Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: +WCI4Csyciv16f98/6++nsAHhArOFV/xVJGO5EkiEvg=
Subject key identifier: A7:14:DA:2B:D4:59:18:1E:31:2D:25:80:6E:2A:DB:3C:EC:46:88:C4
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 0195E158FCBBBFAF26724F2BADCD75B461DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 0477
Signing time: Sat 29 Mar 2025 10:01:00 +0000
Manifest this update: Sat 29 Mar 2025 10:01:00 +0000
Manifest next update: Sun 30 Mar 2025 10:01:00 +0000
Files and hashes: 1: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: 8zA0A62xpZ0A93fdJanUkOCyQZQFp84qPk+FF6zZjkI=)
2: WZpaBRHbJvV3APgauuka7IhrTjY.roa (hash: N7PJ6tT8+NoaNwurVN1hCRFlu22DLnLYMpbiTBoA0mg=)
3: ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa (hash: 6pwZz0N+RWGCnPxCzoJegCbH7w0PemUKcz6iq2EQKR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:fc:bb:bf:af:26:72:4f:2b:ad:cd:75:b4:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Mar 29 10:01:00 2025 GMT
Not After : Mar 30 10:01:00 2025 GMT
Subject: CN=a714da2bd459181e312d25806e2adb3cec4688c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:aa:1e:99:2a:cc:b0:0a:3a:78:f7:9e:b4:
28:55:d5:30:53:c0:05:0c:e5:1e:45:b5:4b:ca:ec:
95:71:b5:b3:75:29:84:ee:a8:d8:c7:22:13:0c:5e:
83:ff:0a:72:2a:fb:d7:e4:b5:1f:2b:66:d7:27:35:
d4:01:c8:d7:93:e3:62:e6:00:5b:f1:68:7b:80:3b:
5b:44:22:05:46:8b:55:45:0b:d6:22:38:78:81:5b:
70:36:7d:b2:e8:a6:74:a8:a8:12:16:c6:1a:6b:e2:
16:a1:aa:3d:a9:fb:42:c0:59:e9:bb:fe:5a:e0:35:
a1:84:8b:16:3a:a9:a2:e0:64:5a:a3:2a:06:b2:36:
bf:6b:94:52:f4:28:3b:21:a1:de:11:54:7e:9d:dc:
d3:12:e1:73:1f:06:dc:62:b4:90:f4:6f:70:9b:42:
aa:ee:60:4d:6e:43:7e:0b:c7:1f:57:8e:80:2f:ea:
95:e0:76:8c:85:e0:57:e8:fa:bf:54:bd:0d:53:a8:
1f:55:c4:7e:36:5d:bd:38:09:5d:f9:4c:bd:c2:31:
f3:14:ac:77:e5:53:c4:e4:1f:40:8b:2c:9d:d9:3d:
1a:2f:e7:a9:48:bf:82:f6:80:c7:f3:f6:fa:13:9d:
73:9f:96:24:5e:01:1c:98:83:fd:e4:e6:5c:b9:3f:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:DA:2B:D4:59:18:1E:31:2D:25:80:6E:2A:DB:3C:EC:46:88:C4
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e2:b8:65:b8:c2:74:3c:70:9d:ed:96:2e:48:49:14:66:9e:
04:1e:a9:05:b9:c6:89:09:91:4a:86:14:cb:5c:c3:41:70:00:
e6:2d:ec:1d:1b:9c:a7:85:c0:43:e0:ce:61:8d:3f:7a:1c:1b:
a3:6b:5e:ea:0a:15:9f:21:69:2d:61:12:e5:0c:e6:6b:2e:9f:
99:a1:86:6d:8b:03:cb:03:a1:57:48:13:4d:2c:91:fe:ea:8b:
59:7e:8e:56:f2:6d:10:0f:da:77:c5:b0:a4:aa:b5:dc:68:23:
e0:3a:03:11:93:3c:95:4b:51:18:7d:c0:00:ea:ef:11:e2:09:
19:a0:99:f2:e9:ee:42:89:ea:20:71:d3:3d:4d:50:36:3c:2a:
7c:15:03:9d:85:35:ab:41:80:fc:df:3c:bf:b1:33:b7:00:cc:
53:a6:a8:09:55:d1:61:15:36:b3:fd:39:2d:a3:79:74:07:20:
eb:ab:cb:04:56:32:21:8d:c0:bf:69:00:31:56:67:f6:d6:0c:
2d:f4:9b:14:00:21:c1:1f:23:03:57:06:8e:04:04:9a:d4:60:
53:bc:80:1b:9a:68:32:09:ec:c0:d6:60:91:44:67:22:37:89:
61:a4:20:1e:9d:74:ef:4e:5b:97:cd:3c:00:89:3c:01:d1:94:
2a:e1:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:51 2025 by rpki-client