4:d4:51:b5:aa:fa:80:a3:a3:
ab:1a:ad:f4:c5:d0:89:76:61:f3:90:2d:dd:88:93:b2:9e:12:
45:15:bf:d7:68:02:f2:f6:0f:77:95:6d:f8:3e:13:84:77:85:
d0:87:13:de:2f:10:79:02:30:1c:8c:3a:b8:6a:d9:87:b7:fa:
0a:b2:97:a7:26:4b:8b:61:79:99:ff:b5:a3:e1:e5:58:11:65:
27:ab:de:5c:09:02:8c:f3:06:ee:65:2f:7f:6e:72:d3:ab:f0:
7b:5d:17:19:e7:a5:c2:e5:75:fd:ff:24:79:02:82:c6:ee:c0:
39:d0:f2:56:5e:a1:66:26:58:a9:86:b1:3c:9d:68:3b:a7:53:
c1:46:02:ac:e6:6b:ca:07:53:9c:7c:b6:4b:83:b4:be:c4:53:
69:31:25:c2:69:c0:19:1f:3e:e8:15:82:b0:c7:c4:12:e6:2f:
37:15:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:02 2025 by rpki-client