Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
File: GJabxilVETwNBJme7JG92p0vo6U.mft (raw, json)
Hash identifier: 6p1WQIBQrS6irwJTjEZne9XjQeT4DsbyjatE1D3kBqI=
Subject key identifier: 2D:9B:5B:F9:96:7F:7C:F7:A8:D1:62:67:E7:64:D5:93:83:2E:08:90
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Certificate issuer: /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial: 0195361CDC1A86F5C06C9CDAC8B3E98A58D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
Manifest number: 146A
Signing time: Mon 24 Feb 2025 04:00:15 +0000
Manifest this update: Mon 24 Feb 2025 04:00:15 +0000
Manifest next update: Tue 25 Feb 2025 04:00:15 +0000
Files and hashes: 1: 64hfXKK79DNnwBiHMNhcan7gApw.roa (hash: 1pILT2yG6cl/7OeMa23s3WaOano0QbCAXRD1Tm3/Qkg=)
2: GJabxilVETwNBJme7JG92p0vo6U.crl (hash: IL28a6aXNJrst4wl43GsfnNS4Oe1ZgULCZJn7Po7Xwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:36:1c:dc:1a:86:f5:c0:6c:9c:da:c8:b3:e9:8a:58:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Validity
Not Before: Feb 24 04:00:15 2025 GMT
Not After : Feb 25 04:00:15 2025 GMT
Subject: CN=2d9b5bf9967f7cf7a8d16267e764d593832e0890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:16:db:d7:bc:99:76:f4:f3:ea:d0:09:9a:
2c:5f:4a:46:2a:c0:f2:a9:61:09:95:66:4d:58:ce:
8d:d2:90:ea:bd:00:36:7f:63:ca:95:f3:2d:5d:64:
ba:56:9b:f5:ce:4d:7f:2a:ef:fa:ea:1c:22:00:2a:
6a:33:d1:0d:d8:27:5c:01:ec:47:f5:cf:e9:64:b9:
c1:de:2e:0e:d8:b3:dd:05:36:70:8d:9d:66:d8:9f:
1f:41:0b:7f:5a:ab:7a:d4:1e:20:6f:f6:fd:73:0d:
dc:57:39:18:05:b2:63:8a:dc:e8:fc:5e:07:90:61:
38:59:fb:19:5c:a0:78:b9:78:88:fb:35:56:13:9d:
61:50:55:66:06:fd:48:69:b8:7f:d9:76:00:87:69:
b8:6e:8d:b5:c0:21:bb:e3:27:7f:4d:e9:ec:43:ac:
e6:74:f0:26:5f:ee:c6:0d:98:86:0e:eb:ae:ce:cb:
36:55:28:9b:43:0c:c2:46:2e:05:73:4a:dd:98:1a:
2b:9b:43:37:ba:22:d7:3b:fc:a5:a6:69:9f:d6:8a:
52:ed:5c:1d:35:64:de:5f:5e:09:0d:87:2c:14:3a:
70:66:f5:72:36:1e:c0:b4:fb:45:72:b4:2d:c2:27:
9a:5f:11:0d:7c:20:6e:7e:ba:13:19:2c:d7:9b:07:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:5B:F9:96:7F:7C:F7:A8:D1:62:67:E7:64:D5:93:83:2E:08:90
X509v3 Authority Key Identifier:
keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:81:3f:46:4a:32:ec:8e:d9:30:f7:17:50:f0:5a:76:c4:9b:
5b:f0:ec:21:66:cb:be:c6:fd:78:a1:a4:27:1d:89:51:64:31:
5d:c2:47:54:55:ef:95:7e:b0:85:d7:13:56:e5:8b:1e:40:c2:
7c:78:11:b9:61:94:56:00:d1:a9:cb:6a:8b:05:ec:ac:83:dd:
60:00:12:6c:76:da:e7:64:ff:7f:79:fc:f6:63:30:95:f6:2a:
b7:99:17:62:b7:ec:ac:ab:19:01:d9:a9:18:d6:1b:70:ea:37:
86:8b:81:55:b1:75:d1:f6:03:87:f8:a1:fd:04:b8:6e:df:1a:
d1:52:4a:a9:81:93:ef:6d:68:e6:c7:2f:05:2c:9a:62:7c:3a:
43:e9:bb:78:a7:75:54:9f:da:76:65:35:d0:05:a7:1b:9e:2d:
17:6a:54:f6:b4:ab:cd:3d:42:e4:99:37:e6:e2:d8:4d:0e:2f:
33:6e:6d:b1:cd:a2:99:29:1e:ae:43:48:d3:2c:74:b2:a3:78:
f6:61:1e:4f:a7:b4:d1:3b:6e:f1:fb:dd:e0:ee:1f:5d:30:39:
d5:23:02:9f:62:bf:fa:31:f9:7e:2c:14:f5:8d:98:cf:59:42:
1c:7d:9c:ce:66:73:ec:c6:0a:e9:c4:ef:74:b0:b5:3f:2e:68:
51:1a:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:07:16 2025 by rpki-client