Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File: GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier: c2cuI1blv5PMrLY5O9rpEp9qDMUHARr2oZmm199JVP0=
Subject key identifier: 07:F9:11:14:D4:6D:2B:25:D7:15:35:26:F0:AD:46:0D:43:A3:43:60
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer: /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial: 0195E15985685BE9E1FA3642310A2CF7E1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number: 099F
Signing time: Sat 29 Mar 2025 10:01:35 +0000
Manifest this update: Sat 29 Mar 2025 10:01:35 +0000
Manifest next update: Sun 30 Mar 2025 10:01:35 +0000
Files and hashes: 1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: T2sFEpSSTBlv3aZFhp9rj3c6dwyzIcTPiU6bpDyTWdc=)
2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:85:68:5b:e9:e1:fa:36:42:31:0a:2c:f7:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Validity
Not Before: Mar 29 10:01:35 2025 GMT
Not After : Mar 30 10:01:35 2025 GMT
Subject: CN=07f91114d46d2b25d7153526f0ad460d43a34360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:02:62:78:15:94:87:13:21:f3:b5:c3:2a:
9a:e6:80:04:3f:4b:b8:80:9a:da:f3:ba:f3:dd:3a:
6d:23:17:12:be:5e:30:31:0e:91:e0:53:c7:78:0d:
07:48:8c:b8:e7:04:73:88:c9:ca:08:40:5e:3b:e5:
58:dc:bc:f4:54:81:cd:91:73:15:90:43:88:a8:ee:
d0:2c:d1:e3:7b:94:14:9e:46:0b:50:e6:72:e5:6c:
a4:72:f5:9c:4d:1c:49:39:69:25:c6:b1:60:f6:5d:
ad:e6:70:72:b5:db:bc:52:2b:72:28:5b:4f:d7:fc:
7d:b9:17:74:74:d2:4d:e2:76:02:2e:41:e6:84:f6:
9b:ea:97:10:70:09:44:1d:1d:02:4c:e0:9b:6c:23:
21:e9:50:e0:b6:f8:89:73:c2:84:57:22:6a:3a:ca:
85:5a:99:e0:41:ac:2a:99:1f:03:f8:ef:bd:5d:c6:
6f:c6:be:1b:89:f8:92:fb:68:f7:28:7b:48:d2:80:
b9:02:bf:30:94:e2:3e:11:a4:db:76:bd:bb:cb:6f:
1e:55:dc:99:3d:aa:e9:6d:9e:e8:d2:9e:e4:7c:f0:
dc:cc:11:d0:fc:b8:25:bc:c0:52:46:80:c2:ec:de:
02:c8:09:36:3d:75:a5:c2:7f:35:ff:1c:37:1d:13:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F9:11:14:D4:6D:2B:25:D7:15:35:26:F0:AD:46:0D:43:A3:43:60
X509v3 Authority Key Identifier:
keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:ae:96:18:b0:3d:7d:a6:36:45:b1:97:0e:3b:95:a5:a7:
57:c6:89:16:a6:f2:bc:59:d7:65:46:8a:58:4d:64:7d:57:34:
68:4d:8f:a0:d0:fc:15:cf:4a:33:63:f3:73:50:fc:d9:f8:ed:
3d:10:75:e4:6b:2b:60:12:bd:13:e4:63:76:32:c9:77:04:ae:
81:fb:48:da:9a:3f:f5:c3:a3:f5:bd:89:7c:08:4f:d3:9e:19:
ba:88:35:d8:36:90:8a:40:e5:63:3f:99:fa:ac:ca:de:3c:92:
5f:7b:9d:01:aa:4c:49:f5:a3:c0:0c:0a:6a:cb:77:75:a4:e6:
ce:87:fd:40:ca:eb:13:a8:63:0a:2c:d0:7e:db:2b:1f:45:e2:
4c:12:d6:85:23:f9:39:cf:68:9e:3d:38:bd:bd:da:47:ed:bf:
f2:76:37:36:48:29:e3:c8:6c:16:d3:f3:bd:be:c3:31:08:21:
15:79:bb:4e:bc:0a:5c:ec:46:9b:7f:70:4d:4e:75:59:82:ea:
47:4d:52:40:3a:bb:e2:1a:72:1b:c3:94:18:52:71:73:41:db:
91:c6:5b:57:f9:96:22:2e:6f:3f:60:19:21:fd:3f:0c:8b:dd:
33:da:3e:5b:cb:ed:80:d3:30:f1:d5:50:e5:9c:a7:89:63:25:
7b:fa:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:25 2025 by rpki-client