Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.mft
File: GKp1ajfUz8vBciugRAMZtHpjclU.mft (raw, json)
Hash identifier: FRtppfmBdv78QP2+4vvJHHSRVL155ATCYG6+p8O25Yc=
Subject key identifier: BB:56:ED:E1:3D:E3:A4:AF:14:90:06:EB:A2:7C:44:12:00:D0:FC:CC
Authority key identifier: 18:AA:75:6A:37:D4:CF:CB:C1:72:2B:A0:44:03:19:B4:7A:63:72:55
Certificate issuer: /CN=18aa756a37d4cfcbc1722ba0440319b47a637255
Certificate serial: 018F17B441B9E489CBDE8AC96FEB4D5B17BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKp1ajfUz8vBciugRAMZtHpjclU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.mft
Manifest number: 04AF
Signing time: Fri 26 Apr 2024 00:00:40 +0000
Manifest this update: Fri 26 Apr 2024 00:00:40 +0000
Manifest next update: Sat 27 Apr 2024 00:00:40 +0000
Files and hashes: 1: GKp1ajfUz8vBciugRAMZtHpjclU.crl (hash: u3xYE8iWXF23lcXlhCgYH6afX/+OoHn4RlnSnZTuJ0Q=)
2: cNzgd_FSu4Okut14MhdXOCC_4yk.roa (hash: Qy3KIXHioTjFeyaTLeKCPDEKWkRqraYh6BVbdgBgPQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:b4:41:b9:e4:89:cb:de:8a:c9:6f:eb:4d:5b:17:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18aa756a37d4cfcbc1722ba0440319b47a637255
Validity
Not Before: Apr 26 00:00:40 2024 GMT
Not After : Apr 27 00:00:40 2024 GMT
Subject: CN=bb56ede13de3a4af149006eba27c441200d0fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:4c:a9:8b:5a:59:02:bd:61:79:b3:34:3d:
17:6e:17:da:70:18:54:5b:6d:36:15:23:80:19:e9:
2a:0f:7f:7d:e6:8a:99:1d:77:b1:ab:18:fd:58:b2:
a5:9f:2d:71:f5:45:d5:f4:f8:06:3b:a0:72:63:44:
cb:a4:57:e7:e3:94:dd:b5:d3:34:76:9e:7c:11:68:
7f:b5:a4:eb:a2:40:ee:65:90:9a:ac:4c:57:24:4c:
5a:22:a9:1f:36:3c:18:c3:30:4d:22:7b:01:a2:54:
05:17:82:c8:f1:ab:3d:5b:bb:03:9c:25:d6:ba:69:
fa:1b:5f:cb:16:3f:ef:c4:7e:9f:03:17:da:6f:61:
c3:03:8c:c6:5c:d1:45:df:11:e2:44:e0:37:bb:9f:
85:d2:a7:3d:69:18:c5:4d:95:b4:70:d2:2b:1a:df:
20:d7:d9:55:35:c4:89:f3:3a:6d:9e:8d:3d:15:83:
ff:52:c9:82:46:78:35:9b:19:42:cf:df:a1:81:bd:
2e:a7:a1:0d:a8:5f:02:f7:95:a3:b4:6e:1b:03:f0:
88:10:e4:73:35:4b:b5:e9:c5:6e:1a:10:81:84:28:
c9:aa:f3:78:58:57:71:52:91:10:7a:fa:39:a2:97:
b4:9a:a5:62:59:10:6d:99:60:13:cc:74:fd:49:9b:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:56:ED:E1:3D:E3:A4:AF:14:90:06:EB:A2:7C:44:12:00:D0:FC:CC
X509v3 Authority Key Identifier:
keyid:18:AA:75:6A:37:D4:CF:CB:C1:72:2B:A0:44:03:19:B4:7A:63:72:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKp1ajfUz8vBciugRAMZtHpjclU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7d0f19-503e-4e77-b5c8-adf618581325/1/GKp1ajfUz8vBciugRAMZtHpjclU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:10:51:f7:e7:79:4d:1b:25:f8:55:4d:e9:d7:73:57:3a:d4:
24:79:f3:01:58:c1:c7:43:de:10:81:6d:37:ee:ea:e7:bd:1e:
4c:9d:3e:53:04:8d:54:bc:d6:03:41:11:79:c5:cf:91:c6:1f:
66:4b:fc:a4:4c:42:bb:47:cb:9a:66:5f:f6:2c:f1:38:68:b8:
cd:09:fd:f1:80:2d:0e:4c:6e:33:a7:cd:cc:a8:4f:d5:bf:22:
4f:36:93:84:83:f3:f6:ab:a5:b3:96:bc:4f:19:d0:9f:3e:f7:
74:b4:ce:da:60:05:c1:de:37:fb:9c:c4:3b:53:54:ba:17:aa:
b1:91:b0:6d:14:d2:67:a1:e5:43:3e:6d:39:69:36:b5:14:6f:
11:33:08:72:ba:9f:9f:a0:97:b5:87:e3:5f:4e:f9:19:ec:78:
08:8e:87:c9:22:b2:4a:e8:24:b6:fe:22:e3:47:1d:68:a1:b3:
e4:55:5f:ae:c7:33:7b:75:8e:79:32:ae:7e:e3:b8:31:f4:27:
4a:6f:9e:08:60:b4:53:e1:be:d0:25:f7:bf:4b:9b:63:78:8f:
91:8f:96:c8:77:00:27:f2:10:c4:3a:9a:fe:c6:23:82:3c:b0:
f1:12:76:8e:7d:4d:b0:25:89:d5:68:4e:da:e8:15:33:39:90:
16:f7:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:59 2025 by rpki-client